Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31323a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31323a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          bKzkR8WZAqYcdBCohcNWQNtqI5g2ZH5pgbiUxpItJ4s=
Subject key identifier:   4A:0A:14:D9:3F:06:DA:7E:13:8F:EA:B9:48:2A:D1:96:07:B9:7D:96
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       418D034B8511C1FF6E83EAC3F622EC41C3222B56
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31323a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:30 +0000
ROA not before:           Sat 05 Jun 2021 20:31:30 +0000
ROA not after:            Sat 04 Jun 2022 20:36:30 +0000
asID:                     265066
IP address blocks:        2804:3244:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:03:4b:85:11:c1:ff:6e:83:ea:c3:f6:22:ec:41:c3:22:2b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:30 2021 GMT
            Not After : Jun  4 20:36:30 2022 GMT
        Subject: CN=3082010A0282010100B2552D0F758FDCA1E51BB8D011DED636DA8253A020AB0FC98EC450ABF26AF1B26CAAA2DA502540AA6E3D96B64EC59861C00DFDE2FCE2938DB24828E3F39BD83B801696E93D0B165D6FE46ACB989D1A5E0BA25FC8D2A3DD8DD902F90590AD1BB1492913472D2DEF1783C0D0D30F66C4A61345CCF89E68EA99A144C10808592793C6C95B808BD4D16E8F2974C5B18C048E538A0271823EC142802C32ABCD3D1F722DA69237F3733F2AD01D11522167AECCA27FC02CAB409F66EECB9D7010F6933E1E171617EE7A9ECC10D2CE08C7A6DFE8DEF4657138BD6608D512E311938421BE76CDAE36812849F5F781175028431A2D0698F738CA73007055171D40A1BBE7BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:2d:0f:75:8f:dc:a1:e5:1b:b8:d0:11:de:
                    d6:36:da:82:53:a0:20:ab:0f:c9:8e:c4:50:ab:f2:
                    6a:f1:b2:6c:aa:a2:da:50:25:40:aa:6e:3d:96:b6:
                    4e:c5:98:61:c0:0d:fd:e2:fc:e2:93:8d:b2:48:28:
                    e3:f3:9b:d8:3b:80:16:96:e9:3d:0b:16:5d:6f:e4:
                    6a:cb:98:9d:1a:5e:0b:a2:5f:c8:d2:a3:dd:8d:d9:
                    02:f9:05:90:ad:1b:b1:49:29:13:47:2d:2d:ef:17:
                    83:c0:d0:d3:0f:66:c4:a6:13:45:cc:f8:9e:68:ea:
                    99:a1:44:c1:08:08:59:27:93:c6:c9:5b:80:8b:d4:
                    d1:6e:8f:29:74:c5:b1:8c:04:8e:53:8a:02:71:82:
                    3e:c1:42:80:2c:32:ab:cd:3d:1f:72:2d:a6:92:37:
                    f3:73:3f:2a:d0:1d:11:52:21:67:ae:cc:a2:7f:c0:
                    2c:ab:40:9f:66:ee:cb:9d:70:10:f6:93:3e:1e:17:
                    16:17:ee:7a:9e:cc:10:d2:ce:08:c7:a6:df:e8:de:
                    f4:65:71:38:bd:66:08:d5:12:e3:11:93:84:21:be:
                    76:cd:ae:36:81:28:49:f5:f7:81:17:50:28:43:1a:
                    2d:06:98:f7:38:ca:73:00:70:55:17:1d:40:a1:bb:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0A:14:D9:3F:06:DA:7E:13:8F:EA:B9:48:2A:D1:96:07:B9:7D:96
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31323a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ef:17:b5:50:da:f4:61:65:4a:6f:f6:7f:71:32:83:6f:d1:
         3e:d3:e2:ca:1c:64:b1:2a:74:6f:86:c1:92:30:6c:e3:7a:58:
         00:27:e4:4e:ee:20:20:ec:04:02:6c:9d:72:11:f9:88:8e:ba:
         c3:42:b3:b8:79:92:66:dd:f4:3d:1b:01:4f:0d:39:2b:e6:43:
         b6:ea:49:ab:34:96:df:81:21:24:67:78:a9:aa:16:ba:93:48:
         a8:12:51:4e:c7:ee:59:80:4d:ed:84:89:2d:65:12:3b:23:7f:
         ad:f2:64:03:54:42:92:47:19:bd:4c:7a:58:29:e4:84:47:b6:
         41:b1:d2:08:c4:26:16:dd:3d:5b:df:a1:0d:cf:bd:90:15:dd:
         c9:d7:13:ab:73:cf:5a:2b:e5:1b:85:1a:cd:a7:08:d1:34:eb:
         c2:84:77:d4:50:9e:14:12:26:85:aa:63:15:c0:f2:4f:a2:5c:
         b0:c2:f7:9c:ff:f4:6e:ec:10:33:7a:73:72:ce:ee:aa:26:51:
         78:cd:24:8b:21:bc:d7:be:45:ff:d6:8d:52:b1:71:ff:d6:51:
         ba:87:ab:0d:40:04:e9:e5:db:6b:89:bc:98:92:f6:29:75:43:
         3e:6f:39:38:93:1d:3c:7b:89:83:21:00:ae:c1:ed:98:90:72:
         78:9a:b7:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org