Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131332e302f32342d3234203d3e20323635303636.roa
File:                     3137302e3233312e3131332e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          yaoa81C3e1XnwkY1S4AdCSIe34GaJS0XPei7n/H5Mnw=
Subject key identifier:   BD:DB:84:D2:3F:DD:74:A4:5F:F4:06:41:E5:9E:74:76:48:EE:12:04
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       01354F4041ADEA9CAF08EED4C3C6088A6AB30947
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131332e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        170.231.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:4f:40:41:ad:ea:9c:af:08:ee:d4:c3:c6:08:8a:6a:b3:09:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a2:63:8c:85:88:5d:02:e2:26:90:f4:a2:69:
                    76:f5:58:ee:29:48:1c:85:f5:ed:7f:b4:b0:e2:72:
                    15:62:78:69:23:18:6f:ae:cd:6f:9d:2a:dc:29:8e:
                    be:7e:3a:9d:7f:91:7d:e6:95:fd:0d:ec:89:91:c3:
                    9f:4b:e4:11:3c:d9:d5:db:e2:33:50:59:f1:9f:c4:
                    04:76:69:c3:e8:32:c0:37:ad:cb:33:4e:c4:fb:99:
                    12:fe:ec:aa:08:57:f9:8b:9e:d5:da:8a:68:33:da:
                    82:6c:59:44:6d:e1:88:ed:77:56:e8:a1:67:0c:af:
                    77:67:15:2d:02:d6:ef:18:e7:4a:20:b0:27:60:2e:
                    b7:2c:2f:df:13:48:55:78:b6:ec:b2:3d:c9:db:a7:
                    fd:87:df:0b:3e:6c:0a:10:06:0e:b8:36:33:8d:52:
                    6c:2b:f3:9a:14:9c:48:9b:2f:4d:e4:a6:be:d4:87:
                    38:ff:0e:d3:9b:f1:32:8c:17:fc:78:11:03:b7:79:
                    71:fe:44:da:bd:67:d1:e6:56:d7:6b:b2:4c:59:41:
                    43:bf:19:5b:f7:70:5f:e4:66:ee:39:37:f9:4e:ae:
                    fc:a9:10:0e:1b:fa:8b:20:85:50:4e:b0:84:91:d1:
                    51:13:9b:11:29:0c:c4:92:a3:96:3b:15:a7:e0:b9:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:84:D2:3F:DD:74:A4:5F:F4:06:41:E5:9E:74:76:48:EE:12:04
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131332e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:33:a5:eb:fb:a0:00:f4:47:d8:44:ad:c0:7a:13:e5:31:eb:
         7f:c3:3d:78:d9:09:13:b2:6b:7f:17:8d:7f:f3:70:57:cb:89:
         27:f4:f3:72:d0:db:e4:7e:ed:60:b0:dd:a6:db:46:62:3d:0e:
         ca:99:aa:1c:58:ee:92:cb:ce:9b:c6:94:ae:fd:ef:a5:0f:1b:
         c0:74:26:2c:d9:08:67:4e:df:03:b6:5b:e1:87:b9:21:69:50:
         05:e9:e0:59:1c:b8:d6:1e:07:fb:01:00:1d:fd:f1:7f:30:a2:
         06:20:25:df:89:1c:87:49:77:99:08:ec:46:34:ae:54:ee:cd:
         5f:fe:d6:17:1e:c5:e5:fa:df:62:fc:75:9f:f1:09:da:24:fc:
         d2:f0:dd:65:d1:9d:5a:37:b4:13:f6:3c:d1:62:1d:83:f4:f4:
         36:68:c6:c7:07:b2:b4:4c:ac:77:48:ef:b1:31:38:c3:2b:7f:
         a0:1f:ac:13:76:2b:f6:88:34:34:e1:b5:6a:d8:9b:6a:de:bc:
         9c:a4:33:96:b9:bb:cf:8c:35:80:a6:bf:0f:97:0f:aa:9c:17:
         9a:e7:9d:12:f7:79:47:53:fc:7a:54:0e:43:8b:ff:2a:d6:73:
         2d:91:c0:61:e6:ea:9c:c2:97:9b:30:24:5a:11:b7:ea:e3:99:
         ee:de:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org