Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a313a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a313a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          bXKP+36x9wfP36DvoQEFb1pcqUz62WHJXqZcm5t1ncc=
Subject key identifier:   1C:D7:6B:4A:E4:7F:47:AA:B1:CC:36:D9:26:7D:89:95:AE:41:76:DC
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       512B49AE64864A529687CFFB474071A7BA472039
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a313a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:35 +0000
ROA not before:           Sat 05 Jun 2021 20:31:35 +0000
ROA not after:            Sat 04 Jun 2022 20:36:35 +0000
asID:                     265066
IP address blocks:        2804:3244:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2b:49:ae:64:86:4a:52:96:87:cf:fb:47:40:71:a7:ba:47:20:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:35 2021 GMT
            Not After : Jun  4 20:36:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:b5:8d:c3:80:ea:3f:58:20:8e:44:9d:37:
                    b2:7d:57:c6:67:69:32:17:fb:39:d8:8c:a9:31:32:
                    9c:90:60:83:4b:9e:82:fe:77:9f:9d:2b:9e:0a:f4:
                    c7:bb:1f:56:b4:ed:4f:28:47:a8:6f:23:81:bf:26:
                    97:82:5c:fc:15:36:c3:b6:87:d4:04:d9:d6:8c:bd:
                    05:f6:db:0a:71:0a:81:92:b4:f7:ce:d6:e4:b3:13:
                    b9:ac:0d:4f:f3:b4:83:1b:ff:39:a7:7e:15:d4:1a:
                    38:86:74:da:3e:07:10:16:76:8e:fb:cb:3b:d2:82:
                    a1:61:bc:34:b1:44:de:65:d6:8a:64:be:4a:44:d4:
                    c8:06:7a:c7:2a:e4:64:23:87:5e:a2:7e:94:c9:13:
                    b4:ab:60:9e:d4:41:78:27:74:4c:9f:60:99:35:97:
                    05:d9:27:7b:7e:e5:bd:f5:e3:27:f1:66:a0:fe:10:
                    f9:32:ef:a3:10:33:1a:b3:8f:c3:d5:17:bb:21:a1:
                    8e:e2:da:c0:9b:78:70:89:35:76:ca:a0:68:de:78:
                    6a:ec:f7:20:e4:e5:19:0f:3f:f0:02:da:e8:47:1d:
                    29:0f:bf:e6:12:0e:6f:0e:b9:1e:8a:29:fa:3e:4d:
                    85:12:ce:ae:bd:c5:17:5a:57:09:9a:f4:66:a9:77:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:6B:4A:E4:7F:47:AA:B1:CC:36:D9:26:7D:89:95:AE:41:76:DC
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a313a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:9f:b9:58:5e:cc:8f:cc:fb:f5:76:dc:29:d0:b7:63:93:
         25:59:fc:04:8e:6c:eb:42:4a:9c:95:9f:71:ad:99:d0:ec:39:
         df:a2:e8:fd:e4:cc:a3:bc:0a:81:62:76:f1:df:26:e2:be:61:
         fd:1a:7d:f9:46:d9:23:4d:18:88:d4:d7:b5:06:e9:86:a2:4f:
         d8:16:fa:27:46:dd:a6:72:48:6c:00:25:af:6d:3c:1d:56:0f:
         49:cc:a7:81:fa:4d:4c:a0:d3:eb:93:cf:d6:9d:c1:8d:49:60:
         82:e0:40:39:a8:c9:1a:ac:98:81:0a:03:73:34:a0:8d:b3:b0:
         32:c5:98:92:68:01:b7:3c:f7:6c:84:02:e0:d5:85:31:7e:19:
         e4:93:36:f3:b7:4e:80:86:9f:41:75:40:39:a5:44:fd:2b:45:
         97:a9:ea:72:4f:3f:7d:d5:9d:59:75:44:1a:81:0f:62:6e:6d:
         96:d1:bf:3c:c2:71:f5:38:a9:36:ed:94:63:a5:1e:7d:31:9c:
         bb:25:38:c9:a8:39:48:59:91:3c:a9:53:f6:4a:19:58:b5:a3:
         a5:fb:ea:09:8c:9c:66:2d:02:27:38:82:38:3c:d0:88:41:a5:
         80:75:22:4a:25:17:fe:6f:08:36:2f:33:4f:5e:cd:db:f2:77:
         68:22:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org