Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3130303a3a2f34302d3430203d3e20323635303636.roa
File:                     323830343a333234343a3130303a3a2f34302d3430203d3e20323635303636.roa (raw, json)
Hash identifier:          LW8ZIwmoZz/Wl+o0Hp43nNtTUhKXaCnafgJ8R3LV6ek=
Subject key identifier:   2E:B0:23:8C:48:73:6B:92:48:BD:53:1C:FC:6B:BD:E8:B0:50:F9:9E
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       73EE1B4A1BC5765137C830EF1F8C61CF4DD1AC68
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3130303a3a2f34302d3430203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        2804:3244:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ee:1b:4a:1b:c5:76:51:37:c8:30:ef:1f:8c:61:cf:4d:d1:ac:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:4a:f8:64:ff:be:a5:bc:18:07:32:51:39:
                    d0:a7:0d:09:fd:b9:56:1a:5a:07:e8:fa:98:13:f3:
                    3e:07:50:5c:4f:3d:b0:4d:9e:a6:9d:f8:89:d2:70:
                    64:4f:0c:26:45:1e:3d:ae:7a:03:59:a1:c2:59:1b:
                    95:40:94:05:8d:29:fc:81:87:71:d0:1c:ed:72:b8:
                    30:92:d7:a1:a1:7f:d6:d5:6d:f3:fe:e9:3e:9d:d9:
                    07:86:80:bb:6e:e9:10:92:55:38:69:70:23:c3:88:
                    7b:53:42:3f:f4:1c:4b:28:f0:78:b4:6b:75:a4:4c:
                    30:ed:f2:28:e5:2a:49:cb:90:4c:7d:78:90:3b:3c:
                    58:59:1b:7f:3a:ae:00:27:2b:c4:e9:f5:cf:f0:64:
                    63:e3:1c:9b:69:3b:e1:09:17:37:71:03:af:d9:b8:
                    72:4b:90:26:ba:d7:fc:56:40:4c:75:3d:36:88:a3:
                    ad:46:bd:44:a9:f1:51:e5:b3:65:60:23:22:ef:a5:
                    e1:0d:e6:d7:88:c9:c9:6f:ba:96:c8:de:44:7c:95:
                    f7:47:2d:ba:4d:66:5f:74:2a:51:67:b3:9e:1e:d6:
                    bb:d4:d3:da:1b:a0:82:c1:81:1c:f2:85:d6:9a:ab:
                    13:6c:03:57:0b:21:23:3e:50:fd:3c:5b:27:23:4e:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B0:23:8C:48:73:6B:92:48:BD:53:1C:FC:6B:BD:E8:B0:50:F9:9E
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3130303a3a2f34302d3430203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:cc:4c:97:90:ce:4d:82:f2:05:71:49:39:81:41:6c:17:
         c2:7b:31:ad:d7:40:36:ab:65:73:44:13:bd:ba:31:96:29:45:
         8a:4d:37:ce:50:88:08:c5:17:04:41:da:8d:ab:e7:20:a0:fb:
         ca:42:d5:41:30:4d:8f:12:ed:87:d1:f2:81:c7:52:3b:ce:7a:
         36:34:d7:f0:90:d3:ab:26:3c:fd:67:b1:53:3e:7b:9f:a0:03:
         d0:dc:12:9f:16:ba:6f:ab:13:83:90:4f:2d:11:d4:3b:59:70:
         4c:86:50:7e:dd:a8:f3:24:33:ba:e7:6d:95:ac:f4:cc:63:72:
         ae:bb:03:c3:8c:f0:e9:13:87:53:cc:cd:5a:20:52:3d:da:45:
         54:8f:88:54:42:12:46:a1:5b:3f:ce:12:cd:f9:1b:2c:3b:fe:
         7e:88:fe:b8:46:36:ae:b3:67:a0:c2:23:5b:03:b4:74:c8:6b:
         c3:cd:3c:0e:ce:2b:3c:5e:2f:e5:ba:dc:a2:5f:b4:9a:3c:77:
         0c:9f:9e:7a:e4:a6:3c:05:6a:2f:63:be:09:bd:00:a5:e0:4f:
         80:3d:4b:87:f5:45:9d:ad:ef:15:59:65:ba:d1:16:80:b5:0d:
         5d:18:8d:7d:d7:bb:5e:1c:58:40:38:10:49:d7:41:08:96:27:
         f5:70:25:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org