Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32342d3234203d3e20323635303636.roa
File:                     3137392e3132352e32302e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          /jq2ZdzeiUspinYBtUhZjx31iUsuExye2USIrRd/3OY=
Subject key identifier:   5D:99:3F:EF:01:0B:61:09:42:40:E5:9E:F5:35:F1:4C:13:0D:0A:E9
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       1777AC18268B3E779D973047731592D49DB38B84
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        179.125.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:77:ac:18:26:8b:3e:77:9d:97:30:47:73:15:92:d4:9d:b3:8b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:49:58:e0:57:c0:5d:24:e9:49:f8:d0:ee:
                    67:3f:08:6f:4a:11:c0:45:f3:fc:4a:ad:d1:b8:1c:
                    0f:ef:9e:5d:2e:b4:93:3e:e0:72:6c:53:95:be:9a:
                    b6:7f:b6:8b:be:ef:ca:ac:29:d3:cc:86:ec:3e:e8:
                    c2:87:9b:43:14:db:91:7f:cf:b5:b2:06:ae:4d:b5:
                    c2:a2:2b:9a:98:a2:c7:70:b6:d7:91:20:01:00:42:
                    e6:56:3e:16:41:45:e4:28:25:2d:00:d2:77:67:fb:
                    49:10:f8:25:6f:4d:95:cc:1e:3a:07:22:0f:b8:a7:
                    0a:43:fa:fe:b4:d0:9e:3b:f9:47:55:70:21:be:e5:
                    22:90:5e:87:12:78:2c:b3:f4:3d:de:a8:be:46:72:
                    ed:0e:bb:8a:18:6a:5d:21:0c:8c:47:77:dc:4a:da:
                    de:82:0e:c8:92:40:12:94:20:6d:67:47:c6:04:d1:
                    b5:df:65:17:6d:25:f6:d6:fc:ee:e8:e8:5b:53:3e:
                    87:82:b2:20:f6:c7:56:79:51:b1:58:4d:7d:31:6c:
                    3c:e7:e1:87:d7:21:f5:7f:77:72:50:9b:d7:ad:0e:
                    39:12:60:13:d5:c8:9d:c8:83:6d:f8:2b:32:2b:95:
                    0d:6b:a8:3e:cc:13:8c:6c:aa:19:d7:8b:18:25:e5:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:99:3F:EF:01:0B:61:09:42:40:E5:9E:F5:35:F1:4C:13:0D:0A:E9
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:a7:2e:4e:0d:7d:dd:b3:5c:b6:9f:e8:b7:7f:60:04:b4:
         46:93:af:0d:0d:b8:8b:10:ce:94:fc:15:4c:fc:11:0a:09:b2:
         06:45:b0:0f:6d:c4:fa:ba:88:6b:f7:b8:82:44:3d:8e:ad:c5:
         b3:cc:7f:6c:30:f5:c6:48:27:4f:29:e0:c6:d4:60:04:45:1f:
         f2:dd:3c:d3:6c:a2:ba:f9:31:c8:bd:04:ff:c3:17:65:7e:01:
         64:cd:c0:6a:40:11:e6:df:d1:77:a2:28:5c:22:67:75:93:fb:
         33:41:10:d5:c4:5c:a9:88:ad:3e:6a:42:0a:d6:71:66:ae:ad:
         9d:d1:64:19:4b:3b:1d:15:b0:28:2c:d0:19:62:2a:68:29:b5:
         0b:5d:fe:33:a0:19:c8:32:b8:f0:df:c8:b0:70:56:e1:7f:e2:
         65:05:7a:35:8f:f9:76:cf:7e:44:70:80:dc:1d:7a:65:3c:c5:
         7f:e9:04:9c:0b:9f:93:99:3e:02:ea:17:db:cd:c7:91:f5:70:
         59:53:1b:11:50:cf:3c:ad:59:b1:04:81:4d:d9:da:c3:1d:f1:
         f8:6a:ed:d1:85:2b:d3:de:c7:9e:55:32:85:e8:fc:0f:8a:fb:
         37:5e:5a:04:bf:02:71:af:39:2d:43:5b:b6:9a:04:23:05:02:
         02:5d:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org