Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131352e302f32342d3234203d3e20323635303636.roa
File:                     3137302e3233312e3131352e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          wL4nsaXazXdHsxHDxW3TGXS8pfHwT/8kPPNSt2ZrQLc=
Subject key identifier:   1B:3B:C4:C0:A1:7B:D2:57:23:40:AE:D1:B5:70:99:7A:50:02:E4:F9
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       367E29903A239436FEB0A3414DA67016064F7159
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131352e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        170.231.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:29:90:3a:23:94:36:fe:b0:a3:41:4d:a6:70:16:06:4f:71:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:9c:9a:2d:93:a9:f0:b3:fd:d8:2b:69:fd:
                    1c:92:04:60:17:93:4b:77:8f:b2:c1:e5:1e:e8:08:
                    c7:e4:7a:8a:c4:0c:dd:5f:39:ac:6a:78:8d:cb:02:
                    b4:a6:e7:b4:32:04:9d:f4:05:3e:fa:c7:90:1f:fd:
                    cf:95:44:30:3c:b6:bd:15:f9:f3:81:09:fa:54:f2:
                    93:5e:36:8e:9c:2d:ef:d5:3d:4e:d3:ad:5f:61:e5:
                    4a:0b:47:67:3e:7a:c7:80:7b:cd:8b:6c:13:b8:98:
                    b4:f3:5e:1b:5d:43:18:25:95:84:14:0d:f5:6c:1f:
                    a2:9f:01:5b:bb:0a:35:05:b4:c8:73:73:2d:a5:8e:
                    67:60:98:e4:5d:5d:17:42:84:2d:93:96:c7:68:27:
                    96:cf:f5:3d:c4:fc:2a:b3:10:2e:ff:fe:18:55:f2:
                    13:89:9b:5e:c5:fd:19:92:43:b1:6e:70:07:26:f0:
                    f8:31:27:3e:4c:8d:c2:15:78:03:67:a1:93:4d:14:
                    7b:48:85:6f:93:52:4e:16:8c:14:40:3e:cb:ba:86:
                    91:cd:58:c3:34:e6:4f:72:0d:20:3b:29:df:da:0d:
                    73:f6:44:94:cd:96:4e:4a:a8:90:0d:1c:ea:a0:a7:
                    cd:db:71:93:e5:20:9a:4c:65:1c:d1:1f:ab:db:be:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:C4:C0:A1:7B:D2:57:23:40:AE:D1:B5:70:99:7A:50:02:E4:F9
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131352e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:d5:bc:05:a2:87:c4:a9:f6:5d:3e:11:cd:7e:5e:c7:64:
         4d:84:56:7f:27:60:f1:6c:be:8b:0a:01:3e:e7:24:07:98:0b:
         9b:46:8d:95:01:64:b0:db:62:4e:aa:ff:7e:bb:63:3e:26:4f:
         8c:6f:bd:e4:ca:3e:40:ec:73:4f:25:f6:32:08:2f:ea:a2:72:
         4c:84:f6:39:b5:b1:80:5c:b0:3e:2d:3d:b9:ee:ec:97:a1:c1:
         cf:80:fb:a8:fd:d9:67:6a:65:4b:d1:dd:be:77:e8:da:df:fb:
         2a:4f:fa:c3:1b:3e:ef:87:f6:1f:2c:ff:44:8f:dd:71:2a:37:
         87:c8:d6:f4:06:7f:f3:47:76:10:e4:c5:a2:43:75:9a:3a:c3:
         89:a6:8a:98:3e:4f:a1:1b:56:dc:d7:29:7c:4a:6e:ff:2c:f3:
         8f:ac:a0:40:86:da:ba:28:fe:e8:83:90:47:54:b1:f2:84:51:
         65:e2:60:08:68:bf:8e:ac:00:0d:19:42:41:df:b6:e2:51:6e:
         30:e2:ea:83:69:21:b9:2a:bd:aa:46:39:dd:f5:08:a6:8f:93:
         f6:10:3f:54:74:03:e3:c1:ef:49:a6:0f:02:d1:75:12:14:29:
         73:b6:71:45:a3:fb:fe:1c:e5:a6:4e:ac:2e:b7:34:45:17:c4:
         17:d8:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org