Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32342d3234203d3e20323635303636.roa
File:                     3137392e3132352e32322e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          i/h74a0eVdqcKIpe0OJ2W49ACrbyFieeAj3OHEIk7v0=
Subject key identifier:   7B:29:4B:D1:F6:74:98:F1:12:2A:E5:3E:3A:4C:A4:E2:D4:91:65:40
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       313C8979D041D5581C524AA8D4D1F9649B06A3C5
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:34 +0000
ROA not before:           Sat 05 Jun 2021 20:31:34 +0000
ROA not after:            Sat 04 Jun 2022 20:36:34 +0000
asID:                     265066
IP address blocks:        179.125.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3c:89:79:d0:41:d5:58:1c:52:4a:a8:d4:d1:f9:64:9b:06:a3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:34 2021 GMT
            Not After : Jun  4 20:36:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:13:99:ed:50:1e:e3:d1:5d:b2:5c:b9:84:b9:
                    8b:ae:d3:7a:c6:ac:52:ea:f7:0f:cc:a1:23:56:0f:
                    25:fe:1a:ca:3b:b3:0f:27:7e:3a:a3:fb:fe:4f:da:
                    a7:53:7d:5c:30:a9:ec:7c:1e:89:a9:44:d7:1f:62:
                    ed:32:41:07:92:1e:35:d2:96:64:9a:a2:54:25:1b:
                    44:d1:5e:b0:df:ac:e5:f5:0e:2f:6c:8b:f0:74:17:
                    4a:43:cc:01:e7:f9:d7:62:a4:79:65:d7:f6:7f:08:
                    2b:84:3c:3b:dd:5b:18:d4:d3:d4:1e:03:8a:f1:8c:
                    55:e3:d7:96:3e:f0:09:02:ea:c5:4b:33:0e:e6:23:
                    97:85:a2:cd:47:5d:66:cc:55:8f:96:9b:77:c7:c2:
                    e2:f0:20:c0:79:9d:1c:1d:ac:c8:0a:fb:75:8a:5c:
                    16:ae:45:c7:0e:42:81:70:bb:fa:1d:4a:b0:34:36:
                    60:d7:b7:45:c2:52:0b:b5:cf:0c:37:23:ba:46:72:
                    92:b4:8a:1e:16:ee:72:81:ff:03:22:f1:bb:be:97:
                    0f:7c:9d:0d:94:a3:d2:c9:47:de:74:b8:3f:a2:21:
                    03:ce:df:be:ff:85:7b:b4:ac:16:cd:1a:23:ad:cf:
                    46:af:21:e0:e8:2b:1e:73:b9:00:07:4d:5e:0d:c1:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:4B:D1:F6:74:98:F1:12:2A:E5:3E:3A:4C:A4:E2:D4:91:65:40
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32322e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:6f:6a:0c:4d:c6:9e:4d:ba:f7:93:3e:f1:12:a2:82:8f:
         21:49:f5:bc:67:a4:57:04:f1:d2:9b:9f:5d:6b:46:97:dc:63:
         65:a4:01:f0:9b:11:3a:55:32:11:83:7f:2a:14:a4:00:14:1b:
         f3:6c:96:8a:ac:41:bf:d3:a5:ac:03:ea:08:fb:3c:ec:2c:0d:
         d3:14:8d:19:bf:69:4f:d9:e0:09:9b:51:d9:c0:0c:03:14:6b:
         67:ba:cc:db:7b:1d:31:93:71:39:0b:80:24:9d:61:29:24:bd:
         71:9c:41:2c:e7:23:2e:35:d7:12:3f:57:57:b2:e5:dc:a1:66:
         20:3f:ac:82:2a:c7:bb:30:e8:b7:45:05:82:15:8f:f6:f5:e7:
         a6:84:cc:38:5f:55:b6:56:78:d7:56:de:86:16:22:b8:85:a5:
         67:3d:e6:8a:98:9d:65:3f:f9:d3:41:d7:e2:d2:5c:80:47:e9:
         b9:09:89:d1:72:76:d2:31:fc:58:65:7e:e7:ae:28:65:fa:85:
         76:49:e0:bd:03:ce:0e:4a:f3:05:c0:e9:61:3e:23:05:a3:77:
         7a:88:00:06:aa:b7:3e:e2:5f:4d:be:5e:22:6d:17:38:03:98:
         1d:61:97:f1:d2:5f:ac:81:a7:45:fe:e6:6f:ac:b4:4d:19:98:
         43:a1:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org