Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32342d3234203d3e20323635303636.roa
File:                     3137302e37392e39382e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          +nxiv1SdEPmQYaGRXUMa+huCZXmDBYJ+iKfdJD1+2cM=
Subject key identifier:   63:2D:A1:E3:2F:39:AD:57:0E:D3:76:79:F5:87:53:54:04:40:30:5A
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       6BDF9A7506D7BF15F2D66DD44DB85B0D4F2719F2
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        170.79.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:9a:75:06:d7:bf:15:f2:d6:6d:d4:4d:b8:5b:0d:4f:27:19:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:ed:ab:e7:e8:fc:0e:1f:02:21:f2:2f:6c:
                    34:f5:57:aa:2c:18:a1:6f:fa:fc:78:2f:87:66:d5:
                    45:5f:17:89:f8:73:7c:aa:ac:cb:d3:ac:b4:3f:09:
                    ab:f5:78:d7:b2:b8:3b:3c:01:29:56:e5:8f:d7:6e:
                    b2:88:9a:bd:09:08:06:b0:64:f4:4c:24:b9:d9:35:
                    3b:50:11:e8:2e:5a:ac:bd:db:00:a3:64:81:d9:4f:
                    a7:84:e8:0d:eb:da:8f:73:15:ce:5d:59:f2:dc:73:
                    5b:ba:5c:77:c5:3d:b6:b7:04:ee:8d:ff:fc:9a:dd:
                    ca:b2:97:d9:3f:20:8e:18:8f:af:83:35:60:e7:03:
                    e2:eb:2c:62:aa:30:0f:70:08:31:f9:cd:ce:74:9d:
                    cf:9d:76:ea:0c:5c:a1:59:e0:b7:02:67:c5:67:6c:
                    10:2f:7e:d1:15:53:47:49:da:01:94:dc:99:33:5e:
                    82:58:b6:8c:82:f6:fd:92:2d:6a:7c:83:a4:09:5e:
                    9c:c3:13:ba:e4:d0:14:a7:bd:bd:e6:f4:65:14:b4:
                    db:85:bd:3d:69:ce:fa:10:3f:ab:25:ef:98:b8:ba:
                    4e:b1:17:79:51:4d:e6:63:34:ea:78:a0:dd:f6:74:
                    1c:b3:58:5d:53:d2:f6:f0:ea:80:70:0e:81:26:b9:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:A1:E3:2F:39:AD:57:0E:D3:76:79:F5:87:53:54:04:40:30:5A
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39382e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:d4:0b:3e:28:04:6d:b9:35:58:0b:b8:f7:a0:65:e9:93:
         39:33:17:2c:81:1c:c8:10:72:99:51:93:1c:64:f5:98:50:10:
         5b:af:f0:1e:bd:af:be:94:24:b9:66:ba:77:8d:f1:bc:5f:90:
         dc:e2:c1:06:98:fc:d7:96:51:be:98:1b:06:12:93:61:de:18:
         26:ed:fd:e5:2d:25:ce:3b:34:5c:db:a5:f2:c4:a3:3c:c5:7c:
         35:60:e6:05:62:b1:5d:40:72:8f:48:ad:af:24:61:53:22:a3:
         29:03:0b:c4:1c:3e:78:8b:79:8f:23:b2:08:6e:74:88:df:d2:
         cc:34:91:60:08:56:eb:ad:cc:36:16:1d:ba:4b:22:71:c4:1d:
         7f:b6:7f:e7:f1:4b:f7:fe:1b:60:d0:b6:e3:ff:83:77:72:6c:
         d5:88:d9:91:15:ec:c2:2c:12:28:58:c4:cd:88:71:e1:ee:1c:
         05:a7:24:0b:87:dd:bd:1f:77:ea:36:7e:c1:9d:58:10:33:e3:
         33:af:de:e8:de:57:fc:14:f3:e9:8a:ec:4c:4a:de:5f:89:fd:
         0e:b0:86:26:6b:dd:2c:85:11:1f:47:cc:c1:46:8c:43:60:88:
         fa:4d:44:af:3c:3d:e7:28:61:75:8c:23:ac:94:b2:2e:f6:c5:
         8a:6b:af:db
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUa9+adQbXvxXy1m3UTbhbDU8nGfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjhaFw0yMjA2MDQyMDM2MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQyOUVEQUJFN0U4RkMwRTFG
MDIyMUYyMkY2QzM0RjU1N0FBMkMxOEExNkZGQUZDNzgyRjg3NjZENTQ1NUYxNzg5
Rjg3MzdDQUFBQ0NCRDNBQ0I0M0YwOUFCRjU3OEQ3QjJCODNCM0MwMTI5NTZFNThG
RDc2RUIyODg5QUJEMDkwODA2QjA2NEY0NEMyNEI5RDkzNTNCNTAxMUU4MkU1QUFD
QkREQjAwQTM2NDgxRDk0RkE3ODRFODBERUJEQThGNzMxNUNFNUQ1OUYyREM3MzVC
QkE1Qzc3QzUzREI2QjcwNEVFOERGRkZDOUFERENBQjI5N0Q5M0YyMDhFMTg4RkFG
ODMzNTYwRTcwM0UyRUIyQzYyQUEzMDBGNzAwODMxRjlDRENFNzQ5RENGOUQ3NkVB
MEM1Q0ExNTlFMEI3MDI2N0M1Njc2QzEwMkY3RUQxMTU1MzQ3NDlEQTAxOTREQzk5
MzM1RTgyNThCNjhDODJGNkZEOTIyRDZBN0M4M0E0MDk1RTlDQzMxM0JBRTREMDE0
QTdCREJERTZGNDY1MTRCNERCODVCRDNENjlDRUZBMTAzRkFCMjVFRjk4QjhCQTRF
QjExNzc5NTE0REU2NjMzNEVBNzhBMERERjY3NDFDQjM1ODVENTNEMkY2RjBFQTgw
NzAwRTgxMjZCOURGM0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxCntq+fo/A4fAiHyL2w09VeqLBihb/r8eC+HZtVFXxeJ+HN8qqzL
06y0Pwmr9XjXsrg7PAEpVuWP126yiJq9CQgGsGT0TCS52TU7UBHoLlqsvdsAo2SB
2U+nhOgN69qPcxXOXVny3HNbulx3xT22twTujf/8mt3KspfZPyCOGI+vgzVg5wPi
6yxiqjAPcAgx+c3OdJ3PnXbqDFyhWeC3AmfFZ2wQL37RFVNHSdoBlNyZM16CWLaM
gvb9ki1qfIOkCV6cwxO65NAUp7295vRlFLTbhb09ac76ED+rJe+YuLpOsRd5UU3m
YzTqeKDd9nQcs1hdU9L28OqAcA6BJrnfOwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGMtoeMvOa1XDtN2efWHU1QEQDBaMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzczOTJlMzkzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpP
YjANBgkqhkiG9w0BAQsFAAOCAQEApg/UCz4oBG25NVgLuPegZemTOTMXLIEcyBBy
mVGTHGT1mFAQW6/wHr2vvpQkuWa6d43xvF+Q3OLBBpj815ZRvpgbBhKTYd4YJu39
5S0lzjs0XNul8sSjPMV8NWDmBWKxXUByj0itryRhUyKjKQMLxBw+eIt5jyOyCG50
iN/SzDSRYAhW663MNhYduksiccQdf7Z/5/FL9/4bYNC24/+Dd3Js1YjZkRXswiwS
KFjEzYhx4e4cBackC4fdvR936jZ+wZ1YEDPjM6/e6N5X/BTz6YrsTEreX4n9DrCG
JmvdLIURH0fMwUaMQ2CI+k1Erzw95yhhdYwjrJSyLvbFimuv2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org