Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32342d3234203d3e20323635303636.roa
File:                     3137302e37392e39362e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          RRq+J7Mnnp9w66GMi8aTWnPASU0GFPf9o0DCrI5NYJE=
Subject key identifier:   C6:3C:A4:1C:26:C5:0B:A8:42:D0:04:51:94:95:EC:C8:A2:83:2C:29
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       25FA7E3B23D03E4B9CA0789D991950DE8A9DD55B
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:31 +0000
ROA not before:           Sat 05 Jun 2021 20:31:31 +0000
ROA not after:            Sat 04 Jun 2022 20:36:31 +0000
asID:                     265066
IP address blocks:        170.79.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fa:7e:3b:23:d0:3e:4b:9c:a0:78:9d:99:19:50:de:8a:9d:d5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:31 2021 GMT
            Not After : Jun  4 20:36:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:9b:99:47:61:60:bf:d1:bf:97:25:ca:d5:
                    a9:1b:04:47:2a:2c:5d:8e:80:44:6f:9b:cf:5e:d6:
                    05:43:65:eb:0f:80:23:5e:e5:ec:b6:b7:3a:74:88:
                    7c:4c:75:a5:0a:6a:96:18:19:7c:ac:36:e5:56:69:
                    b8:ff:b5:02:70:a3:98:ca:7c:4c:74:7a:ca:3a:0f:
                    0d:b2:8e:34:00:3a:89:37:27:46:eb:4e:77:4f:48:
                    f0:e9:7f:56:c2:21:66:ae:b3:cd:cc:f0:92:5b:61:
                    f3:ad:a2:73:d3:e7:4d:f0:a3:15:e8:ca:14:42:ba:
                    9b:56:62:03:a7:35:e3:e5:8f:e4:1b:1c:c4:62:1d:
                    4a:64:38:52:ae:d2:23:ea:4c:97:14:09:9d:cb:0c:
                    db:de:e4:98:21:6a:38:28:83:ea:79:d5:d6:5f:e6:
                    ed:bc:0a:a5:55:90:eb:f5:02:c0:c5:7a:29:d4:5e:
                    af:47:2f:db:ab:57:6c:b1:9b:c4:fe:41:30:ac:98:
                    3e:7d:c8:2a:48:61:84:21:91:28:e5:bd:ed:25:76:
                    43:9b:ad:d8:ba:7d:0b:70:2e:cc:05:e7:e9:ad:86:
                    6f:48:04:7d:01:12:15:11:e0:83:47:1c:51:2d:28:
                    8b:e3:31:ad:f8:e2:0b:d7:1d:53:b8:9d:3b:17:55:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:A4:1C:26:C5:0B:A8:42:D0:04:51:94:95:EC:C8:A2:83:2C:29
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:af:4b:9a:fe:b7:df:a8:97:9b:d4:a1:5f:fa:f4:7b:a3:
         f1:71:01:a4:dc:6e:4f:66:b5:4a:44:63:0b:1c:96:88:58:e3:
         5a:96:c7:a0:06:4d:9f:97:af:f9:d8:e8:fa:3d:10:14:cb:76:
         61:54:bd:be:2a:ff:e5:1b:49:95:63:e0:2d:79:b2:b6:4a:06:
         8b:46:ee:9d:00:b4:02:d1:79:f7:d7:3f:e5:75:31:59:b7:29:
         ff:07:2e:57:7b:97:fd:cd:57:aa:12:fd:a6:cd:61:70:d2:9a:
         cf:48:86:f3:06:39:69:f7:b8:c3:29:aa:8c:ce:e6:e6:6d:37:
         e0:da:49:10:c6:87:93:f1:a5:60:bd:d9:ef:dd:a4:22:fe:db:
         c4:7a:ac:00:94:92:18:f8:dd:de:72:db:c7:aa:83:e2:d2:74:
         f7:3b:73:63:22:8a:15:4d:0a:88:1f:13:51:2b:73:ac:99:dd:
         c1:bd:35:8c:bd:cc:ee:a7:ad:1f:33:01:e3:32:83:42:55:42:
         50:78:8e:2a:8a:49:5b:88:ea:f8:50:7d:21:6e:84:29:6a:55:
         60:bd:cf:63:f3:8f:6a:34:2f:3d:28:31:83:51:1b:63:9d:65:
         24:40:71:5e:fa:5b:be:73:e8:7c:0e:a3:ae:f2:8e:38:47:9e:
         20:a7:05:cc
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJfp+OyPQPkucoHidmRlQ3oqd1VswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMzFaFw0yMjA2MDQyMDM2MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTc3QzlCOTk0NzYxNjBCRkQx
QkY5NzI1Q0FENUE5MUIwNDQ3MkEyQzVEOEU4MDQ0NkY5QkNGNUVENjA1NDM2NUVC
MEY4MDIzNUVFNUVDQjZCNzNBNzQ4ODdDNEM3NUE1MEE2QTk2MTgxOTdDQUMzNkU1
NTY2OUI4RkZCNTAyNzBBMzk4Q0E3QzRDNzQ3QUNBM0EwRjBEQjI4RTM0MDAzQTg5
MzcyNzQ2RUI0RTc3NEY0OEYwRTk3RjU2QzIyMTY2QUVCM0NEQ0NGMDkyNUI2MUYz
QURBMjczRDNFNzRERjBBMzE1RThDQTE0NDJCQTlCNTY2MjAzQTczNUUzRTU4RkU0
MUIxQ0M0NjIxRDRBNjQzODUyQUVEMjIzRUE0Qzk3MTQwOTlEQ0IwQ0RCREVFNDk4
MjE2QTM4Mjg4M0VBNzlENUQ2NUZFNkVEQkMwQUE1NTU5MEVCRjUwMkMwQzU3QTI5
RDQ1RUFGNDcyRkRCQUI1NzZDQjE5QkM0RkU0MTMwQUM5ODNFN0RDODJBNDg2MTg0
MjE5MTI4RTVCREVEMjU3NjQzOUJBREQ4QkE3RDBCNzAyRUNDMDVFN0U5QUQ4NjZG
NDgwNDdEMDExMjE1MTFFMDgzNDcxQzUxMkQyODhCRTMzMUFERjhFMjBCRDcxRDUz
Qjg5RDNCMTc1NTRFMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA53ybmUdhYL/Rv5clytWpGwRHKixdjoBEb5vPXtYFQ2XrD4AjXuXs
trc6dIh8THWlCmqWGBl8rDblVmm4/7UCcKOYynxMdHrKOg8Nso40ADqJNydG6053
T0jw6X9WwiFmrrPNzPCSW2HzraJz0+dN8KMV6MoUQrqbVmIDpzXj5Y/kGxzEYh1K
ZDhSrtIj6kyXFAmdywzb3uSYIWo4KIPqedXWX+btvAqlVZDr9QLAxXop1F6vRy/b
q1dssZvE/kEwrJg+fcgqSGGEIZEo5b3tJXZDm63Yun0LcC7MBefprYZvSAR9ARIV
EeCDRxxRLSiL4zGt+OIL1x1TuJ07F1VOBwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMY8pBwmxQuoQtAEUZSV7MiigywpMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzczOTJlMzkzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpP
YDANBgkqhkiG9w0BAQsFAAOCAQEAfjWvS5r+t9+ol5vUoV/69Huj8XEBpNxuT2a1
SkRjCxyWiFjjWpbHoAZNn5ev+djo+j0QFMt2YVS9vir/5RtJlWPgLXmytkoGi0bu
nQC0AtF599c/5XUxWbcp/wcuV3uX/c1XqhL9ps1hcNKaz0iG8wY5afe4wymqjM7m
5m034NpJEMaHk/GlYL3Z792kIv7bxHqsAJSSGPjd3nLbx6qD4tJ09ztzYyKKFU0K
iB8TUStzrJndwb01jL3M7qetHzMB4zKDQlVCUHiOKopJW4jq+FB9IW6EKWpVYL3P
Y/OPajQvPSgxg1EbY51lJEBxXvpbvnPofA6jrvKOOEeeIKcFzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org