Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32353a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a32353a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          kbfdD1/IFLkVUBPos97l4yjyOTQNF2d30tCo9fza9aY=
Subject key identifier:   BC:B8:64:09:3F:6E:4E:9B:4B:4F:76:3D:E3:75:A6:EE:33:E8:A2:FC
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       67BD36CF89819D678F7DB26546D6FAEC4C998F57
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32353a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        2804:3244:25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:36:cf:89:81:9d:67:8f:7d:b2:65:46:d6:fa:ec:4c:99:8f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:36:7e:df:d9:14:a7:fd:42:da:43:9f:7a:
                    21:4b:c0:e3:28:d7:53:43:8d:e5:61:50:45:32:22:
                    0e:e9:11:27:fb:e8:d0:ed:80:32:fe:e5:f8:d4:64:
                    5f:5f:00:ff:f3:ad:22:27:1a:52:00:6b:6f:4c:f0:
                    f8:f8:92:0c:bb:a1:21:f5:1a:ab:e3:0a:11:a6:48:
                    5c:17:b3:83:f1:fd:f6:23:c7:23:30:05:c6:af:e4:
                    e2:85:a9:46:ff:99:dc:66:b4:48:ed:92:aa:41:1a:
                    b0:a6:bb:f9:a8:7f:04:58:b0:88:39:8a:31:0b:41:
                    f2:28:f5:c4:b9:90:ff:b1:c3:7f:a4:38:9b:c9:42:
                    8e:79:88:fb:5f:48:d9:93:ea:5f:6a:97:f3:1f:34:
                    54:5f:fc:1b:36:5b:91:53:80:38:33:ec:75:59:49:
                    9a:75:44:eb:0b:17:c6:4d:01:b1:95:e1:3a:a2:a6:
                    d6:50:3c:44:bb:80:6e:1e:b9:83:ef:f6:ef:97:ab:
                    78:30:89:14:c0:08:4d:0d:16:fe:21:ca:e4:84:fc:
                    5b:1e:69:97:cd:08:34:c7:12:8c:70:06:db:30:98:
                    57:ea:ed:f3:f6:17:62:56:8b:ac:f9:8f:1d:46:4d:
                    ce:f6:b9:a9:bb:f3:83:a4:e2:c3:6e:17:de:be:50:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:64:09:3F:6E:4E:9B:4B:4F:76:3D:E3:75:A6:EE:33:E8:A2:FC
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32353a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:e2:94:97:d0:bb:89:b5:eb:30:a9:2e:1c:e7:df:61:f3:
         6f:c3:78:4b:b2:8b:a2:7d:0e:c0:24:a0:6d:70:7b:ec:7f:9f:
         18:10:ec:39:e7:20:af:db:c0:cd:eb:dd:fb:07:a8:8e:e9:ce:
         1f:64:5b:e3:4f:93:66:b5:c5:4a:1d:04:75:0d:33:87:f1:22:
         8e:32:68:32:e8:c9:a9:d2:6c:f2:84:88:7c:b0:45:f9:e3:e3:
         3f:21:ea:82:5f:7f:46:be:5c:6b:ba:93:40:3e:9b:f6:29:77:
         66:20:93:70:eb:2f:07:8f:3b:c5:22:44:16:69:b6:35:e5:bd:
         74:13:35:bc:c4:7c:63:31:39:b1:5b:e3:13:cc:b0:8e:9f:6f:
         b2:63:95:c7:73:b0:16:c0:1a:44:13:82:a3:c0:5c:1c:e2:77:
         bf:23:6c:af:61:ae:2b:ad:0a:97:29:20:cb:7e:a1:29:10:c1:
         c0:4c:f2:48:a3:56:2e:c4:c6:3a:3f:fe:1d:7a:3c:e5:6f:2f:
         26:82:7c:05:a4:30:ea:4b:08:40:88:36:e8:2d:51:4b:17:7b:
         e8:c1:4a:ec:b6:77:f5:90:a0:88:75:95:4f:ac:76:95:d7:d4:
         f9:c9:59:64:8a:9c:20:a9:26:29:fc:2a:fd:a4:a6:ec:a5:ee:
         d2:3a:90:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org