Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230332e302f32342d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230332e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          V18S4qPnnU5tEvWGS+hgju6gH+M7tVU4NuWY0r7YtyI=
Subject key identifier:   3C:D6:6B:50:4A:33:65:92:2E:7B:B3:E9:60:7E:52:E5:41:10:27:7D
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       1AD95968E207676912DFFD844081B49F0FCC29FB
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230332e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        168.121.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d9:59:68:e2:07:67:69:12:df:fd:84:40:81:b4:9f:0f:cc:29:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:41:0e:d5:05:09:5a:05:3f:3a:23:a8:84:
                    9b:19:df:4a:66:b1:4a:5f:95:9a:f2:ef:db:18:0f:
                    24:b9:d1:77:71:6c:2a:6c:9b:1b:c3:06:e7:5e:71:
                    f0:d6:b9:7d:79:e1:6c:03:b5:bc:b2:5c:e6:f6:b6:
                    cd:ad:75:41:58:2f:82:ca:2c:eb:11:61:a6:be:89:
                    73:71:38:d6:55:29:95:86:85:6c:65:84:8f:e8:0b:
                    aa:54:16:77:fd:72:2b:5c:b2:3b:7d:fe:69:7f:37:
                    5f:2c:69:9f:86:c5:84:57:4c:28:28:7a:78:77:ac:
                    04:8f:46:e7:c5:81:46:87:53:ce:82:0c:6c:27:04:
                    49:d0:2c:f4:dd:d1:32:46:e1:34:5b:eb:f6:de:6e:
                    ad:11:86:86:47:17:b9:cf:6c:e5:39:9a:f6:44:10:
                    dd:87:d5:09:2a:7e:a4:7c:76:1a:26:25:96:0b:24:
                    ff:6c:f2:10:df:d9:9f:e4:8a:5a:bf:4e:18:6c:65:
                    72:de:10:22:22:a9:d6:c6:68:57:08:17:2f:cc:22:
                    55:f7:c4:c1:c9:f4:d6:42:10:57:a2:47:6e:4a:7e:
                    0a:46:d6:54:98:7d:93:76:cf:26:49:23:ab:06:73:
                    a7:7d:b5:b4:05:f0:d5:ce:57:78:6f:fc:f6:3b:16:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D6:6B:50:4A:33:65:92:2E:7B:B3:E9:60:7E:52:E5:41:10:27:7D
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230332e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:7c:52:4b:99:5f:2d:e1:cf:6b:41:66:c7:8b:1b:18:fb:
         49:51:d6:60:c9:63:a6:50:06:c9:21:31:a4:03:78:8b:35:2b:
         42:e8:8a:56:2d:a8:0d:33:e4:82:d2:05:74:6b:17:19:99:ce:
         15:f5:44:0d:c0:3f:18:06:fa:f4:01:9e:30:41:d2:e8:e5:95:
         09:eb:ff:d6:91:4c:2c:e8:09:07:50:54:7c:c6:bb:31:35:91:
         92:78:07:31:d0:1b:d5:ca:c8:ed:4a:1e:ad:c1:76:68:43:f5:
         e5:82:b1:c0:81:28:ab:a7:dd:ad:71:4c:df:4c:67:e6:72:7a:
         73:95:dc:c1:b0:21:26:1e:94:d5:e9:2a:b9:06:ca:c6:a8:16:
         e8:97:8e:83:00:31:3f:4e:27:a8:cc:1c:a0:17:2a:1b:a7:87:
         12:9f:11:40:84:39:ee:fd:a8:1c:45:88:f2:73:32:f2:ee:dc:
         7c:62:23:46:5c:ff:7d:0e:a5:b1:31:e6:44:31:58:23:c4:d4:
         5f:01:7b:20:6f:5c:c7:5c:02:ca:d9:85:58:d2:b5:f6:a0:35:
         f8:3f:9e:05:8b:5b:76:54:dd:2e:5d:73:64:a5:af:07:5c:06:
         51:8e:9b:d8:25:48:1a:4c:42:25:90:18:57:99:4f:d6:13:47:
         9a:81:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org