Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32332d3233203d3e20323635303636.roa
File:                     3137302e37392e39382e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          pyuS9Tnc3rXCrPhDGSxTpYyTKEMYepG08bvSxhYYYaY=
Subject key identifier:   AE:9F:76:8B:2E:11:C2:07:79:B7:7E:01:0D:BD:E8:1D:DF:57:DB:0F
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       670AD082BC00298B2CE5B6CD3694FB8E55A95654
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        170.79.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0a:d0:82:bc:00:29:8b:2c:e5:b6:cd:36:94:fb:8e:55:a9:56:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:92:6d:6c:03:65:36:ff:13:ed:ac:ab:8f:
                    dd:35:b7:fd:32:be:07:46:58:a5:70:2e:c7:4b:de:
                    04:55:10:f9:2e:f6:13:5a:e5:fc:68:40:4a:fc:c1:
                    e2:02:95:80:d0:ca:9a:71:ad:c8:53:17:20:b1:ee:
                    d6:c7:1a:7d:24:29:ca:5e:ef:65:35:e7:46:f4:f0:
                    c1:94:3b:81:aa:0d:6a:3c:f9:c8:ef:5f:78:bc:62:
                    1d:4c:93:4f:1f:00:dd:a9:8d:8a:99:62:ec:5d:66:
                    f4:79:38:3e:df:a5:bd:6d:bc:44:d4:ae:42:b3:18:
                    03:67:19:04:e0:e8:5f:b3:53:42:11:03:9b:fd:4e:
                    de:8a:4e:78:f0:fd:ee:c1:34:9c:fa:aa:4d:dc:d0:
                    81:b9:21:d7:ad:8c:40:bb:bc:22:5b:ba:4a:8d:d1:
                    ea:40:7f:51:ea:9c:30:31:f0:b0:95:b3:f9:66:17:
                    9e:2c:43:59:14:4f:f6:64:9c:41:23:0f:1d:47:74:
                    23:b3:eb:18:0c:bf:09:54:ea:f3:f0:9a:41:70:ff:
                    af:19:46:ee:f6:36:94:0b:2c:6b:40:73:e0:d7:17:
                    75:cf:06:13:22:68:51:7e:0d:9b:e5:fc:21:16:81:
                    51:d9:7f:6b:b8:0f:3f:b6:5c:82:14:85:21:24:b4:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:76:8B:2E:11:C2:07:79:B7:7E:01:0D:BD:E8:1D:DF:57:DB:0F
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:60:ce:a7:bd:c5:40:57:2b:a4:ae:4a:d7:d4:02:5e:e4:2a:
         fb:1f:1a:50:49:4e:1c:dc:8f:06:79:b1:5c:81:27:6f:b6:cc:
         f6:c1:bf:93:78:99:d5:22:69:13:05:46:85:84:9c:03:57:aa:
         c6:51:3e:82:64:a3:12:89:14:25:bc:98:a1:2a:7a:3b:f5:d1:
         2c:e6:d2:4d:b0:fb:ce:07:dd:4d:44:49:5b:e8:13:6a:5a:64:
         d7:5a:6a:a3:8e:61:78:bc:bc:f2:0a:80:d7:1d:51:32:41:70:
         c0:76:ee:ff:cb:04:8f:3d:d9:70:73:46:a3:bf:33:dd:57:2d:
         05:0c:fe:38:10:cf:c5:42:3e:a7:9d:e2:10:98:88:52:8a:d4:
         e3:b2:f0:95:a1:a0:2f:56:fe:84:7e:e9:ae:0c:89:34:5a:ba:
         15:f3:81:67:0d:5f:be:b6:81:c3:9e:ec:a2:51:e7:10:85:42:
         59:2e:1f:3a:f5:c9:cd:5b:c3:0f:0e:df:ce:7b:42:b7:35:25:
         3a:78:ad:f8:97:a4:a5:dd:f5:f6:8e:f8:0c:e6:dd:d5:49:58:
         1c:9a:a1:3b:4a:cc:b2:83:66:a8:3d:d3:1e:82:ca:bf:75:42:
         26:23:bf:a0:74:9a:ae:b4:f4:ec:36:20:3c:cd:82:7c:f5:c7:
         4c:70:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org