Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31643a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31643a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          AvNJiMzDHLQiHDCUzwwzHIcNmc7O83VS4MQl1nNr624=
Subject key identifier:   77:DF:4D:AD:D7:04:8C:93:8E:94:64:A0:A2:B3:69:0E:48:53:36:68
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       36656EFFB44F7FF07B13831D9FF2109364FE6BFF
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31643a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:30 +0000
ROA not before:           Sat 05 Jun 2021 20:31:30 +0000
ROA not after:            Sat 04 Jun 2022 20:36:30 +0000
asID:                     265066
IP address blocks:        2804:3244:1d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:65:6e:ff:b4:4f:7f:f0:7b:13:83:1d:9f:f2:10:93:64:fe:6b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:30 2021 GMT
            Not After : Jun  4 20:36:30 2022 GMT
        Subject: CN=3082010A0282010100C2875E028FC1906989A3A807115517DD9DD8E9B84B27CDAED25F69B2CCFCD94471B74A4A5D195AA21295BE1BFDD1DD09D9F3DB37B2DE0A3F21CD9D15FE263C0CBFC817BA7BB4AA5404B645974FF2B221132E51C91D0216486D754F94C2849398F7023DDC7724B2B9FFB5C9009F3330BB1FB0D029A2ADF635F2EE70F611A618AD228ADA65AFC6E940C2A361D239C56925A53787F9646DA6E80F2DD2A4EFE96432D595BDE46C17492E747C80D882E340691D945912707A3423CEEFC94454C3E533AC1D80E99FC33B702F6D307CEEA4F57E01444AE5F5CB2A0E49C5BCA89E6DDF0AAA2A00A46A89BFCD20F420CD67AF6C88C147CC0DB9ED02E0A371708D0598324B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:5e:02:8f:c1:90:69:89:a3:a8:07:11:55:
                    17:dd:9d:d8:e9:b8:4b:27:cd:ae:d2:5f:69:b2:cc:
                    fc:d9:44:71:b7:4a:4a:5d:19:5a:a2:12:95:be:1b:
                    fd:d1:dd:09:d9:f3:db:37:b2:de:0a:3f:21:cd:9d:
                    15:fe:26:3c:0c:bf:c8:17:ba:7b:b4:aa:54:04:b6:
                    45:97:4f:f2:b2:21:13:2e:51:c9:1d:02:16:48:6d:
                    75:4f:94:c2:84:93:98:f7:02:3d:dc:77:24:b2:b9:
                    ff:b5:c9:00:9f:33:30:bb:1f:b0:d0:29:a2:ad:f6:
                    35:f2:ee:70:f6:11:a6:18:ad:22:8a:da:65:af:c6:
                    e9:40:c2:a3:61:d2:39:c5:69:25:a5:37:87:f9:64:
                    6d:a6:e8:0f:2d:d2:a4:ef:e9:64:32:d5:95:bd:e4:
                    6c:17:49:2e:74:7c:80:d8:82:e3:40:69:1d:94:59:
                    12:70:7a:34:23:ce:ef:c9:44:54:c3:e5:33:ac:1d:
                    80:e9:9f:c3:3b:70:2f:6d:30:7c:ee:a4:f5:7e:01:
                    44:4a:e5:f5:cb:2a:0e:49:c5:bc:a8:9e:6d:df:0a:
                    aa:2a:00:a4:6a:89:bf:cd:20:f4:20:cd:67:af:6c:
                    88:c1:47:cc:0d:b9:ed:02:e0:a3:71:70:8d:05:98:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:4D:AD:D7:04:8C:93:8E:94:64:A0:A2:B3:69:0E:48:53:36:68
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31643a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:c8:fa:e9:2b:78:98:6a:b2:51:04:49:b7:cc:d4:9b:16:
         81:66:9e:ff:38:a2:d6:90:25:2b:d1:36:22:e9:69:f4:82:cb:
         35:9c:f3:79:9b:60:15:f9:22:c4:dc:68:a0:c0:4b:ef:84:cf:
         8f:20:01:0d:d9:c7:74:36:a0:d5:b7:e6:0e:d4:c3:67:b3:72:
         4d:e4:39:f8:5f:29:db:b4:9c:c9:f2:47:72:80:1b:87:92:cf:
         dd:33:5e:51:6a:b6:21:ea:14:41:94:37:ef:b0:ec:46:18:cc:
         9a:17:e2:0f:1b:1e:49:73:1b:70:ae:1c:83:24:91:e4:b9:47:
         6d:79:ae:ec:48:89:f9:9a:16:3f:ca:54:72:91:3f:9a:39:90:
         b4:0f:33:8f:e5:e7:1e:f9:58:5c:bf:8b:38:8f:c3:01:5a:29:
         60:10:3a:67:3b:c8:e5:04:ec:51:ac:a8:de:f4:74:7e:74:e4:
         89:df:d1:51:12:84:e0:2e:82:da:3e:a6:c7:f6:ad:43:38:c3:
         af:16:5b:8f:91:5a:80:a7:32:15:52:5b:a9:5c:03:7b:2f:40:
         f1:b6:3e:96:b6:49:73:c7:85:0a:1a:7f:e6:fa:9b:1e:a2:1b:
         7c:12:e9:d0:da:5f:c4:db:b9:1c:dc:85:75:0d:1b:f9:e8:18:
         87:ca:6e:92
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUNmVu/7RPf/B7E4Mdn/IQk2T+a/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMzBaFw0yMjA2MDQyMDM2MzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI4NzVFMDI4RkMxOTA2OTg5
QTNBODA3MTE1NTE3REQ5REQ4RTlCODRCMjdDREFFRDI1RjY5QjJDQ0ZDRDk0NDcx
Qjc0QTRBNUQxOTVBQTIxMjk1QkUxQkZERDFERDA5RDlGM0RCMzdCMkRFMEEzRjIx
Q0Q5RDE1RkUyNjNDMENCRkM4MTdCQTdCQjRBQTU0MDRCNjQ1OTc0RkYyQjIyMTEz
MkU1MUM5MUQwMjE2NDg2RDc1NEY5NEMyODQ5Mzk4RjcwMjNEREM3NzI0QjJCOUZG
QjVDOTAwOUYzMzMwQkIxRkIwRDAyOUEyQURGNjM1RjJFRTcwRjYxMUE2MThBRDIy
OEFEQTY1QUZDNkU5NDBDMkEzNjFEMjM5QzU2OTI1QTUzNzg3Rjk2NDZEQTZFODBG
MkREMkE0RUZFOTY0MzJENTk1QkRFNDZDMTc0OTJFNzQ3QzgwRDg4MkUzNDA2OTFE
OTQ1OTEyNzA3QTM0MjNDRUVGQzk0NDU0QzNFNTMzQUMxRDgwRTk5RkMzM0I3MDJG
NkQzMDdDRUVBNEY1N0UwMTQ0NEFFNUY1Q0IyQTBFNDlDNUJDQTg5RTZEREYwQUFB
MkEwMEE0NkE4OUJGQ0QyMEY0MjBDRDY3QUY2Qzg4QzE0N0NDMERCOUVEMDJFMEEz
NzE3MDhEMDU5ODMyNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwodeAo/BkGmJo6gHEVUX3Z3Y6bhLJ82u0l9pssz82URxt0pKXRla
ohKVvhv90d0J2fPbN7LeCj8hzZ0V/iY8DL/IF7p7tKpUBLZFl0/ysiETLlHJHQIW
SG11T5TChJOY9wI93Hcksrn/tckAnzMwux+w0CmirfY18u5w9hGmGK0iitplr8bp
QMKjYdI5xWklpTeH+WRtpugPLdKk7+lkMtWVveRsF0kudHyA2ILjQGkdlFkScHo0
I87vyURUw+UzrB2A6Z/DO3AvbTB87qT1fgFESuX1yyoOScW8qJ5t3wqqKgCkaom/
zSD0IM1nr2yIwUfMDbntAuCjcXCNBZgySwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FHffTa3XBIyTjpRkoKKzaQ5IUzZoMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMyMzgzMDM0M2EzMzMyMzQzNDNh
MzE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEMkQAHTANBgkqhkiG9w0BAQsFAAOCAQEAfCjI+ukreJhqslEESbfM1JsW
gWae/zii1pAlK9E2Iulp9ILLNZzzeZtgFfkixNxooMBL74TPjyABDdnHdDag1bfm
DtTDZ7NyTeQ5+F8p27ScyfJHcoAbh5LP3TNeUWq2IeoUQZQ377DsRhjMmhfiDxse
SXMbcK4cgySR5LlHbXmu7EiJ+ZoWP8pUcpE/mjmQtA8zj+XnHvlYXL+LOI/DAVop
YBA6ZzvI5QTsUayo3vR0fnTkid/RURKE4C6C2j6mx/atQzjDrxZbj5FagKcyFVJb
qVwDey9A8bY+lrZJc8eFChp/5vqbHqIbfBLp0NpfxNu5HNyFdQ0b+egYh8pukg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org