Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3232203d3e20323635303636.roa
File:                     3137302e37392e39362e302f32322d3232203d3e20323635303636.roa (raw, json)
Hash identifier:          qDB/7f1hDMqKJYslxgIze79T4Dvtce6QW+aP4W2YVdQ=
Subject key identifier:   25:70:18:74:D7:17:9A:A3:DF:79:E3:29:E5:00:31:18:E5:85:F3:8F
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       A8B476BFAA8AC0C65DA6795486A41EAEC1D960
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3232203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        170.79.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:b4:76:bf:aa:8a:c0:c6:5d:a6:79:54:86:a4:1e:ae:c1:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:21:a1:43:21:a1:ca:e8:13:a9:7e:0f:1b:
                    7b:fc:09:17:0e:4f:69:58:0c:61:a5:6c:8a:30:58:
                    8a:de:3f:04:e0:1f:1c:87:d9:7f:0f:ee:be:ca:68:
                    49:e6:f6:b4:47:04:cd:c3:c9:51:f8:ba:b4:ad:88:
                    7a:61:cd:d6:1a:d7:83:eb:a8:5e:42:ed:ea:ea:6e:
                    52:16:83:4b:3e:b6:2a:c2:61:d5:5f:e0:a5:cc:79:
                    3a:f3:7b:ea:b3:1f:f4:88:15:e5:49:f9:4f:b2:7e:
                    a6:8c:00:1f:e9:a8:4a:c1:70:31:e8:8b:cc:72:f1:
                    0e:a1:38:96:4e:90:d9:49:21:72:9b:e5:7b:66:d4:
                    73:7d:ae:5e:a4:10:ca:bd:5c:0a:41:e8:4e:c7:2a:
                    4b:3b:6c:14:4f:68:2e:89:8b:ea:a9:04:e9:65:56:
                    e3:15:2d:9b:01:85:12:10:b5:8d:16:af:72:22:b7:
                    99:a0:cf:e5:9a:c6:a7:0d:da:a2:ed:40:8a:2f:db:
                    0e:af:23:12:de:60:1d:30:e2:62:e5:b6:c8:6a:2d:
                    f0:5a:16:10:18:f2:03:18:0d:32:d9:0e:bb:7f:fc:
                    93:6b:39:e8:07:62:49:b0:97:35:53:87:bf:69:94:
                    76:4c:14:49:60:77:70:af:4e:e5:91:7e:01:04:8c:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:18:74:D7:17:9A:A3:DF:79:E3:29:E5:00:31:18:E5:85:F3:8F
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3232203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:61:4d:c0:87:d7:69:32:f4:15:71:97:04:73:d7:66:01:
         b6:bb:4f:8f:6d:df:d8:3e:a1:6f:08:24:2d:85:4f:5e:b8:7f:
         4b:53:49:83:d6:42:45:74:af:30:93:4a:84:9d:71:33:9f:65:
         ae:84:11:de:4d:5d:b0:78:ce:fe:53:b4:ed:69:cd:7c:65:c8:
         c8:ff:62:8e:b2:0f:9a:3f:19:c1:15:c1:5e:0a:14:23:c9:ee:
         4f:74:2d:fe:c6:aa:a4:0e:fb:c3:b1:8f:c2:c9:97:af:58:23:
         ae:98:c6:f5:6a:ea:ae:fd:b6:60:18:4a:91:00:73:ea:59:e2:
         9c:c9:0e:a8:6f:35:f2:dc:44:23:25:59:4e:95:2e:33:f8:71:
         bf:00:2f:6d:d3:c5:39:e3:7d:4d:9c:92:f8:65:5f:99:46:9b:
         23:c1:81:ea:90:5f:d1:20:53:96:28:69:54:fd:53:21:46:42:
         90:5f:df:b6:b1:6c:ee:72:da:24:ef:ba:a9:20:c3:80:0f:d1:
         3e:5a:3e:a4:79:3b:06:00:8a:64:88:f1:1a:3c:03:3a:91:7d:
         50:28:71:3d:a9:65:3d:94:fd:37:2e:cb:c9:a9:6f:e9:98:94:
         0a:c9:b8:fe:8b:a4:5a:fe:de:e6:e9:33:8e:af:f9:ed:31:9e:
         d7:ea:17:dc
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUAKi0dr+qisDGXaZ5VIakHq7B2WAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjdaFw0yMjA2MDQyMDM2MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2NjIxQTE0MzIxQTFDQUU4
MTNBOTdFMEYxQjdCRkMwOTE3MEU0RjY5NTgwQzYxQTU2QzhBMzA1ODhBREUzRjA0
RTAxRjFDODdEOTdGMEZFRUJFQ0E2ODQ5RTZGNkI0NDcwNENEQzNDOTUxRjhCQUI0
QUQ4ODdBNjFDREQ2MUFENzgzRUJBODVFNDJFREVBRUE2RTUyMTY4MzRCM0VCNjJB
QzI2MUQ1NUZFMEE1Q0M3OTNBRjM3QkVBQjMxRkY0ODgxNUU1NDlGOTRGQjI3RUE2
OEMwMDFGRTlBODRBQzE3MDMxRTg4QkNDNzJGMTBFQTEzODk2NEU5MEQ5NDkyMTcy
OUJFNTdCNjZENDczN0RBRTVFQTQxMENBQkQ1QzBBNDFFODRFQzcyQTRCM0I2QzE0
NEY2ODJFODk4QkVBQTkwNEU5NjU1NkUzMTUyRDlCMDE4NTEyMTBCNThEMTZBRjcy
MjJCNzk5QTBDRkU1OUFDNkE3MEREQUEyRUQ0MDhBMkZEQjBFQUYyMzEyREU2MDFE
MzBFMjYyRTVCNkM4NkEyREYwNUExNjEwMThGMjAzMTgwRDMyRDkwRUJCN0ZGQzkz
NkIzOUU4MDc2MjQ5QjA5NzM1NTM4N0JGNjk5NDc2NEMxNDQ5NjA3NzcwQUY0RUU1
OTE3RTAxMDQ4Q0EzNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2YhoUMhocroE6l+Dxt7/AkXDk9pWAxhpWyKMFiK3j8E4B8ch9l/
D+6+ymhJ5va0RwTNw8lR+Lq0rYh6Yc3WGteD66heQu3q6m5SFoNLPrYqwmHVX+Cl
zHk683vqsx/0iBXlSflPsn6mjAAf6ahKwXAx6IvMcvEOoTiWTpDZSSFym+V7ZtRz
fa5epBDKvVwKQehOxypLO2wUT2guiYvqqQTpZVbjFS2bAYUSELWNFq9yIreZoM/l
msanDdqi7UCKL9sOryMS3mAdMOJi5bbIai3wWhYQGPIDGA0y2Q67f/yTaznoB2JJ
sJc1U4e/aZR2TBRJYHdwr07lkX4BBIyjYQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCVwGHTXF5qj33njKeUAMRjlhfOPMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzczOTJlMzkzNjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpP
YDANBgkqhkiG9w0BAQsFAAOCAQEAXlJhTcCH12ky9BVxlwRz12YBtrtPj23f2D6h
bwgkLYVPXrh/S1NJg9ZCRXSvMJNKhJ1xM59lroQR3k1dsHjO/lO07WnNfGXIyP9i
jrIPmj8ZwRXBXgoUI8nuT3Qt/saqpA77w7GPwsmXr1gjrpjG9Wrqrv22YBhKkQBz
6lninMkOqG818txEIyVZTpUuM/hxvwAvbdPFOeN9TZyS+GVfmUabI8GB6pBf0SBT
lihpVP1TIUZCkF/ftrFs7nLaJO+6qSDDgA/RPlo+pHk7BgCKZIjxGjwDOpF9UChx
PallPZT9Ny7Lyalv6ZiUCsm4/oukWv7e5ukzjq/57TGe1+oX3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org