Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32332d3233203d3e20323635303636.roa
File:                     3137392e3132352e32302e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          8LpA6U8EbI/QrFY9lXv+mzDJ12eqfarBM2M6uaeaz+Y=
Subject key identifier:   B4:38:54:69:B9:DE:61:23:9F:C5:98:B1:B2:A1:63:18:45:CB:8E:4C
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       4FED4C0EC542A87FAA65816324C3B401F9EC1B66
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:31 +0000
ROA not before:           Sat 05 Jun 2021 20:31:31 +0000
ROA not after:            Sat 04 Jun 2022 20:36:31 +0000
asID:                     265066
IP address blocks:        179.125.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ed:4c:0e:c5:42:a8:7f:aa:65:81:63:24:c3:b4:01:f9:ec:1b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:31 2021 GMT
            Not After : Jun  4 20:36:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:e5:51:1f:1c:65:2d:3a:0d:83:3f:70:5d:
                    ad:a7:f2:b8:d1:fc:b0:8e:4c:f3:e0:18:06:aa:aa:
                    20:8f:da:11:27:53:60:19:12:74:96:11:8f:b6:95:
                    64:f9:cb:50:de:09:01:bf:a4:5e:e0:34:3e:78:db:
                    a0:0b:30:b1:ac:81:61:9a:f3:52:8d:af:83:de:a4:
                    41:4d:5a:0c:2b:4b:d0:4a:b6:c8:f9:c7:41:3c:fe:
                    58:d7:62:23:ee:a3:f8:99:b0:ab:5f:9a:25:db:9e:
                    59:1a:c7:f9:a0:e3:96:17:8b:6a:62:b1:93:c5:dc:
                    46:66:6a:41:c6:13:6b:53:28:63:f2:e5:6d:96:4d:
                    86:70:b4:c4:18:c9:96:03:de:d8:85:7e:62:21:06:
                    dd:01:f9:2c:d4:78:58:78:e2:f3:01:5a:f2:61:63:
                    04:41:f6:da:40:c7:54:8f:76:dd:8d:da:1d:28:10:
                    2a:56:fa:41:51:3b:68:01:3d:f9:a2:a3:be:4f:f8:
                    df:5f:e1:1e:cb:5d:35:f9:b6:92:8c:2e:e1:0d:9f:
                    27:eb:1d:15:aa:3a:de:10:5b:80:05:0f:07:5f:58:
                    9d:f8:a4:6e:9b:b7:3b:92:3e:fb:8a:ad:3a:45:87:
                    52:e1:d1:ef:f9:44:9c:58:3e:a9:ad:11:16:e0:bd:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:54:69:B9:DE:61:23:9F:C5:98:B1:B2:A1:63:18:45:CB:8E:4C
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:3b:db:2e:37:94:a2:73:54:d8:2b:85:06:a4:d1:09:15:
         e9:39:e3:4a:4e:b1:6c:5e:0b:a1:36:23:83:c0:48:13:b5:f3:
         e3:bd:8f:b8:29:02:57:32:61:21:63:04:df:7e:3d:d5:ff:99:
         d7:be:f4:41:3c:af:59:f4:9a:ba:e1:ec:7b:ff:79:91:9e:3b:
         9c:17:a3:f7:5b:17:75:9c:0e:68:de:d5:66:20:c5:6e:0d:a5:
         d4:a3:8c:a1:54:ff:81:2d:0f:ee:1a:42:7a:2b:6a:b6:44:fd:
         8f:b3:33:af:5e:f5:3c:9d:46:3b:6b:06:09:7a:cd:ac:31:7f:
         72:7c:f7:38:d8:19:dc:95:29:11:81:8a:48:7d:c2:ee:39:38:
         24:37:b0:ec:70:5d:42:35:cc:e9:9b:ce:c3:8a:03:f1:d0:12:
         17:2b:5a:86:2a:f7:78:82:4d:d8:5d:bc:81:03:e2:0f:a4:2f:
         de:d4:31:10:75:9f:bc:f9:a5:cf:b5:12:1a:a2:fb:f5:80:bf:
         57:ac:35:b5:d4:95:11:bd:ed:ee:cd:51:82:ec:27:d0:e6:fb:
         a2:8b:9e:1d:ae:0b:d5:43:45:31:35:43:cb:0a:08:e6:4c:62:
         a1:c3:20:30:7d:e5:77:7f:d1:bf:b6:01:1b:c6:d4:33:81:8f:
         d1:38:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org