Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31663a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a31663a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          O/v8iLYlKfY4BcQokXFDGAHwDhUsH7+u6F6qekzm0yc=
Subject key identifier:   10:42:FA:18:23:40:F0:DB:63:76:C9:83:B8:08:25:B8:BA:81:19:E6
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       7FA6CC89A993CF27E00EDE597E1229E69D67E569
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31663a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        2804:3244:1f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a6:cc:89:a9:93:cf:27:e0:0e:de:59:7e:12:29:e6:9d:67:e5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:23:d9:74:8c:15:61:f9:2c:18:26:f2:cb:
                    77:2f:49:8a:8a:cf:49:84:a4:84:62:f0:e7:51:4b:
                    d8:08:2f:bb:65:cf:83:b0:a8:07:61:ac:c9:b2:6a:
                    4c:e0:6e:85:cd:10:bf:18:1e:e2:c7:58:f4:f6:0f:
                    a5:7a:cf:f4:93:4f:49:a6:2d:66:7d:2c:b6:ec:3f:
                    84:47:79:31:6a:bf:de:65:a7:4c:89:e6:4c:23:5a:
                    de:75:59:d7:a0:92:47:36:2c:1e:bd:22:ec:89:df:
                    68:43:c3:f3:af:b3:65:3a:f1:ba:aa:69:dc:32:18:
                    57:6e:5f:61:a1:27:be:e0:18:e1:a6:b6:d7:15:e6:
                    f2:ca:af:b2:b2:49:0d:47:22:df:00:8b:9f:de:5b:
                    9d:11:5c:1e:72:22:58:61:dc:8f:84:1b:0b:85:fe:
                    74:bb:c9:ae:24:61:f8:92:e7:87:b7:8f:4d:fe:e4:
                    e6:88:02:8a:cf:61:b0:33:4a:02:0b:fe:eb:9a:57:
                    39:9e:1b:fa:a3:e0:88:dd:53:fb:58:34:c8:24:85:
                    a9:23:58:0f:96:55:25:0b:33:9d:76:4d:30:67:80:
                    7e:0d:ed:cc:78:6f:f1:08:f6:89:2d:31:4c:e8:be:
                    23:54:ea:b8:d1:4e:a7:9d:51:09:aa:45:fa:f0:a9:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:FA:18:23:40:F0:DB:63:76:C9:83:B8:08:25:B8:BA:81:19:E6
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a31663a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:7e:93:b1:c0:05:7c:80:61:1d:5d:6c:ca:11:0c:36:65:
         ba:f1:89:b1:cd:48:99:88:6c:36:15:f8:0a:88:78:68:a9:04:
         65:9b:07:8a:05:dd:da:27:fc:ab:d9:e1:77:46:d1:0f:fe:77:
         84:23:83:f4:48:46:6a:dc:e1:8c:e6:70:83:bf:6f:8c:29:6c:
         f1:19:57:e4:0f:db:da:d2:6a:89:bd:df:6d:52:04:b3:a5:79:
         4f:52:99:60:e0:42:56:21:b6:8c:98:b4:44:1b:06:e7:8d:ad:
         22:b5:35:cd:58:a0:c4:b1:f6:85:61:82:4e:49:d6:95:64:9e:
         a5:f2:49:34:98:f2:04:01:7e:1e:d4:be:87:fd:e7:bf:56:88:
         98:34:d8:c1:f5:a2:21:f9:7a:45:1f:fa:36:a9:f5:d0:cc:2a:
         a5:30:c9:82:f5:35:f7:cc:f6:95:65:c4:a0:94:1c:a6:e9:23:
         05:4a:60:8c:00:ed:10:0e:f5:b6:27:4f:0b:86:e0:c3:1c:06:
         c1:4a:e3:c4:86:cc:19:21:58:ba:e0:9a:93:8e:25:f1:11:0c:
         93:d7:51:6f:3d:6c:95:e6:4b:87:c5:dd:e1:82:71:8c:c3:cf:
         80:fb:f2:33:a9:27:59:b1:c6:a6:8e:d0:17:5c:50:b9:eb:98:
         38:b3:aa:3f
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUf6bMiamTzyfgDt5ZfhIp5p1n5WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjdaFw0yMjA2MDQyMDM2MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUMyNDIzRDk3NDhDMTU2MUY5
MkMxODI2RjJDQjc3MkY0OThBOEFDRjQ5ODRBNDg0NjJGMEU3NTE0QkQ4MDgyRkJC
NjVDRjgzQjBBODA3NjFBQ0M5QjI2QTRDRTA2RTg1Q0QxMEJGMTgxRUUyQzc1OEY0
RjYwRkE1N0FDRkY0OTM0RjQ5QTYyRDY2N0QyQ0I2RUMzRjg0NDc3OTMxNkFCRkRF
NjVBNzRDODlFNjRDMjM1QURFNzU1OUQ3QTA5MjQ3MzYyQzFFQkQyMkVDODlERjY4
NDNDM0YzQUZCMzY1M0FGMUJBQUE2OURDMzIxODU3NkU1RjYxQTEyN0JFRTAxOEUx
QTZCNkQ3MTVFNkYyQ0FBRkIyQjI0OTBENDcyMkRGMDA4QjlGREU1QjlEMTE1QzFF
NzIyMjU4NjFEQzhGODQxQjBCODVGRTc0QkJDOUFFMjQ2MUY4OTJFNzg3Qjc4RjRE
RkVFNEU2ODgwMjhBQ0Y2MUIwMzM0QTAyMEJGRUVCOUE1NzM5OUUxQkZBQTNFMDg4
REQ1M0ZCNTgzNEM4MjQ4NUE5MjM1ODBGOTY1NTI1MEIzMzlENzY0RDMwNjc4MDdF
MERFRENDNzg2RkYxMDhGNjg5MkQzMTRDRThCRTIzNTRFQUI4RDE0RUE3OUQ1MTA5
QUE0NUZBRjBBOUZGRDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArCQj2XSMFWH5LBgm8st3L0mKis9JhKSEYvDnUUvYCC+7Zc+DsKgH
YazJsmpM4G6FzRC/GB7ix1j09g+les/0k09Jpi1mfSy27D+ER3kxar/eZadMieZM
I1redVnXoJJHNiwevSLsid9oQ8Pzr7NlOvG6qmncMhhXbl9hoSe+4BjhprbXFeby
yq+yskkNRyLfAIuf3ludEVweciJYYdyPhBsLhf50u8muJGH4kueHt49N/uTmiAKK
z2GwM0oCC/7rmlc5nhv6o+CI3VP7WDTIJIWpI1gPllUlCzOddk0wZ4B+De3MeG/x
CPaJLTFM6L4jVOq40U6nnVEJqkX68Kn/2QIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FBBC+hgjQPDbY3bJg7gIJbi6gRnmMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMyMzgzMDM0M2EzMzMyMzQzNDNh
MzE2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTMwMzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEMkQAHzANBgkqhkiG9w0BAQsFAAOCAQEApRh+k7HABXyAYR1dbMoRDDZl
uvGJsc1ImYhsNhX4Coh4aKkEZZsHigXd2if8q9nhd0bRD/53hCOD9EhGatzhjOZw
g79vjCls8RlX5A/b2tJqib3fbVIEs6V5T1KZYOBCViG2jJi0RBsG542tIrU1zVig
xLH2hWGCTknWlWSepfJJNJjyBAF+HtS+h/3nv1aImDTYwfWiIfl6RR/6Nqn10Mwq
pTDJgvU198z2lWXEoJQcpukjBUpgjADtEA71tidPC4bgwxwGwUrjxIbMGSFYuuCa
k44l8REMk9dRbz1sleZLh8Xd4YJxjMPPgPvyM6knWbHGpo7QF1xQueuYOLOqPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org