Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32332d3233203d3e20323635303636.roa
File:                     3136382e3132312e3230322e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          62Ge1ytn3ODPkVYH+fvMEgAZRHT+EjvSWbQHwiIObj8=
Subject key identifier:   66:8B:3C:D6:28:A6:4D:A8:FA:C5:5D:59:99:F3:51:56:45:A6:B2:7C
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       51F6B2E05D2E74B9FDE522526F65E723CB993CB1
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        168.121.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:b2:e0:5d:2e:74:b9:fd:e5:22:52:6f:65:e7:23:cb:99:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject: CN=3082010A0282010100C23C1800551A1BA6B7C40DF491A9FAD567F9124AF42F00E66DC7A4E54C97BCA5636A55CA397A3132D030DAAF998662BA3144E196D80FD5665295AA1F6D93EF31EB839EB71A672EDC47D3AD5BDF8D13A3A9D830BB9749AFC62EBD150F5C16201515086C24D425B4E727E1A123261D73613CE3427F85C325F13185284401434D81B217C775F614ED6FAF78C7CBB749D337394500B2C62E4F730F1260A9549AA6A450B42778D21DB13C4611E1C2D438583D3EDF3AA9744878113D7D69F15CA07751E2A083903CB804EA7CCAB0C49DD9E422F187D7730630209202A1662C518DA4C705DACEF5B9757C9F41BF18649F8119859A46D6E23208C74FFCC402B03EC16BB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:18:00:55:1a:1b:a6:b7:c4:0d:f4:91:a9:
                    fa:d5:67:f9:12:4a:f4:2f:00:e6:6d:c7:a4:e5:4c:
                    97:bc:a5:63:6a:55:ca:39:7a:31:32:d0:30:da:af:
                    99:86:62:ba:31:44:e1:96:d8:0f:d5:66:52:95:aa:
                    1f:6d:93:ef:31:eb:83:9e:b7:1a:67:2e:dc:47:d3:
                    ad:5b:df:8d:13:a3:a9:d8:30:bb:97:49:af:c6:2e:
                    bd:15:0f:5c:16:20:15:15:08:6c:24:d4:25:b4:e7:
                    27:e1:a1:23:26:1d:73:61:3c:e3:42:7f:85:c3:25:
                    f1:31:85:28:44:01:43:4d:81:b2:17:c7:75:f6:14:
                    ed:6f:af:78:c7:cb:b7:49:d3:37:39:45:00:b2:c6:
                    2e:4f:73:0f:12:60:a9:54:9a:a6:a4:50:b4:27:78:
                    d2:1d:b1:3c:46:11:e1:c2:d4:38:58:3d:3e:df:3a:
                    a9:74:48:78:11:3d:7d:69:f1:5c:a0:77:51:e2:a0:
                    83:90:3c:b8:04:ea:7c:ca:b0:c4:9d:d9:e4:22:f1:
                    87:d7:73:06:30:20:92:02:a1:66:2c:51:8d:a4:c7:
                    05:da:ce:f5:b9:75:7c:9f:41:bf:18:64:9f:81:19:
                    85:9a:46:d6:e2:32:08:c7:4f:fc:c4:02:b0:3e:c1:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:3C:D6:28:A6:4D:A8:FA:C5:5D:59:99:F3:51:56:45:A6:B2:7C
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:17:7b:40:d8:11:ad:9d:1a:88:78:3f:d0:2a:2e:71:38:
         99:ce:d3:86:26:14:6c:79:02:73:3b:d4:11:7b:b8:21:1e:26:
         59:5d:76:53:0d:d2:e4:fe:30:3f:16:5c:1f:34:26:87:64:55:
         ec:8e:0e:e8:35:fa:e3:ec:06:3d:34:4e:89:80:fb:56:d7:b8:
         79:7a:1f:92:d0:9f:15:6a:3b:ea:3c:02:0d:02:c4:33:06:f1:
         45:aa:9c:47:1f:fc:f3:1e:f6:51:84:e0:fd:6d:40:6b:da:f0:
         20:ae:2b:d5:e8:17:91:34:16:5c:1c:be:27:74:ea:24:e6:f0:
         3c:a5:21:3e:15:8f:71:52:81:90:1c:cd:af:07:f5:4f:d9:06:
         32:2d:9b:1b:37:94:9d:ba:ff:1e:c9:47:a5:36:bc:c0:f5:f1:
         90:fd:a6:7b:c6:7c:b1:15:d0:51:53:a7:7a:fd:62:c2:48:54:
         1c:9c:e8:9a:a8:d2:1b:42:47:15:9a:38:72:6c:a8:95:00:7b:
         aa:1c:b4:7b:64:cc:26:91:80:ff:fe:b7:79:e8:5a:65:94:ca:
         5b:dd:db:85:55:0f:e3:05:8e:8e:1a:db:4c:d0:2a:8c:92:fe:
         ac:e4:2d:cc:2d:f9:d4:99:94:2e:79:c3:de:16:aa:22:a4:06:
         ff:6a:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org