Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32312e302f32342d3234203d3e20323635303636.roa
File:                     3137392e3132352e32312e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          kG7JS//rUbFDx6kWeppdfRJU3kJbkwQ7oGix1JBdYLU=
Subject key identifier:   B6:BA:6E:26:11:C3:E7:83:0A:6C:48:64:53:F0:B8:27:99:38:83:2B
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       51EFD9777F81577473E49CB655ED0496A54692AA
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32312e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:29 +0000
ROA not before:           Sat 05 Jun 2021 20:31:29 +0000
ROA not after:            Sat 04 Jun 2022 20:36:29 +0000
asID:                     265066
IP address blocks:        179.125.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ef:d9:77:7f:81:57:74:73:e4:9c:b6:55:ed:04:96:a5:46:92:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:29 2021 GMT
            Not After : Jun  4 20:36:29 2022 GMT
        Subject: CN=3082010A0282010100B5F241DC0FDC51ACDCBE54934AF1598ADBB75C31A96D5BA7EAB60872F5497695B0F84C6B724AE5BEFB7A3588C94F61DE5157EDBCE59E1E10426FCBEF136285301658A7A709989EA109CC55EE57C9A5491FE8CC1BE694176A006551F8230390A5B7D6CA02F123A1989224032E3A5D2035EEF21F7AE7C989B400B0561F67C8779B2BAD7743E019A45D2D28516F071005F6AF155789B95383F5A7BC7EC2AFDCBF9F8CEE34F2D0D5767AD66DEB466588E34E9F0F7B25B36BFA1952CD0E05E5B47B7F392E5FF863C6C4AE8FA8F232F569A8DA530A26439C7FE73FCB10E7BBD2E8F15074F76E6B2612C4C1812FC59423755070848583C3B2CB03DA6FF652F68527B7A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:41:dc:0f:dc:51:ac:dc:be:54:93:4a:f1:
                    59:8a:db:b7:5c:31:a9:6d:5b:a7:ea:b6:08:72:f5:
                    49:76:95:b0:f8:4c:6b:72:4a:e5:be:fb:7a:35:88:
                    c9:4f:61:de:51:57:ed:bc:e5:9e:1e:10:42:6f:cb:
                    ef:13:62:85:30:16:58:a7:a7:09:98:9e:a1:09:cc:
                    55:ee:57:c9:a5:49:1f:e8:cc:1b:e6:94:17:6a:00:
                    65:51:f8:23:03:90:a5:b7:d6:ca:02:f1:23:a1:98:
                    92:24:03:2e:3a:5d:20:35:ee:f2:1f:7a:e7:c9:89:
                    b4:00:b0:56:1f:67:c8:77:9b:2b:ad:77:43:e0:19:
                    a4:5d:2d:28:51:6f:07:10:05:f6:af:15:57:89:b9:
                    53:83:f5:a7:bc:7e:c2:af:dc:bf:9f:8c:ee:34:f2:
                    d0:d5:76:7a:d6:6d:eb:46:65:88:e3:4e:9f:0f:7b:
                    25:b3:6b:fa:19:52:cd:0e:05:e5:b4:7b:7f:39:2e:
                    5f:f8:63:c6:c4:ae:8f:a8:f2:32:f5:69:a8:da:53:
                    0a:26:43:9c:7f:e7:3f:cb:10:e7:bb:d2:e8:f1:50:
                    74:f7:6e:6b:26:12:c4:c1:81:2f:c5:94:23:75:50:
                    70:84:85:83:c3:b2:cb:03:da:6f:f6:52:f6:85:27:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BA:6E:26:11:C3:E7:83:0A:6C:48:64:53:F0:B8:27:99:38:83:2B
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32312e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:4d:47:e7:6f:f8:0d:13:06:3b:f2:6a:20:a1:bb:ff:cc:
         fb:87:0c:ff:2a:dc:b6:f8:d8:98:e1:d2:5a:00:0e:bc:f6:ea:
         62:69:a9:cd:38:12:27:a5:d5:9a:ab:6b:cc:1d:ed:ab:c6:ed:
         7b:24:1d:6b:ed:08:38:7f:e1:d4:4c:3c:3f:08:2f:0b:85:ee:
         d1:c0:7b:9d:24:11:d0:79:29:bb:da:e7:b7:e4:a2:52:1c:cd:
         8b:5b:d0:e6:da:d6:46:93:f4:fc:27:98:92:12:b2:1c:e1:f1:
         fd:88:f3:1a:87:da:ac:9d:59:ac:d7:bb:da:ec:b1:0d:4d:90:
         c4:f9:e7:67:dd:9f:52:dc:11:34:06:63:ae:4a:51:b2:65:48:
         b1:0d:b7:df:6d:28:36:4e:f4:5a:40:48:c1:03:eb:23:bb:24:
         b4:4c:34:f0:71:f5:5b:c3:8a:b2:db:fd:39:c5:6b:1b:cb:a0:
         ec:3c:39:da:dd:fb:fb:53:f7:01:f7:41:3e:9a:df:57:21:0a:
         48:53:f2:16:bf:cd:e5:c5:21:14:d8:f0:05:2d:0d:37:15:91:
         0f:af:7b:80:ee:f4:48:34:d1:ab:81:54:9e:59:05:1a:73:7c:
         df:25:d9:18:f5:a2:4e:fe:45:50:0a:0c:65:cf:98:b1:5a:ac:
         10:8e:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org