Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31313a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31313a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          gM8/6tlc3XiYgFKS0MDGVhHoEUMydfX3TLohZn5kBdc=
Subject key identifier:   02:63:B6:C5:54:2E:61:00:16:33:AD:20:4E:AF:0B:27:47:54:37:A0
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       6036E44059F55537E4761D0A71DF04BEDB44C928
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31313a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:30 +0000
ROA not before:           Sat 05 Jun 2021 20:31:30 +0000
ROA not after:            Sat 04 Jun 2022 20:36:30 +0000
asID:                     265066
IP address blocks:        2804:3244:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:36:e4:40:59:f5:55:37:e4:76:1d:0a:71:df:04:be:db:44:c9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:30 2021 GMT
            Not After : Jun  4 20:36:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:08:24:ec:bc:94:40:1b:5a:d4:48:98:40:
                    f4:f6:d3:de:85:9b:b0:24:14:3a:85:ef:d5:32:38:
                    bd:ca:f2:97:0b:3a:70:e3:ef:51:30:28:0f:05:92:
                    96:fb:87:8d:2e:a4:7b:2c:80:03:4e:bf:0f:da:fc:
                    a1:e0:9b:70:32:8f:78:c0:3d:09:54:e9:0a:e1:97:
                    50:c0:fc:9a:3c:04:0f:cc:87:f2:80:b6:80:de:14:
                    b1:17:8c:92:ea:f2:2d:14:b9:c6:d8:e1:96:40:11:
                    90:d8:8b:b3:d5:09:09:52:fd:08:54:45:a6:7f:8f:
                    a0:21:4f:c1:0f:b9:33:58:84:48:e6:6b:eb:43:60:
                    e4:2f:c9:c3:5e:ca:4f:d7:f3:70:5f:94:74:b6:8d:
                    bd:88:61:97:0b:89:eb:ed:a9:89:c1:96:c9:44:6e:
                    7d:6f:71:d7:8c:b5:6d:48:82:6e:d0:a2:fd:01:6f:
                    2b:d7:56:08:06:3c:b5:c8:77:3d:0c:8c:9f:53:9d:
                    90:d0:51:38:52:36:d7:26:03:fa:c6:0b:ab:a7:6c:
                    69:39:c4:e9:c5:41:47:49:c7:d6:53:bc:22:11:4b:
                    bb:7c:82:0b:0d:9d:34:3b:7e:43:13:ee:05:ef:1f:
                    b0:65:91:cf:24:70:52:8e:26:4a:88:78:6f:29:91:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:B6:C5:54:2E:61:00:16:33:AD:20:4E:AF:0B:27:47:54:37:A0
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31313a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:68:6c:56:59:d8:04:55:e7:75:b8:3b:46:ce:30:00:59:
         a8:8f:2a:c7:fd:8b:d7:00:29:3c:24:5e:03:10:60:08:08:d3:
         62:f6:ea:e4:46:29:b4:3b:f0:9f:52:79:62:8f:f0:0b:cb:ef:
         5c:a8:0c:14:fb:0c:2f:2a:f4:10:d9:69:4c:1b:5e:27:78:71:
         81:09:f3:b5:8c:63:00:86:df:df:61:1e:3b:0b:8d:90:48:ed:
         f5:7e:a7:43:4c:12:25:ac:d4:31:cf:bc:3d:89:7c:12:30:53:
         77:ae:29:43:0f:ee:1a:d6:1f:8e:b4:df:05:19:40:00:29:d0:
         47:a0:9c:d8:a2:1f:0b:4b:89:ec:a1:79:44:0a:cd:bc:39:a9:
         83:04:95:89:ca:89:94:ea:f9:45:66:44:b6:30:0d:71:9f:88:
         ae:97:90:64:d1:fc:1d:a3:7e:17:85:84:a1:d0:84:ad:7d:97:
         97:71:0b:5a:06:e8:81:74:7e:6c:a9:76:b7:5f:39:b6:87:a3:
         21:51:99:34:a6:5e:63:09:aa:6c:fe:28:6b:52:9d:83:bf:e3:
         59:bf:83:aa:9a:93:78:01:ce:0d:61:6c:19:2b:4e:08:47:bb:
         40:0a:1a:8e:f4:d3:dc:e5:f8:d4:ce:9b:67:04:5b:2e:56:17:
         47:ee:6f:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org