Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32332d3233203d3e20323635303636.roa
File:                     3137302e37392e39362e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          IuWRGcaNR8ZsvrnS8VaBvMVgbsFA/d37cxR+LlTkAB4=
Subject key identifier:   D2:11:3C:1E:4B:00:FB:B8:A8:05:38:6A:9D:64:0E:FF:9B:D4:FB:94
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       5B596D87B4F66D0F0266B07AD927F3A7218EDC2F
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:29 +0000
ROA not before:           Sat 05 Jun 2021 20:31:29 +0000
ROA not after:            Sat 04 Jun 2022 20:36:29 +0000
asID:                     265066
IP address blocks:        170.79.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:59:6d:87:b4:f6:6d:0f:02:66:b0:7a:d9:27:f3:a7:21:8e:dc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:29 2021 GMT
            Not After : Jun  4 20:36:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:67:f4:64:f9:74:83:67:b2:1f:cf:c2:21:
                    df:21:f3:d8:02:3a:5f:fa:0a:12:9a:ad:f7:7c:e1:
                    a5:7f:b2:45:28:c0:13:6e:80:8c:d0:06:e2:13:b3:
                    f0:ec:f4:4a:0d:31:84:b2:6d:60:b7:9d:3f:b6:df:
                    6f:47:33:b2:c5:4d:d8:95:7d:c3:1c:56:f5:84:46:
                    89:b9:81:aa:f1:bd:38:e1:ad:04:5a:87:33:52:cf:
                    70:b0:49:09:8d:fe:c8:0c:f1:7c:62:c2:e0:87:56:
                    2c:65:63:a2:62:84:4f:6a:03:6a:68:60:d4:ff:16:
                    e5:0c:4b:32:d7:5b:17:a5:78:66:2a:a4:97:dd:24:
                    e8:ed:1b:de:57:fe:f0:23:d3:de:f3:87:9d:74:fd:
                    6b:0f:ab:72:2b:68:91:5a:42:94:1b:e5:c9:bb:3d:
                    c6:2f:d5:f7:8e:5e:19:1d:19:dd:54:d5:cb:46:8a:
                    24:a1:8a:8f:68:7d:b0:ca:75:66:ea:43:4a:60:3f:
                    b4:90:27:98:21:07:aa:f2:1e:ca:76:78:d8:b1:3b:
                    3e:b3:a7:b3:60:73:2a:6e:5c:82:49:22:2f:95:49:
                    49:03:0e:24:bb:9a:64:43:ce:08:eb:c5:21:10:a5:
                    df:59:5d:f6:a0:c3:ca:94:2d:f5:b6:43:d1:19:83:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:11:3C:1E:4B:00:FB:B8:A8:05:38:6A:9D:64:0E:FF:9B:D4:FB:94
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:6d:d0:42:93:1e:d2:97:29:d9:1b:6f:c6:28:d5:cf:0a:
         48:d4:66:81:09:5f:0b:17:af:bd:88:d0:aa:36:e1:01:57:49:
         81:9a:97:b3:f5:0a:dd:1c:20:0c:5c:f8:4d:af:39:e1:01:51:
         07:9f:25:5f:fc:49:f0:b6:42:b1:28:16:b5:10:2a:b5:72:b2:
         d9:55:9e:70:87:f1:d3:00:11:6e:52:96:c2:cf:56:50:11:5e:
         e7:67:3b:e8:25:83:24:ab:69:e6:f7:19:78:b0:ee:f3:1b:b3:
         0c:fa:9a:b7:cb:83:99:12:65:6e:53:08:36:58:43:6f:bd:60:
         d6:65:45:39:42:8b:92:5f:a9:97:51:e1:39:e4:21:53:db:68:
         0c:32:19:6f:7e:af:73:ac:8f:3b:13:f3:b9:c8:d6:4e:42:f8:
         26:59:db:e0:81:23:58:8c:0a:76:c0:99:4f:c2:a2:8b:38:9d:
         3c:da:02:04:d8:2d:51:55:b6:f1:aa:34:58:57:6c:2f:e0:69:
         ca:9a:24:14:08:79:49:ab:7d:c9:58:6d:22:20:07:c3:db:fd:
         39:4e:62:73:e2:70:51:16:45:ac:41:3d:db:7a:a0:3b:ab:2b:
         f3:24:73:80:50:95:69:34:a5:7a:31:fd:bf:25:7f:d0:de:44:
         5c:6e:e6:c8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUW1lth7T2bQ8CZrB62SfzpyGO3C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjlaFw0yMjA2MDQyMDM2MjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREEyRDY3RjQ2NEY5NzQ4MzY3
QjIxRkNGQzIyMURGMjFGM0Q4MDIzQTVGRkEwQTEyOUFBREY3N0NFMUE1N0ZCMjQ1
MjhDMDEzNkU4MDhDRDAwNkUyMTNCM0YwRUNGNDRBMEQzMTg0QjI2RDYwQjc5RDNG
QjZERjZGNDczM0IyQzU0REQ4OTU3REMzMUM1NkY1ODQ0Njg5Qjk4MUFBRjFCRDM4
RTFBRDA0NUE4NzMzNTJDRjcwQjA0OTA5OERGRUM4MENGMTdDNjJDMkUwODc1NjJD
NjU2M0EyNjI4NDRGNkEwMzZBNjg2MEQ0RkYxNkU1MEM0QjMyRDc1QjE3QTU3ODY2
MkFBNDk3REQyNEU4RUQxQkRFNTdGRUYwMjNEM0RFRjM4NzlENzRGRDZCMEZBQjcy
MkI2ODkxNUE0Mjk0MUJFNUM5QkIzREM2MkZENUY3OEU1RTE5MUQxOURENTRENUNC
NDY4QTI0QTE4QThGNjg3REIwQ0E3NTY2RUE0MzRBNjAzRkI0OTAyNzk4MjEwN0FB
RjIxRUNBNzY3OEQ4QjEzQjNFQjNBN0IzNjA3MzJBNkU1QzgyNDkyMjJGOTU0OTQ5
MDMwRTI0QkI5QTY0NDNDRTA4RUJDNTIxMTBBNURGNTk1REY2QTBDM0NBOTQyREY1
QjY0M0QxMTk4MzkxNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2i1n9GT5dINnsh/PwiHfIfPYAjpf+goSmq33fOGlf7JFKMATboCM
0AbiE7Pw7PRKDTGEsm1gt50/tt9vRzOyxU3YlX3DHFb1hEaJuYGq8b044a0EWocz
Us9wsEkJjf7IDPF8YsLgh1YsZWOiYoRPagNqaGDU/xblDEsy11sXpXhmKqSX3STo
7RveV/7wI9Pe84eddP1rD6tyK2iRWkKUG+XJuz3GL9X3jl4ZHRndVNXLRookoYqP
aH2wynVm6kNKYD+0kCeYIQeq8h7KdnjYsTs+s6ezYHMqblyCSSIvlUlJAw4ku5pk
Q84I68UhEKXfWV32oMPKlC31tkPRGYORVwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNIRPB5LAPu4qAU4ap1kDv+b1PuUMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzczOTJlMzkzNjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAapP
YDANBgkqhkiG9w0BAQsFAAOCAQEAl6xt0EKTHtKXKdkbb8Yo1c8KSNRmgQlfCxev
vYjQqjbhAVdJgZqXs/UK3RwgDFz4Ta854QFRB58lX/xJ8LZCsSgWtRAqtXKy2VWe
cIfx0wARblKWws9WUBFe52c76CWDJKtp5vcZeLDu8xuzDPqat8uDmRJlblMINlhD
b71g1mVFOUKLkl+pl1HhOeQhU9toDDIZb36vc6yPOxPzucjWTkL4Jlnb4IEjWIwK
dsCZT8KiizidPNoCBNgtUVW28ao0WFdsL+BpypokFAh5Sat9yVhtIiAHw9v9OU5i
c+JwURZFrEE923qgO6sr8yRzgFCVaTSlejH9vyV/0N5EXG7myA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org