Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3232203d3e20323635303636.roa
File:                     3137392e3132352e32302e302f32322d3232203d3e20323635303636.roa (raw, json)
Hash identifier:          5f4K2KLC8TIDh+QoZVvLQ4NRK1asrEcykW7owBICX1E=
Subject key identifier:   4A:2E:BC:53:87:76:D7:D7:94:05:F2:15:CB:9A:5F:95:59:0C:1E:DE
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       2243E96E97E5702A26FFE9EF38ACAF8AA1932B34
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3232203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:34 +0000
ROA not before:           Sat 05 Jun 2021 20:31:34 +0000
ROA not after:            Sat 04 Jun 2022 20:36:34 +0000
asID:                     265066
IP address blocks:        179.125.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:43:e9:6e:97:e5:70:2a:26:ff:e9:ef:38:ac:af:8a:a1:93:2b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:34 2021 GMT
            Not After : Jun  4 20:36:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:ac:ed:af:b2:a3:1d:30:c1:2a:fc:d8:d3:
                    34:de:69:f9:60:ee:05:7f:b7:17:47:f7:8b:80:96:
                    0f:2d:be:cf:b9:e9:7c:87:1d:58:7c:89:e3:98:20:
                    ad:08:5f:79:e2:e8:ce:91:e9:88:e5:ed:75:55:63:
                    ab:58:45:71:ae:46:bc:1b:5f:89:1f:b2:56:f3:2e:
                    6e:65:28:71:f5:e2:90:d1:78:41:10:7d:fd:13:78:
                    80:d5:e5:a2:31:f8:6f:b3:fd:f5:ec:59:81:1e:93:
                    aa:bb:13:b1:47:ab:da:4c:6f:ba:6f:1a:2f:6e:2e:
                    75:a1:aa:91:7e:d3:01:fc:1b:98:57:2d:11:8e:fd:
                    85:d5:b1:c6:a5:23:84:17:59:c3:05:88:7e:de:0a:
                    d3:6b:30:6c:0f:96:73:a5:05:f6:37:89:0a:bd:86:
                    8a:c0:fd:e3:21:cf:4a:9c:03:2d:44:bc:d2:00:27:
                    34:e5:10:1b:53:e3:71:3e:9e:c0:c5:fe:ec:14:73:
                    74:2c:91:3b:25:ba:45:f1:a2:e3:5f:3a:5a:74:6d:
                    23:86:18:e8:fa:f5:4c:32:cb:73:e4:5a:99:63:ec:
                    b0:ea:d6:c8:93:83:9b:d0:b0:38:9e:93:43:23:c5:
                    76:bc:c5:3a:ef:18:52:d6:b6:be:db:0b:32:28:a3:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:BC:53:87:76:D7:D7:94:05:F2:15:CB:9A:5F:95:59:0C:1E:DE
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3232203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:79:36:f5:75:8c:3d:4e:0c:3d:ee:03:88:a2:9a:bf:65:
         2f:15:3d:84:32:a1:b4:da:a1:3d:72:14:31:fd:ae:07:97:9d:
         a9:ea:50:4b:23:5d:e7:98:fd:3b:0f:28:34:22:21:1a:03:e9:
         ba:8c:01:79:c6:3d:bb:f5:e9:97:bb:48:fb:72:b1:da:39:ca:
         66:70:e0:30:d9:3d:3f:7b:63:c1:9f:00:55:37:09:32:d8:55:
         6a:b4:90:e7:8e:bf:97:49:a5:b5:44:0f:48:e9:5a:c9:6d:19:
         8a:61:97:09:c8:4e:f8:78:6c:63:a4:d2:6c:47:4a:d3:e6:09:
         bd:b0:e9:9f:21:87:e8:bb:62:da:18:50:36:54:95:2e:15:3d:
         9a:52:1f:6a:c4:ac:f5:5e:5c:5a:73:63:86:1c:36:ce:ed:a0:
         47:01:cb:59:13:a0:81:34:8a:8a:95:9e:f3:88:62:01:b6:4a:
         13:54:74:64:7f:b3:6a:28:b0:3c:94:43:b4:f7:1e:5b:03:e0:
         d3:97:ab:66:86:c3:21:cb:31:c5:9e:6e:7f:94:b0:a9:3f:82:
         32:e1:ce:f8:f7:45:c2:9c:93:38:62:6f:d8:6f:db:cf:a6:23:
         5e:b9:e4:7e:d4:2c:8d:80:20:d8:b0:48:8d:47:75:e2:f5:02:
         df:78:f6:21
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIkPpbpflcCom/+nvOKyviqGTKzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMzRaFw0yMjA2MDQyMDM2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ1OEFDRURBRkIyQTMxRDMw
QzEyQUZDRDhEMzM0REU2OUY5NjBFRTA1N0ZCNzE3NDdGNzhCODA5NjBGMkRCRUNG
QjlFOTdDODcxRDU4N0M4OUUzOTgyMEFEMDg1Rjc5RTJFOENFOTFFOTg4RTVFRDc1
NTU2M0FCNTg0NTcxQUU0NkJDMUI1Rjg5MUZCMjU2RjMyRTZFNjUyODcxRjVFMjkw
RDE3ODQxMTA3REZEMTM3ODgwRDVFNUEyMzFGODZGQjNGREY1RUM1OTgxMUU5M0FB
QkIxM0IxNDdBQkRBNEM2RkJBNkYxQTJGNkUyRTc1QTFBQTkxN0VEMzAxRkMxQjk4
NTcyRDExOEVGRDg1RDVCMUM2QTUyMzg0MTc1OUMzMDU4ODdFREUwQUQzNkIzMDZD
MEY5NjczQTUwNUY2Mzc4OTBBQkQ4NjhBQzBGREUzMjFDRjRBOUMwMzJENDRCQ0Qy
MDAyNzM0RTUxMDFCNTNFMzcxM0U5RUMwQzVGRUVDMTQ3Mzc0MkM5MTNCMjVCQTQ1
RjFBMkUzNUYzQTVBNzQ2RDIzODYxOEU4RkFGNTRDMzJDQjczRTQ1QTk5NjNFQ0Iw
RUFENkM4OTM4MzlCRDBCMDM4OUU5MzQzMjNDNTc2QkNDNTNBRUYxODUyRDZCNkJF
REIwQjMyMjhBM0VDMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxFis7a+yox0wwSr82NM03mn5YO4Ff7cXR/eLgJYPLb7Puel8hx1Y
fInjmCCtCF954ujOkemI5e11VWOrWEVxrka8G1+JH7JW8y5uZShx9eKQ0XhBEH39
E3iA1eWiMfhvs/317FmBHpOquxOxR6vaTG+6bxovbi51oaqRftMB/BuYVy0Rjv2F
1bHGpSOEF1nDBYh+3grTazBsD5ZzpQX2N4kKvYaKwP3jIc9KnAMtRLzSACc05RAb
U+NxPp7Axf7sFHN0LJE7JbpF8aLjXzpadG0jhhjo+vVMMstz5FqZY+yw6tbIk4Ob
0LA4npNDI8V2vMU67xhS1ra+2wsyKKPsMwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEouvFOHdtfXlAXyFcuaX5VZDB7eMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczOTJlMzEzMjM1MmUzMjMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzAzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
s30UMA0GCSqGSIb3DQEBCwUAA4IBAQBtWXk29XWMPU4MPe4DiKKav2UvFT2EMqG0
2qE9chQx/a4Hl52p6lBLI13nmP07Dyg0IiEaA+m6jAF5xj279emXu0j7crHaOcpm
cOAw2T0/e2PBnwBVNwky2FVqtJDnjr+XSaW1RA9I6VrJbRmKYZcJyE74eGxjpNJs
R0rT5gm9sOmfIYfou2LaGFA2VJUuFT2aUh9qxKz1Xlxac2OGHDbO7aBHActZE6CB
NIqKlZ7ziGIBtkoTVHRkf7NqKLA8lEO09x5bA+DTl6tmhsMhyzHFnm5/lLCpP4Iy
4c7490XCnJM4Ym/Yb9vPpiNeueR+1CyNgCDYsEiNR3Xi9QLfePYh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org