Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32342d3234203d3e20323635303636.roa
File:                     3137302e3233312e3131322e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          RmABRvgvx23BJ5ftwo5F+vyPBZbipky0y+DQEwQgJ44=
Subject key identifier:   C2:9E:A9:49:35:01:F6:DF:AF:77:63:F8:44:50:03:5B:AB:02:95:88
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       0A5D41BFA15D76196416BD9F097BDB6B0B8D023A
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:34 +0000
ROA not before:           Sat 05 Jun 2021 20:31:34 +0000
ROA not after:            Sat 04 Jun 2022 20:36:34 +0000
asID:                     265066
IP address blocks:        170.231.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5d:41:bf:a1:5d:76:19:64:16:bd:9f:09:7b:db:6b:0b:8d:02:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:34 2021 GMT
            Not After : Jun  4 20:36:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:47:4f:6f:7e:96:e1:40:a8:2e:44:82:06:
                    78:64:55:ff:2d:a8:4f:ff:6b:64:67:5c:51:bd:c7:
                    b1:67:e4:45:68:e8:bc:62:eb:0f:3d:63:c7:6a:a5:
                    00:c0:8a:42:4f:9c:9c:c8:c7:ba:09:b0:9d:bc:60:
                    32:b3:a7:86:99:81:f5:57:9b:3e:96:16:48:6c:b9:
                    5f:ca:12:f0:1e:5d:c8:f5:8b:c7:83:7e:87:d3:33:
                    ea:2d:2d:55:fb:3f:ac:35:38:29:74:05:1f:64:5a:
                    f1:15:eb:f7:ab:c8:a8:88:38:3d:5b:fc:07:d0:26:
                    4c:60:ec:02:1f:13:a7:63:27:fe:39:95:0f:91:e7:
                    64:13:00:e8:bb:61:66:32:4b:de:a2:5d:b6:00:23:
                    fc:34:45:07:1e:0f:9a:c8:65:2f:73:fa:d1:ee:48:
                    4e:a9:ca:ab:ae:b7:08:f9:18:2e:c2:1e:d2:44:0e:
                    34:9b:cd:84:1f:14:94:a0:f1:fc:ac:c8:1b:15:d5:
                    a7:c9:32:a4:de:be:6b:79:4b:d8:30:2f:1e:d4:ea:
                    52:2d:1c:34:95:79:fb:06:25:e5:e5:e5:03:5f:dd:
                    7e:9b:61:84:30:bf:ea:f1:95:56:3e:ba:3e:df:b3:
                    52:d0:0c:25:ec:37:04:78:68:17:96:3d:a8:24:e7:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9E:A9:49:35:01:F6:DF:AF:77:63:F8:44:50:03:5B:AB:02:95:88
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:03:33:2a:4d:9e:52:6b:1b:57:e0:dc:d0:ff:80:78:8b:
         f8:8b:51:27:24:61:ad:91:fd:7e:90:9f:15:7b:ab:54:f0:e4:
         ae:14:0f:33:2e:7a:94:ed:87:38:25:a4:15:05:36:4e:39:2f:
         7b:85:ee:7a:35:f4:9e:6c:5d:e7:db:03:f9:01:05:3f:9c:6b:
         9c:b4:09:d0:d4:75:52:9f:c0:4a:bf:b8:e5:11:18:df:16:79:
         c8:37:89:3a:95:06:f8:b6:6e:75:53:96:2b:67:64:9f:72:24:
         fd:66:99:04:d5:66:4f:a2:1c:d6:db:a7:74:bd:9d:7e:59:a5:
         29:ab:8b:14:02:4d:44:c0:cc:ff:4c:89:b8:d5:9d:87:45:86:
         6e:e0:dd:72:40:c7:49:59:2a:14:5e:98:54:61:2d:21:63:dc:
         b2:3f:42:eb:b0:d9:89:78:4a:2a:99:a4:54:6b:01:1b:71:6c:
         3f:db:a7:00:56:a7:4c:6a:fd:5f:07:7a:b9:a7:4e:3f:dd:75:
         7a:96:da:7e:97:e6:52:a7:6b:ea:56:f1:80:5d:31:3b:82:3e:
         a1:c6:9b:06:bc:c3:55:32:2e:dd:b5:4a:e5:c2:0b:11:c5:91:
         d9:b0:b1:5b:6b:18:8d:9a:b6:46:2a:84:15:d2:1b:60:74:64:
         0d:85:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org