Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31383a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31383a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          nudIJMAb8Cgi9gYSGQtV7hL1eTK1G7lqPDuaBaEHOm8=
Subject key identifier:   52:F1:8B:27:61:FD:82:94:A3:F0:89:88:A2:1C:26:85:BA:1D:A4:4C
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       02133F1B33A523A3067C3DE960E850554A207276
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31383a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        2804:3244:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:13:3f:1b:33:a5:23:a3:06:7c:3d:e9:60:e8:50:55:4a:20:72:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject: CN=3082010A0282010100B39DAA0BB3A551661269AA085D581309188D3637CA606F7DF6595174E96A16022502D5984872A87886F40FCFB8C765814D90C9EF4960E8791F6B394AD9F1C3B60D74E3C59FF90B60685187BAA0463C8902C6BA1F4AF4C950E9E6A1CD95E73855B7ABE8F3F2EA592C4F2F680E0BC051BD85ED2771F66C4DC4B2EE94233B0C0784B017DF57E81F161724D9C211DC289E519981C8E876F87DDF413E821BACAB655C175D790C792D0EE124FCE886F6D9D35A5C5ACE77DFEF0C654082D467FFB9621ED3CA3BF1BDFDAAC27BEC77A1C1B8559E1BB2C59E3332DFB3AC76EF740F34649DA0B4FD419C8F80E2288C96726425CBCF909F48B3D9874C4066EAC3310ACBDDA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:aa:0b:b3:a5:51:66:12:69:aa:08:5d:58:
                    13:09:18:8d:36:37:ca:60:6f:7d:f6:59:51:74:e9:
                    6a:16:02:25:02:d5:98:48:72:a8:78:86:f4:0f:cf:
                    b8:c7:65:81:4d:90:c9:ef:49:60:e8:79:1f:6b:39:
                    4a:d9:f1:c3:b6:0d:74:e3:c5:9f:f9:0b:60:68:51:
                    87:ba:a0:46:3c:89:02:c6:ba:1f:4a:f4:c9:50:e9:
                    e6:a1:cd:95:e7:38:55:b7:ab:e8:f3:f2:ea:59:2c:
                    4f:2f:68:0e:0b:c0:51:bd:85:ed:27:71:f6:6c:4d:
                    c4:b2:ee:94:23:3b:0c:07:84:b0:17:df:57:e8:1f:
                    16:17:24:d9:c2:11:dc:28:9e:51:99:81:c8:e8:76:
                    f8:7d:df:41:3e:82:1b:ac:ab:65:5c:17:5d:79:0c:
                    79:2d:0e:e1:24:fc:e8:86:f6:d9:d3:5a:5c:5a:ce:
                    77:df:ef:0c:65:40:82:d4:67:ff:b9:62:1e:d3:ca:
                    3b:f1:bd:fd:aa:c2:7b:ec:77:a1:c1:b8:55:9e:1b:
                    b2:c5:9e:33:32:df:b3:ac:76:ef:74:0f:34:64:9d:
                    a0:b4:fd:41:9c:8f:80:e2:28:8c:96:72:64:25:cb:
                    cf:90:9f:48:b3:d9:87:4c:40:66:ea:c3:31:0a:cb:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:8B:27:61:FD:82:94:A3:F0:89:88:A2:1C:26:85:BA:1D:A4:4C
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31383a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:18:0c:2b:b4:90:68:f6:0e:64:31:6f:87:0e:43:51:9a:
         e4:ba:bc:0e:22:1d:ce:86:e4:36:f9:6e:ee:19:13:b5:a4:3a:
         8d:72:92:1f:c7:fc:8d:ce:12:ff:b9:21:50:91:1a:f0:10:b0:
         0b:ee:e5:d4:93:f0:bf:d1:62:48:5f:f6:81:75:49:f7:7b:e0:
         22:df:08:1d:b2:a9:56:de:83:9b:ab:06:05:cb:b2:8b:92:c7:
         5f:98:48:67:0b:11:a1:71:69:e0:7d:59:b4:61:02:ad:4c:33:
         03:12:72:69:c7:8b:a5:6c:f4:4e:c5:c6:e4:d9:cf:ae:de:bd:
         df:0d:a8:84:8d:7d:09:12:18:40:a7:4c:8e:44:48:92:e2:a8:
         29:c5:06:ed:15:c7:b1:a9:8f:9a:48:65:d0:ea:fa:1e:4c:f9:
         da:a6:b6:82:13:f4:1c:67:82:52:bf:ca:5e:49:df:9b:b7:8a:
         13:f6:08:33:de:c0:15:26:97:bd:44:9c:c6:b5:18:f2:15:66:
         ec:d6:bf:8d:09:87:fe:1d:cf:79:c1:dc:58:f6:9b:27:b4:c1:
         46:50:e6:7e:a9:80:fd:90:c4:bd:d1:a9:8d:ca:6e:d2:25:a4:
         72:9b:95:fc:5a:cc:3c:8c:7c:b1:6c:96:19:a5:e0:c1:7e:b0:
         ea:3c:bd:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org