Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31393a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31393a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          xrOc29l8Y+cGwp8CUc3n/OpQNu48Ggmy2fHC3U9Da64=
Subject key identifier:   4A:A7:23:E2:65:DC:44:67:A4:62:BD:0D:A6:77:5D:BB:D7:4B:72:79
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       390FA759963346220ABCFCA2C9ED37FD9A0AD462
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31393a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:34 +0000
ROA not before:           Sat 05 Jun 2021 20:31:34 +0000
ROA not after:            Sat 04 Jun 2022 20:36:34 +0000
asID:                     265066
IP address blocks:        2804:3244:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0f:a7:59:96:33:46:22:0a:bc:fc:a2:c9:ed:37:fd:9a:0a:d4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:34 2021 GMT
            Not After : Jun  4 20:36:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:3d:0e:15:85:8f:0b:34:4c:ab:56:53:61:
                    75:b0:18:e6:a0:d5:6e:a4:83:8f:dc:ca:1f:6a:84:
                    72:4a:fc:bb:01:e5:1a:18:25:8e:58:70:13:6e:eb:
                    01:37:f3:49:45:f6:c3:9c:a4:8a:59:3e:1a:cc:63:
                    de:a8:bd:86:0d:ef:e1:e0:bd:74:94:a3:e5:26:d9:
                    36:0a:de:f1:f2:83:fd:6b:c9:75:af:c1:33:d0:9d:
                    4b:d5:70:cf:c4:06:50:ec:d0:69:0f:bf:88:ca:5b:
                    78:4e:0f:6c:28:b3:fc:f3:16:ab:51:fb:61:9c:4f:
                    ce:c9:41:9d:7c:6a:50:96:4b:81:5a:4c:a7:b7:df:
                    35:dc:bc:a2:d3:08:18:87:4c:e0:83:65:6f:80:84:
                    79:cd:93:fc:86:41:9e:90:2a:f0:ba:07:91:0c:4b:
                    5b:28:2e:e7:aa:fe:8b:fd:22:e9:7b:21:37:f2:3c:
                    58:e1:58:5d:84:d0:5a:f6:8a:ff:a2:51:ff:49:08:
                    15:f1:d5:ee:d1:30:f4:58:39:94:9b:f9:40:cd:74:
                    bd:80:f5:a7:0c:48:5c:e3:d2:17:58:23:09:17:ef:
                    25:18:93:c3:bf:68:d2:75:9e:e8:f0:2d:f8:ce:0a:
                    9a:39:18:39:89:f0:15:b4:c1:5b:c4:99:b2:1c:0d:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A7:23:E2:65:DC:44:67:A4:62:BD:0D:A6:77:5D:BB:D7:4B:72:79
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31393a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:cd:cc:d5:5b:fc:ae:95:8c:98:08:5c:3a:0e:00:c2:d6:
         69:58:e6:cf:51:53:78:d8:49:bd:92:6b:ff:ac:df:cc:6c:89:
         c8:ea:2b:50:66:a9:40:f1:0e:25:c7:db:e7:8b:81:4d:ee:1e:
         7c:c1:83:87:71:de:ac:8e:4f:06:96:a2:8d:5b:8a:48:2b:7a:
         92:4d:8c:5e:dd:d4:15:79:bd:d1:00:a8:45:8e:de:0a:36:bf:
         f6:1d:f4:bf:84:f6:69:9f:0d:bf:4d:3a:69:98:f0:30:41:e0:
         a4:b6:4d:41:26:7f:10:60:d1:ad:dd:c4:ba:11:c9:92:ab:8b:
         f0:e5:c2:be:69:e9:75:fe:b5:d9:65:f6:db:f2:ef:16:3a:74:
         73:fd:72:7b:b0:e7:6d:3c:10:b7:1b:67:2c:0b:88:30:7b:0a:
         b8:98:1b:15:4a:1c:c1:28:95:26:7b:c4:de:55:40:20:bc:f8:
         fa:3a:ac:4a:79:36:ae:65:02:86:4a:44:43:7a:bf:79:ea:e4:
         6a:18:06:79:14:23:4a:a6:34:ab:f9:62:96:d5:7f:06:bf:e3:
         05:c7:19:0e:85:c9:f4:fc:c5:61:cf:d0:8e:a6:00:48:5f:81:
         8b:ba:d8:dd:43:f3:93:bc:d5:e9:11:56:8e:7b:a0:5e:92:96:
         b8:34:9a:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org