Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39392e302f32342d3234203d3e20323635303636.roa
File:                     3137302e37392e39392e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          L/hH8pa/V+D0BhicqRO3/NIYbaluXNVkHu9TtNQ/p/k=
Subject key identifier:   45:6C:33:30:32:2C:4C:A6:72:E3:99:BE:D6:8A:67:A8:41:0A:61:4C
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       3A6AACB21A69DF2E1A1F532E3C04506A419B13EE
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39392e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        170.79.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:ac:b2:1a:69:df:2e:1a:1f:53:2e:3c:04:50:6a:41:9b:13:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9e:10:2b:b0:7f:fc:53:5e:d7:43:95:f5:04:
                    e5:67:75:7c:7b:7c:a6:41:8c:ec:b2:e1:25:ec:0f:
                    d1:ca:d1:d3:52:fd:9f:3b:79:c2:eb:75:ac:f3:28:
                    b4:24:91:af:d0:08:ef:7f:42:ba:cb:c8:1d:1c:a4:
                    12:c5:c6:92:b2:7f:63:b1:2c:1e:d8:88:fe:77:26:
                    16:a6:52:a7:ca:10:9d:fa:4f:4c:d4:2e:0c:1d:4a:
                    66:54:0e:ff:72:3d:84:d7:6a:91:65:6a:44:85:3d:
                    97:e1:e3:03:1f:b2:4c:5a:d2:68:66:2e:cc:71:f0:
                    09:b2:28:28:23:c8:25:cd:ba:b1:ad:29:bd:13:17:
                    26:bf:02:35:37:6f:50:4a:4a:6b:70:10:9b:69:f1:
                    53:e7:90:05:09:ac:73:33:0c:e7:e7:16:45:55:2c:
                    bb:c6:a6:19:46:c1:44:01:8a:65:2b:a5:49:af:cc:
                    ef:1f:28:54:bf:c5:7a:21:5d:44:a7:76:5a:96:bb:
                    80:c7:bc:94:be:35:66:b0:55:ac:ae:08:3e:67:55:
                    c8:8c:ac:39:c9:b0:85:bf:91:17:05:d5:5a:ef:9d:
                    ed:a0:cb:67:3a:19:93:2a:ae:5c:c7:50:d1:14:ec:
                    48:42:4b:6d:ee:9a:be:d4:7c:1c:94:fa:b5:5b:e4:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6C:33:30:32:2C:4C:A6:72:E3:99:BE:D6:8A:67:A8:41:0A:61:4C
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39392e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:56:a3:8d:7a:8d:50:40:58:b4:77:1a:df:cb:c1:9d:2f:c0:
         9c:80:10:41:23:d5:db:72:2f:68:99:d3:a9:96:e2:56:c6:af:
         c0:58:00:72:89:27:01:88:0b:a9:44:6b:b5:73:07:f0:dc:09:
         40:fa:b6:6c:2b:88:84:52:5a:28:f8:2c:29:26:48:c0:7d:9d:
         78:b6:67:f1:68:51:13:e0:dd:8c:13:5c:b6:f3:ab:68:3d:b1:
         a1:16:fb:2f:0d:bb:c4:c6:5d:ce:50:1c:d8:1e:37:5e:e9:7e:
         b6:5e:89:e7:7b:26:3e:16:c5:1a:3f:ac:af:02:46:c7:fd:76:
         39:0f:68:64:42:df:e7:43:b4:60:f0:2f:5b:f2:f4:40:39:81:
         6d:e4:4a:64:2c:81:3f:4c:8b:c3:9b:30:9e:85:53:84:ac:a7:
         24:c6:a9:8b:95:f3:d6:2d:2f:6e:2d:d6:de:f4:cd:58:9e:81:
         70:80:2f:a3:68:6d:62:a8:03:9f:22:52:65:dc:27:b2:e6:b2:
         f5:77:a0:9f:63:45:31:39:48:ea:13:d0:95:b1:75:92:27:84:
         05:45:1c:25:70:ae:65:92:1f:e5:a9:d5:57:03:0e:4d:65:d8:
         c7:be:d5:bb:22:12:3e:4e:ca:ac:1a:f5:63:a7:ba:12:b9:d0:
         15:81:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org