Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32332d3233203d3e20323635303636.roa
File:                     3137392e3132352e32322e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          xnsweY5Wm5BARRtyNUccfUlEGzPG+V/rH6eR+GEicpY=
Subject key identifier:   5E:A0:B2:48:6F:80:63:63:B0:3F:A4:15:2B:50:D4:E5:3E:57:97:9F
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       41F7F6B62DF47F55B0CD20BB9EDA15471805988F
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        179.125.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f7:f6:b6:2d:f4:7f:55:b0:cd:20:bb:9e:da:15:47:18:05:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:84:e5:41:04:d9:5a:2f:8a:5a:d5:ab:ef:
                    d6:ed:05:97:60:6e:6e:38:0f:55:bc:fe:9f:f1:da:
                    85:05:6a:a4:ee:c0:35:ff:47:a3:28:52:87:b8:0b:
                    7a:5d:bd:20:7e:ee:80:f4:a8:48:f4:be:63:2a:2f:
                    51:fb:85:24:3a:be:8c:12:b3:d8:c6:91:c0:42:30:
                    09:57:c5:e2:72:11:d9:9e:b6:ff:74:91:33:5d:6f:
                    5f:ec:b6:00:17:28:dc:e2:37:e3:81:40:d0:01:cb:
                    73:22:54:ba:1d:b1:6b:c3:a9:a8:5d:6d:a2:46:65:
                    30:0f:a9:2c:2b:1f:21:d7:bd:f1:a1:42:27:4a:89:
                    7b:8e:3f:9b:4e:3b:6a:f4:75:b2:d2:bb:48:0b:aa:
                    33:ac:09:70:f3:db:9f:a0:ea:04:82:ca:71:1c:8e:
                    97:a8:90:46:d7:91:8b:23:8a:0f:cc:1d:df:d0:e9:
                    01:ec:5b:e4:69:90:68:56:04:b2:6c:98:12:9d:86:
                    c2:8a:e6:ae:4f:4b:72:fe:48:b2:4f:17:18:9e:01:
                    32:e8:af:39:cc:33:bd:43:48:bd:d6:68:82:c0:7a:
                    44:c7:b3:72:e6:8e:e8:69:6c:e9:71:4e:d1:d9:48:
                    bd:19:2e:93:d6:86:c6:49:a0:ae:ab:bd:55:86:04:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:B2:48:6F:80:63:63:B0:3F:A4:15:2B:50:D4:E5:3E:57:97:9F
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:fd:b1:7c:17:01:4a:51:64:75:a5:90:8a:a4:ec:c0:fd:
         6d:84:ac:af:2d:bf:fa:80:1f:08:7d:55:56:a7:7b:3b:60:b7:
         0d:06:a0:90:2e:6c:a9:93:7f:37:f1:6e:d6:6d:75:0b:6e:13:
         58:0e:1f:aa:3b:d1:f1:c0:d7:91:bc:ec:12:ad:ba:43:83:12:
         76:c6:f5:ac:d8:6c:7b:1c:76:a4:f2:e1:c4:40:8c:7e:5c:54:
         29:80:14:20:01:8d:05:d6:73:c8:7a:a1:39:80:27:7f:27:95:
         8c:f0:33:c1:42:e1:f4:ff:51:c1:e1:45:8c:10:1e:da:42:6b:
         76:70:95:52:d1:3f:cd:aa:7b:b1:17:6a:46:09:f5:6d:8e:1a:
         0a:32:97:7b:9c:f6:a0:9a:ce:3c:85:ec:22:b9:91:7c:bb:d3:
         50:d9:2e:7e:75:94:f2:65:e9:6d:ba:20:c4:90:21:cf:47:18:
         08:f2:df:a1:c5:a5:de:b4:ce:d9:28:ec:fd:5a:9d:b1:58:e1:
         79:19:e4:c5:2f:e2:fc:e8:b2:2a:45:9d:2e:ff:33:9b:b3:1a:
         bd:90:99:47:a8:00:e6:01:7b:ca:32:1a:67:10:67:42:94:ea:
         8e:f9:66:7b:48:2a:0e:43:63:06:ea:fa:8d:85:a9:dd:76:1a:
         30:6e:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org