Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39372e302f32342d3234203d3e20323635303636.roa
File:                     3137302e37392e39372e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          lvtF8J0ocOMqdEW4TQCkZJ8pjKiG4m55FXRlW4dTP5U=
Subject key identifier:   FF:32:68:99:F4:DC:10:23:AD:A6:C8:05:92:B1:5B:D6:C4:FE:0F:B7
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       2285C411ED3B15BC434B589AEB5D4111349833BA
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39372e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        170.79.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:c4:11:ed:3b:15:bc:43:4b:58:9a:eb:5d:41:11:34:98:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject: CN=3082010A0282010100C01892DB574F03DD6A2160FE0E5AD933C8BFB76609127E3C3BDAAD62ED2C13AB577D54087C03D1324F518EAC16CF35A847990A1B23D51DE49D9F77A689FA08AEC300A4A279AEDB68F56906AF4813CE71F93006DB7B404B2F93B23C2605DC1BAD5815FE7C85B895D46DB196050D3E8C57020359C912D8A900F53E9910E32797351B9A9D16060E86BAEE3D9D521EC1A50B17F8D6790098C8349994D220528CC9982EED395E3E2107E9159546EACB1D8E4E95B3979A1E382CF269AA8480C3D17FF1066766C1644FE75F7D48883CE69D2621921502EED1CD875ED3A36E668E10C8DDEAC0B9D1C105CE1D054E5E7451F5C49102DC2CB4880D6D1597342B880C5940FD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:92:db:57:4f:03:dd:6a:21:60:fe:0e:5a:
                    d9:33:c8:bf:b7:66:09:12:7e:3c:3b:da:ad:62:ed:
                    2c:13:ab:57:7d:54:08:7c:03:d1:32:4f:51:8e:ac:
                    16:cf:35:a8:47:99:0a:1b:23:d5:1d:e4:9d:9f:77:
                    a6:89:fa:08:ae:c3:00:a4:a2:79:ae:db:68:f5:69:
                    06:af:48:13:ce:71:f9:30:06:db:7b:40:4b:2f:93:
                    b2:3c:26:05:dc:1b:ad:58:15:fe:7c:85:b8:95:d4:
                    6d:b1:96:05:0d:3e:8c:57:02:03:59:c9:12:d8:a9:
                    00:f5:3e:99:10:e3:27:97:35:1b:9a:9d:16:06:0e:
                    86:ba:ee:3d:9d:52:1e:c1:a5:0b:17:f8:d6:79:00:
                    98:c8:34:99:94:d2:20:52:8c:c9:98:2e:ed:39:5e:
                    3e:21:07:e9:15:95:46:ea:cb:1d:8e:4e:95:b3:97:
                    9a:1e:38:2c:f2:69:aa:84:80:c3:d1:7f:f1:06:67:
                    66:c1:64:4f:e7:5f:7d:48:88:3c:e6:9d:26:21:92:
                    15:02:ee:d1:cd:87:5e:d3:a3:6e:66:8e:10:c8:dd:
                    ea:c0:b9:d1:c1:05:ce:1d:05:4e:5e:74:51:f5:c4:
                    91:02:dc:2c:b4:88:0d:6d:15:97:34:2b:88:0c:59:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:32:68:99:F4:DC:10:23:AD:A6:C8:05:92:B1:5B:D6:C4:FE:0F:B7
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39372e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:19:f6:ff:13:01:1e:e9:a3:4c:1f:84:11:c9:5c:c9:42:
         b2:4d:48:14:96:58:af:84:37:b4:f2:2a:7f:56:51:59:7b:aa:
         2d:5b:3d:d8:01:3e:e8:13:10:a6:a1:4b:39:50:2a:6d:55:22:
         1a:bd:e7:52:81:cf:e3:40:f3:cc:0c:2f:5d:9e:49:7a:11:ff:
         a8:61:f1:34:7d:a5:90:22:2b:56:b3:f5:53:d2:77:3c:ed:f5:
         9f:30:73:68:e0:40:00:98:5c:e5:b3:64:4a:11:83:17:ea:3c:
         b9:d7:df:14:f8:af:74:12:12:0f:ec:8d:ee:9d:b4:05:57:75:
         16:aa:56:97:fe:db:34:70:ab:c9:12:f9:5c:37:02:ed:95:7b:
         77:4f:fb:a2:ea:35:08:f9:09:27:ee:db:87:ac:a4:7c:40:ac:
         84:fb:33:92:bf:c1:c0:8f:6c:a4:42:24:ad:f9:fe:7e:95:8d:
         12:0d:a1:07:c3:63:97:d1:d8:5b:d8:cf:32:32:40:c7:33:50:
         c9:de:c1:53:d8:b4:db:3d:1b:51:95:f4:02:c3:ad:e6:40:75:
         9f:3a:07:7e:8e:3c:20:0c:9b:e2:20:1a:fe:72:79:fb:e5:bf:
         38:a4:e4:9a:50:62:93:17:d2:ee:e0:70:4e:17:dc:d9:ad:b0:
         6e:21:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org