Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31343a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31343a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          HApW5ScM88gMMGGurPoM3SMDgJ9re8f+t1Nabb8xS+A=
Subject key identifier:   29:6E:65:F9:EF:B9:AD:66:D2:A6:94:1A:D0:1C:4F:73:92:7A:A6:63
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       2AFAFEE1A0D8455E618F193112886B9B3488B266
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31343a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        2804:3244:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fa:fe:e1:a0:d8:45:5e:61:8f:19:31:12:88:6b:9b:34:88:b2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:d5:6a:89:4d:9f:fc:ba:88:37:59:13:7f:
                    e6:de:1e:cc:bf:d5:5e:95:22:67:ce:a4:a9:7a:dc:
                    63:a9:3a:a4:c5:c9:9a:24:0f:34:e1:11:ca:a3:fd:
                    18:17:73:8a:a6:1d:8c:95:35:e6:a2:bf:59:a5:53:
                    42:f7:8d:4a:db:22:8b:0e:60:9f:ca:94:aa:78:a6:
                    d1:23:d3:6e:d6:34:6d:72:73:04:73:ee:48:5f:3a:
                    c5:63:d0:63:1a:6c:01:8d:77:f2:ce:df:7f:d6:e5:
                    6d:7a:25:53:b3:5b:dc:3c:95:47:37:73:26:77:f1:
                    51:0e:80:0a:80:6d:4a:ba:1a:b4:0c:d5:18:9c:6f:
                    e3:0a:8d:19:a5:7f:cd:e7:f2:01:34:5b:7c:22:33:
                    de:95:68:f5:b3:97:89:3e:c0:a4:d3:29:79:be:e7:
                    2e:5f:b5:1c:93:36:01:ea:71:3b:78:71:30:46:6d:
                    12:d3:89:b1:d5:98:3a:ba:8b:5b:27:13:56:7a:68:
                    22:d6:d7:bb:3c:5b:1e:c3:04:e6:23:ce:f8:57:4a:
                    a4:a4:84:95:df:ca:ed:e5:af:4b:92:42:74:f4:d5:
                    60:8a:2a:6f:d1:c0:2f:de:61:46:f8:14:df:07:10:
                    ee:55:cd:67:1f:94:f4:66:08:71:35:85:5b:ec:d5:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6E:65:F9:EF:B9:AD:66:D2:A6:94:1A:D0:1C:4F:73:92:7A:A6:63
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31343a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:f2:23:12:03:9b:c9:c1:91:63:db:fb:01:81:ed:ed:a1:
         b3:a3:f9:51:99:98:37:40:a8:bc:d3:70:7d:aa:92:59:51:f7:
         98:26:6d:7a:4d:9a:cb:c6:da:cb:ec:78:d1:8a:13:8b:8f:44:
         4d:d5:64:07:ab:d8:65:d3:50:5f:0c:e2:00:83:3e:25:56:27:
         06:77:1e:59:60:f6:c6:92:31:a3:81:0f:1a:b5:43:ea:b6:fe:
         1d:7f:2e:2e:50:0f:18:72:c3:39:14:69:65:5c:12:71:af:c8:
         54:e7:cf:9c:1a:0b:23:22:2b:eb:8c:43:d6:10:42:8c:b8:79:
         27:21:a9:05:6e:cb:ca:a6:d4:d0:40:84:ce:0e:8e:a1:a7:39:
         7b:1a:bd:62:66:63:4d:2a:33:84:b1:21:c2:b5:d0:b2:37:7f:
         3c:b7:fd:09:b2:02:d1:56:02:66:28:dd:ab:f5:62:38:ba:b4:
         0e:0b:af:1e:79:d6:8c:c7:b6:d8:eb:47:43:19:6d:0b:4f:c1:
         35:0b:1d:83:c1:7b:ca:29:e4:ac:86:a0:bc:13:45:50:ca:1c:
         fa:78:4b:fe:40:3b:95:6d:53:db:2f:e7:ed:18:c1:03:b2:1e:
         de:c3:7c:68:d7:f4:20:6b:9b:c5:f6:b0:f8:50:7d:df:68:ba:
         f4:71:9c:65
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUKvr+4aDYRV5hjxkxEohrmzSIsmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjdaFw0yMjA2MDQyMDM2MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUJCNkQ1NkE4OTREOUZGQ0JB
ODgzNzU5MTM3RkU2REUxRUNDQkZENTVFOTUyMjY3Q0VBNEE5N0FEQzYzQTkzQUE0
QzVDOTlBMjQwRjM0RTExMUNBQTNGRDE4MTc3MzhBQTYxRDhDOTUzNUU2QTJCRjU5
QTU1MzQyRjc4RDRBREIyMjhCMEU2MDlGQ0E5NEFBNzhBNkQxMjNEMzZFRDYzNDZE
NzI3MzA0NzNFRTQ4NUYzQUM1NjNEMDYzMUE2QzAxOEQ3N0YyQ0VERjdGRDZFNTZE
N0EyNTUzQjM1QkRDM0M5NTQ3Mzc3MzI2NzdGMTUxMEU4MDBBODA2RDRBQkExQUI0
MENENTE4OUM2RkUzMEE4RDE5QTU3RkNERTdGMjAxMzQ1QjdDMjIzM0RFOTU2OEY1
QjM5Nzg5M0VDMEE0RDMyOTc5QkVFNzJFNUZCNTFDOTMzNjAxRUE3MTNCNzg3MTMw
NDY2RDEyRDM4OUIxRDU5ODNBQkE4QjVCMjcxMzU2N0E2ODIyRDZEN0JCM0M1QjFF
QzMwNEU2MjNDRUY4NTc0QUE0QTQ4NDk1REZDQUVERTVBRjRCOTI0Mjc0RjRENTYw
OEEyQTZGRDFDMDJGREU2MTQ2RjgxNERGMDcxMEVFNTVDRDY3MUY5NEY0NjYwODcx
MzU4NTVCRUNENUM0RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm7bVaolNn/y6iDdZE3/m3h7Mv9VelSJnzqSpetxjqTqkxcmaJA80
4RHKo/0YF3OKph2MlTXmor9ZpVNC941K2yKLDmCfypSqeKbRI9Nu1jRtcnMEc+5I
XzrFY9BjGmwBjXfyzt9/1uVteiVTs1vcPJVHN3Mmd/FRDoAKgG1Kuhq0DNUYnG/j
Co0ZpX/N5/IBNFt8IjPelWj1s5eJPsCk0yl5vucuX7UckzYB6nE7eHEwRm0S04mx
1Zg6uotbJxNWemgi1te7PFsewwTmI874V0qkpISV38rt5a9LkkJ09NVgiipv0cAv
3mFG+BTfBxDuVc1nH5T0ZghxNYVb7NXE2QIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FCluZfnvua1m0qaUGtAcT3OSeqZjMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMyMzgzMDM0M2EzMzMyMzQzNDNh
MzEzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEMkQAFDANBgkqhkiG9w0BAQsFAAOCAQEAi8vyIxIDm8nBkWPb+wGB7e2h
s6P5UZmYN0CovNNwfaqSWVH3mCZtek2ay8bay+x40YoTi49ETdVkB6vYZdNQXwzi
AIM+JVYnBnceWWD2xpIxo4EPGrVD6rb+HX8uLlAPGHLDORRpZVwSca/IVOfPnBoL
IyIr64xD1hBCjLh5JyGpBW7LyqbU0ECEzg6Ooac5exq9YmZjTSozhLEhwrXQsjd/
PLf9CbIC0VYCZijdq/ViOLq0DguvHnnWjMe22OtHQxltC0/BNQsdg8F7yinkrIag
vBNFUMoc+nhL/kA7lW1T2y/n7RjBA7Ie3sN8aNf0IGubxfaw+FB932i69HGcZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org