Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3230303a3a2f34302d3430203d3e20323635303636.roa
File:                     323830343a333234343a3230303a3a2f34302d3430203d3e20323635303636.roa (raw, json)
Hash identifier:          Zsium0n51V1ELBwnlQzcfeC1RQNUNowwWYYqP2jXq8s=
Subject key identifier:   93:DF:81:E8:DE:BE:DF:48:18:FA:F7:B1:9A:12:7B:D4:DE:99:1F:E2
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       19C44B876F32BC40B32830CAA258AB88DBA5A0E8
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3230303a3a2f34302d3430203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:31 +0000
ROA not before:           Sat 05 Jun 2021 20:31:31 +0000
ROA not after:            Sat 04 Jun 2022 20:36:31 +0000
asID:                     265066
IP address blocks:        2804:3244:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c4:4b:87:6f:32:bc:40:b3:28:30:ca:a2:58:ab:88:db:a5:a0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:31 2021 GMT
            Not After : Jun  4 20:36:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:4a:7e:d0:0c:72:47:ee:ac:56:a3:e1:71:
                    31:f8:0d:3e:7d:aa:9f:9b:e2:e6:c9:8a:ef:73:ab:
                    42:6a:61:b6:40:b7:4a:32:bf:f7:6b:e7:70:3f:d8:
                    47:21:ac:c5:f7:14:72:35:9b:03:52:42:fe:a7:0d:
                    7d:fe:6c:05:d2:8a:10:4a:b3:22:93:c9:85:94:41:
                    fa:5e:17:b1:e6:4e:ff:e4:37:e1:8b:17:2e:4c:af:
                    fe:75:2e:40:ce:7c:d6:81:10:77:f1:da:f3:94:0c:
                    4e:9f:70:b1:91:c3:fb:7f:e9:ae:7a:44:64:3f:a5:
                    e6:d4:57:c5:d3:59:0a:f6:5b:4a:1d:a6:05:ae:c2:
                    c7:9b:97:b7:25:ea:1f:e3:01:94:96:07:ee:4d:7f:
                    ac:80:aa:f9:b1:f1:b9:00:ed:f2:c1:28:2d:94:42:
                    7b:36:f1:50:fa:4c:b6:c2:a4:11:80:e1:21:07:7c:
                    db:2c:06:d6:fa:1a:0a:27:e1:07:24:43:5e:14:59:
                    99:27:60:fa:ff:8c:9b:3c:0b:ea:4f:5f:5a:cf:bf:
                    b6:e2:38:19:86:f2:02:59:a0:e1:ce:c1:78:91:d6:
                    1c:29:fe:81:0c:76:0e:ab:8d:3f:f2:2f:2c:e9:fe:
                    5f:a9:f2:f3:15:18:5d:e3:9b:50:e7:1f:82:75:5c:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:81:E8:DE:BE:DF:48:18:FA:F7:B1:9A:12:7B:D4:DE:99:1F:E2
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3230303a3a2f34302d3430203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:28:81:42:f8:88:d8:a7:f1:1b:57:22:2a:b6:b3:c2:23:
         6d:0b:5b:0b:19:47:d0:7c:89:d3:26:65:b1:2e:f6:7e:b3:4d:
         28:08:53:b7:1c:a0:ea:2b:1c:b5:88:90:b0:10:49:de:04:1c:
         29:f4:9a:11:d1:0d:79:9b:ab:f2:fc:a6:0d:31:55:8d:36:46:
         c7:f1:47:04:68:3f:1e:b3:d9:8c:93:a6:c1:c4:1b:39:e8:29:
         f9:71:63:62:e9:4e:4b:f1:b4:a6:2d:63:ca:6c:4c:86:e8:21:
         e4:eb:54:2f:1f:ec:b7:e7:68:aa:ad:78:9f:71:1e:62:df:89:
         f2:c6:ed:1b:c6:c1:3d:24:b6:5c:a6:14:a4:fa:35:eb:79:e7:
         45:8c:c0:f9:c7:36:5d:d7:ed:7c:e0:96:d2:8d:05:12:6a:2b:
         13:ab:a5:dc:fa:be:67:2d:41:99:b5:28:c9:8a:ae:1e:fd:3a:
         61:0d:00:95:e9:3b:f1:b4:fd:a6:6f:f0:8c:06:44:b1:3d:4f:
         f9:46:fa:72:d3:1b:8a:a6:cd:42:53:2d:c6:02:15:5c:65:3f:
         1d:e3:c2:d7:2a:d4:96:df:cc:7f:87:38:d7:8c:9a:b6:72:00:
         c6:61:7a:ea:36:88:25:ce:34:d2:61:b1:a7:98:89:4d:d4:8c:
         4e:fc:45:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org