Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31633a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31633a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          0M9B+J/DEygEtruEUc6IXmK68f3TQ8qC82eKLpv9l+c=
Subject key identifier:   3B:7B:9F:C9:AF:0E:9A:CD:78:59:DB:B8:5A:04:DA:CD:63:B7:17:3D
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       48873E69515A116A47984D0CDFE5B838C753B020
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31633a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        2804:3244:1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:87:3e:69:51:5a:11:6a:47:98:4d:0c:df:e5:b8:38:c7:53:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:3a:fd:21:3c:62:ef:a7:43:33:72:a3:cf:
                    1c:6f:ae:5f:24:22:56:21:ab:18:e8:18:b5:d4:35:
                    55:b3:23:39:d7:92:72:0b:71:1d:38:8b:65:a8:40:
                    d0:9a:f6:32:cc:b5:6c:8d:75:1a:74:db:ea:44:17:
                    f6:52:34:af:20:a2:fb:aa:7c:15:23:c0:4d:a2:06:
                    db:ac:d1:87:60:db:0e:61:e9:16:68:c0:c6:f3:b4:
                    d1:d2:f6:c2:4d:17:64:03:d5:a0:86:e8:d6:12:32:
                    c8:86:2d:ce:ae:1a:bb:49:ff:49:9b:81:ee:75:20:
                    01:36:f7:ea:48:e3:df:4e:ad:62:2f:18:b7:00:61:
                    54:56:fd:49:79:56:98:74:14:05:6e:fc:ce:16:42:
                    f3:85:2b:1c:ac:8a:7f:0c:35:bc:89:a5:8f:b6:1d:
                    d8:e8:8a:17:ac:59:90:68:00:75:10:50:d4:e3:18:
                    5e:62:90:05:2f:88:2b:4a:e7:f5:0b:5f:46:9e:d6:
                    b0:dc:87:c7:41:dc:64:0a:4b:09:6a:bf:8a:4a:bf:
                    85:25:2a:1d:a1:7f:f3:3b:e0:6c:c3:df:3d:ff:fc:
                    25:8e:ba:2a:54:93:29:17:12:6c:ef:ce:be:9a:36:
                    f4:7a:66:fe:ad:d4:bd:52:4d:8b:b0:6c:7a:bb:03:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:9F:C9:AF:0E:9A:CD:78:59:DB:B8:5A:04:DA:CD:63:B7:17:3D
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31633a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:73:ce:5d:d0:cd:ac:e2:4c:b8:92:b1:ed:b1:ef:87:ea:55:
         7d:f8:07:67:59:dc:a0:e1:6a:21:e9:66:c1:e7:97:d9:21:10:
         74:02:a4:3f:6d:96:f4:24:fa:28:ff:12:38:58:65:a6:59:26:
         07:6f:4d:c9:f6:1a:2d:5f:d2:67:70:ff:25:21:2d:bd:31:ca:
         99:10:f7:dc:4e:07:25:e9:b5:61:5b:7c:1d:05:23:5a:da:e4:
         68:19:c7:6f:3c:4e:f8:a6:d1:25:fa:66:45:4f:72:e9:cd:22:
         9b:3c:42:68:62:a4:54:fa:7f:b9:16:8d:d5:8e:4c:75:45:23:
         9a:a3:c6:a2:9d:2a:d6:6b:4c:ca:f9:5b:0d:cf:3e:4d:a8:ca:
         b4:40:cc:b1:98:e8:8c:45:d9:04:5d:6a:5e:10:c9:3d:d8:fc:
         18:49:33:6e:b3:97:1d:62:f7:05:84:c9:4e:93:f5:c7:90:a3:
         59:9d:a0:f0:58:6d:60:2f:7c:6e:4a:ac:ce:0b:a9:45:27:09:
         11:3e:35:e9:86:e3:ac:ff:d0:0f:c6:ee:ee:32:32:a0:0e:54:
         1c:61:2f:5e:f7:fa:46:3e:d7:8f:12:dd:3b:e2:39:a2:b2:00:
         41:9d:37:d6:9a:72:47:78:19:16:5a:a7:5b:32:49:6f:29:51:
         34:70:20:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org