Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32342d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230322e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          WQEhVpjUWLd3zLCK6buzMuSFbvqvHmQL6w5IbpIQKFA=
Subject key identifier:   87:DA:1E:8C:39:56:FA:F3:32:4F:65:8E:C5:F3:BB:3C:F2:D8:B0:A3
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       036E9D6B16E035A6584CB5DABC7B7650A5A45BA2
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:30 +0000
ROA not before:           Sat 05 Jun 2021 20:31:30 +0000
ROA not after:            Sat 04 Jun 2022 20:36:30 +0000
asID:                     265066
IP address blocks:        168.121.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6e:9d:6b:16:e0:35:a6:58:4c:b5:da:bc:7b:76:50:a5:a4:5b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:30 2021 GMT
            Not After : Jun  4 20:36:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:91:6e:ff:bc:46:26:be:9a:31:64:07:66:
                    e3:48:06:35:2d:e5:6c:b6:9c:c1:bb:c1:1d:94:29:
                    0b:0c:0c:c6:bf:5e:9e:d1:23:32:1d:95:85:06:09:
                    bc:01:47:ff:bc:2b:c4:40:34:3a:ff:75:03:b0:c1:
                    48:c3:e7:7a:cd:c9:46:06:e0:50:ea:7f:65:9b:d0:
                    ee:fd:bf:b6:17:df:3e:a0:c1:f9:cc:77:cc:ef:e2:
                    8c:7b:e6:04:44:f5:f0:67:1f:db:6b:c6:df:78:89:
                    81:ca:68:8e:e4:7b:36:60:05:07:3c:89:59:0a:bb:
                    5c:70:bd:70:d3:75:0d:b8:ef:d8:79:51:b7:53:a6:
                    3e:42:7f:6c:49:a4:ff:55:c4:5e:d4:84:5c:ae:13:
                    bd:29:18:fb:6e:83:5b:a1:d8:bd:58:a3:78:e6:4f:
                    0f:89:b3:a4:eb:5c:88:cc:7f:ea:67:d0:8c:41:5b:
                    52:ec:a8:cd:24:6f:55:14:13:09:07:93:6b:02:42:
                    79:b0:bc:49:01:da:c5:7e:91:f4:63:a5:89:74:d6:
                    21:24:9d:fc:98:96:18:e0:73:7e:c0:24:30:3a:88:
                    25:d4:ec:93:85:59:73:5c:f3:a1:94:61:9f:85:08:
                    18:61:e9:07:c6:70:be:e5:96:3b:6a:14:a0:4a:99:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DA:1E:8C:39:56:FA:F3:32:4F:65:8E:C5:F3:BB:3C:F2:D8:B0:A3
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230322e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:55:46:03:c8:df:b0:0b:84:d3:6e:1b:bc:7e:41:a6:7c:
         c2:92:0d:e9:a5:ce:96:51:04:55:fa:22:91:f8:73:d2:28:22:
         0c:05:61:31:24:31:10:60:23:4d:d1:d5:52:2d:b8:bf:65:01:
         3a:2a:ab:91:61:b1:12:d7:79:34:68:d5:98:02:15:9f:7b:e9:
         62:e2:77:56:70:0b:4f:44:63:b2:42:56:22:65:cf:bc:a2:e7:
         14:80:6c:7d:39:30:f9:71:06:99:f7:0e:f8:80:fd:a2:48:22:
         71:6b:1f:0f:da:05:28:cb:97:f4:b0:97:cf:89:9c:72:f6:9a:
         9a:ad:ee:24:8d:74:cf:78:22:39:6e:e5:b5:fd:2e:17:7c:45:
         15:0f:ed:db:0a:40:61:7f:72:99:54:1d:20:ee:8a:f1:70:9d:
         96:24:93:75:4b:be:4f:c9:5a:fd:a8:53:50:b2:df:b5:11:45:
         6d:e8:69:ff:27:fc:dc:1e:af:32:61:16:4a:0c:56:92:52:23:
         6c:51:46:c6:1c:35:18:68:53:12:db:91:68:9f:06:cf:2f:d8:
         d1:53:d3:5d:c8:ae:f2:9b:53:7e:af:56:14:62:be:b9:85:ff:
         97:d9:bf:4c:93:2d:bc:82:ad:d2:e8:f5:4c:b0:2a:35:ac:c7:
         93:30:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org