Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31653a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31653a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          b29qiC/PDvJ1e4LeiMGxJD0Sbu7w5r7D80BzRzRfB4w=
Subject key identifier:   52:24:60:72:4E:30:14:1D:77:CB:05:8E:8F:93:81:F1:E0:FB:27:CC
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       0CB3E2841B6E0E67C5F319531EBE024ED70D00A2
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31653a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        2804:3244:1e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b3:e2:84:1b:6e:0e:67:c5:f3:19:53:1e:be:02:4e:d7:0d:00:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:e9:ea:d7:6e:7d:0d:bb:46:9b:4b:2d:19:
                    78:32:cc:10:04:38:9b:bd:ef:fc:db:34:fd:8d:03:
                    ab:23:1b:08:f6:d9:00:7b:cc:8f:e3:8c:2b:b9:8f:
                    15:8f:36:d9:ad:5d:2a:1a:71:1c:c5:fe:e8:39:b7:
                    a7:34:4e:a5:65:c4:e2:ae:b7:1f:d9:e6:4d:bf:3d:
                    25:9f:f6:ba:93:cc:3f:bf:0b:ae:a1:0b:d0:0e:5a:
                    41:e3:a2:af:00:ee:eb:37:07:14:8a:80:0a:3e:4c:
                    15:67:18:d8:ea:68:e3:9b:71:dd:9a:31:00:72:17:
                    ed:c5:fc:7c:34:47:39:b4:a0:86:71:01:9d:8d:36:
                    b0:c4:15:33:5e:e2:b2:56:f3:0f:68:96:50:7b:16:
                    43:8c:09:82:7d:6f:02:55:74:23:68:95:ed:8e:d3:
                    76:45:52:48:24:93:3c:16:ed:8a:ab:53:2c:69:76:
                    b3:02:55:f1:03:4d:f6:5a:e6:c3:44:31:a7:e8:40:
                    a6:a8:36:d5:63:92:2d:7c:dc:db:5e:bd:39:99:30:
                    bd:dc:94:dd:d2:e9:3b:38:47:b7:b4:36:05:70:55:
                    fc:98:83:62:0c:84:c7:d8:4e:d7:2a:76:9a:aa:40:
                    b5:2c:27:67:8e:fc:e1:98:1c:23:da:06:ab:a1:b9:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:24:60:72:4E:30:14:1D:77:CB:05:8E:8F:93:81:F1:E0:FB:27:CC
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31653a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:04:5a:4e:d2:e5:77:17:fc:52:5f:f0:fe:56:59:b5:7d:
         b3:9f:e0:d6:49:c8:92:cd:ad:6b:05:74:b4:e4:5c:2e:6e:cc:
         72:00:58:59:06:79:d8:df:9a:6c:fc:16:1e:35:80:10:87:b8:
         67:9d:19:dd:23:77:3f:22:e9:66:74:63:15:60:70:e2:d0:e9:
         27:18:17:9a:01:61:c5:51:76:16:f3:19:6b:3a:18:ad:7c:a1:
         66:14:56:b5:3d:61:70:50:1b:4c:28:a0:72:34:b8:c0:f6:65:
         8a:f4:7b:a5:47:56:b4:fa:ff:23:69:aa:43:37:bd:6e:c4:69:
         4d:bd:fd:6f:f3:bd:e1:cc:15:ad:a1:4b:1e:dd:f0:c5:2d:6f:
         bc:61:90:54:96:d4:91:23:93:64:ca:e3:9b:cb:56:55:d3:9d:
         65:20:38:97:ce:ff:2e:36:5b:59:4a:72:b0:1b:50:17:c6:f9:
         41:45:b6:11:51:01:63:82:7c:45:ab:7b:0a:cc:b0:68:2a:a5:
         77:e9:fc:28:ae:26:e6:c5:fc:95:ad:20:00:a9:a6:78:1e:dd:
         84:55:57:6d:2f:20:e9:cf:77:9c:45:ec:ed:ce:5f:15:46:a4:
         06:32:c8:1a:be:07:64:17:cd:60:d3:6d:23:a0:ed:19:20:cb:
         10:06:42:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org