Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31303a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31303a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          Hro+OTXEk4eXZSsK/hL9b1JUCyjaD+W+YO71IYpoY9g=
Subject key identifier:   72:6A:B4:FE:32:DA:67:7B:99:C6:8D:BF:B3:40:0F:F1:DD:83:7D:27
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       599744CC47BF6DA106B5F93E200C0324CC3413FF
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31303a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        2804:3244:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:97:44:cc:47:bf:6d:a1:06:b5:f9:3e:20:0c:03:24:cc:34:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:8f:20:9a:d7:5a:85:f0:e0:85:b9:b5:49:
                    bd:fe:b0:3f:ae:ee:c2:c7:5e:42:b1:d3:a0:0b:48:
                    ee:ee:3e:3b:d5:29:53:26:64:88:9a:79:6a:62:9d:
                    8c:9b:e1:d6:87:30:49:ee:70:83:ad:c9:5d:54:2e:
                    21:9d:41:36:0a:d8:2c:e8:39:80:81:5e:44:cb:b3:
                    b0:19:95:ca:71:2b:2e:f3:39:9f:05:15:e6:73:ce:
                    53:b7:e5:07:7f:ee:0d:e9:56:53:52:1d:03:bd:9f:
                    c8:85:d9:3f:f5:72:05:11:0e:15:8a:91:d0:3e:d8:
                    7a:5d:46:47:3c:36:6a:a4:9d:4f:74:83:8f:de:b2:
                    de:23:80:83:e8:67:99:f3:ff:11:75:d3:48:a1:22:
                    ea:89:3b:fc:d8:a7:3c:3a:6b:3c:14:5b:8c:5b:05:
                    a5:72:1a:a1:70:ec:f4:26:53:bf:bc:59:c3:7e:1d:
                    83:d7:41:d7:ac:73:71:aa:24:77:5a:2e:b0:52:7e:
                    d1:ba:f1:c4:da:bc:db:75:0e:81:5f:04:d3:00:2a:
                    3c:19:05:b8:50:c0:df:50:61:ac:d9:2b:73:b8:32:
                    fa:04:4f:d6:a3:4a:b0:eb:c9:05:d1:e2:33:0e:69:
                    11:12:7e:62:ff:89:d6:50:3e:ee:1a:80:bb:5d:84:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6A:B4:FE:32:DA:67:7B:99:C6:8D:BF:B3:40:0F:F1:DD:83:7D:27
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31303a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:5b:db:b4:ee:23:60:21:79:3c:7f:d9:e8:a8:e7:37:1b:
         34:e6:df:e6:dc:67:f1:45:4c:46:ed:35:53:c5:c7:78:cc:d2:
         e3:a0:5a:ba:9b:d4:c6:4d:a8:f9:6e:3e:7b:4c:c7:46:d6:cd:
         ed:9c:fa:ab:8d:02:77:99:7e:20:d8:16:ad:37:1d:c5:64:4a:
         6b:85:2a:8b:e3:33:2b:2c:03:55:3a:7c:dd:aa:e5:d6:ca:a0:
         48:76:61:f4:dc:c6:ff:0c:33:b5:f1:3b:6f:7b:90:01:2e:92:
         5e:e0:0a:ec:a3:4f:e7:7d:ec:14:a7:f2:9e:46:72:2f:9e:23:
         f5:d9:d6:99:f8:90:44:3b:9f:a4:45:46:cd:2a:a1:ea:14:13:
         24:99:69:f9:a0:4f:63:4b:dd:79:cc:ac:8b:a5:3c:1c:f5:5c:
         fb:be:af:17:ac:ab:da:9e:1f:8c:39:e5:63:5a:54:a0:2c:91:
         9f:6b:2d:9d:13:b1:91:4f:e5:44:f4:73:1d:5f:65:32:f8:58:
         ff:3a:da:7f:17:77:e0:f2:21:01:85:2e:5d:dd:de:6c:38:3d:
         fe:8b:21:55:14:fc:69:f8:73:f8:fe:b7:e6:9a:24:d0:a0:30:
         f8:fa:d3:3b:f3:c9:7a:b0:fd:38:ed:df:27:cd:92:d1:37:e8:
         84:d7:b8:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org