Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32332e302f32342d3234203d3e20323635303636.roa
File:                     3137392e3132352e32332e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          WyqRQL0EatnUNAbS1hT9pMcgAFG0srghk5r0ecvfTgg=
Subject key identifier:   A9:03:C0:38:9C:99:C4:F3:11:DF:5D:5B:75:C1:5C:82:BA:30:7B:9B
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       2F9A7980C7CA9B31F66E6BE023D27C23A1CC32AF
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32332e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        179.125.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9a:79:80:c7:ca:9b:31:f6:6e:6b:e0:23:d2:7c:23:a1:cc:32:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:0f:26:64:bf:0b:ce:b3:80:c7:fe:37:c6:
                    88:b5:54:5a:05:e6:85:25:c7:f8:39:96:6d:50:56:
                    1d:4b:e3:83:86:da:aa:65:5a:48:1c:ca:f4:c1:9f:
                    90:ca:65:46:e7:b2:e4:ec:be:06:d8:0b:51:80:5b:
                    1f:70:b0:ad:f6:ed:50:0e:1b:33:c8:10:ae:2c:9d:
                    f1:c7:09:ef:09:59:c8:9b:9a:b0:f6:39:68:e4:86:
                    5b:c1:5c:a4:4e:72:7f:b2:24:e3:72:df:ca:8c:5e:
                    e7:62:f1:d6:be:38:f0:e4:e7:a2:1e:5a:3d:5a:e2:
                    6e:8d:d6:ef:86:14:a2:fa:8f:f0:48:98:77:76:d5:
                    41:fb:c2:f5:07:70:35:a3:4c:00:b8:4f:e4:2e:da:
                    57:4d:09:6b:a9:d0:0a:62:a7:6c:17:22:8f:19:76:
                    e8:ae:6b:62:e1:b9:f2:53:12:6e:8f:e2:e1:81:91:
                    c2:e2:dc:64:49:7f:90:df:88:78:e3:17:f1:35:f4:
                    4e:c4:07:77:e4:0b:e0:12:a2:88:29:85:c3:2a:aa:
                    28:92:a4:84:60:12:7e:b1:2c:60:08:d3:d4:0e:6a:
                    2d:a1:8f:ee:bc:67:5e:b3:93:77:3f:a9:85:f9:a8:
                    16:99:0f:d9:99:e3:57:4c:a7:f9:d0:c7:8f:28:6c:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:C0:38:9C:99:C4:F3:11:DF:5D:5B:75:C1:5C:82:BA:30:7B:9B
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32332e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:51:67:15:f1:a8:2a:92:88:a7:7f:d7:e2:af:57:c2:78:
         c2:f0:00:af:4d:33:33:43:cd:ed:54:da:1b:4f:1b:43:f5:ca:
         9b:bb:01:97:a4:21:d5:cf:3a:74:f6:3e:b7:19:f5:b6:88:29:
         ec:5a:89:c3:c2:70:da:e8:78:2d:52:b1:e0:41:0f:56:b9:e5:
         fc:87:78:50:b6:35:e9:c1:b8:79:00:28:cd:df:6f:d9:fb:80:
         c3:6e:59:82:5d:8b:a5:dd:14:b1:38:fc:83:de:33:d6:9f:8a:
         53:2c:97:23:b2:cb:95:6f:6c:b2:5f:9a:d5:b1:9c:f6:a0:8d:
         90:37:d3:ee:89:71:c9:5b:f2:a4:30:27:7a:45:6d:24:39:0d:
         9c:08:84:4c:43:a0:4e:b3:69:02:38:15:3f:68:fe:7e:57:7d:
         e9:3b:53:1f:4b:22:4f:e7:32:11:48:58:b0:80:42:28:c3:bd:
         24:e2:11:f6:0a:90:b5:e3:fa:41:ce:86:f9:59:66:bb:ab:02:
         52:a4:25:34:64:17:7d:50:50:eb:dc:d3:9c:b4:24:50:45:0d:
         fd:11:b2:8c:ae:38:9a:6c:41:34:42:4e:71:a1:ee:88:3d:39:
         27:c8:f1:c1:5c:24:47:b8:d8:04:cb:cf:49:3e:e7:46:65:2c:
         84:67:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org