Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32373a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a32373a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          yprUdy3ngncqwZjmuhVOIT9B8lnYTO7kZupG9/nq8Jg=
Subject key identifier:   A1:EA:9D:8B:20:D5:CD:1D:7B:62:73:04:F1:EF:3A:F2:3A:27:D0:81
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       54703E01F7523168B70A4EBDFE6D999E1A644BA5
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32373a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        2804:3244:27::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:3e:01:f7:52:31:68:b7:0a:4e:bd:fe:6d:99:9e:1a:64:4b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:d1:88:11:93:b3:df:3a:29:03:5c:63:f5:
                    50:f6:79:20:42:67:e9:19:e1:8f:21:80:87:82:e6:
                    51:a7:60:0a:01:2c:8b:2c:5c:9b:cd:e9:0c:8b:38:
                    10:d5:0a:33:27:2e:e8:66:93:0e:0e:95:73:3e:2c:
                    b0:2e:c8:9a:cd:cd:64:78:5f:fb:c7:f8:b1:a4:20:
                    ee:ed:f5:e9:a8:fa:87:87:c8:40:eb:5c:12:39:7d:
                    44:b3:b8:12:c2:46:2e:af:ff:ae:bb:a0:36:1d:09:
                    6b:cb:4f:53:57:fc:6e:7d:27:58:e2:2b:59:8d:9e:
                    17:d1:03:7a:5c:36:32:f8:08:9a:41:c6:44:c2:65:
                    b1:c0:6d:4b:2e:75:9e:8b:fa:f8:9f:be:49:fe:88:
                    d7:c5:6b:13:7c:53:2f:84:77:99:42:f5:2a:c7:ce:
                    03:9b:b4:8d:ca:0b:05:9b:f5:f2:18:49:75:0b:56:
                    aa:6d:ae:54:8d:43:56:f7:1a:df:21:06:bc:57:cd:
                    f3:2e:17:1e:ff:cd:0f:74:a8:1d:b7:46:39:26:5d:
                    a1:ad:f1:e5:ba:12:a8:1d:f4:29:7e:3d:f3:97:47:
                    63:62:37:d0:15:a7:e0:26:40:74:dc:77:1f:0c:75:
                    01:4f:25:62:29:f3:28:9f:ef:7c:48:16:2b:8d:98:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:9D:8B:20:D5:CD:1D:7B:62:73:04:F1:EF:3A:F2:3A:27:D0:81
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a32373a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:97:93:be:ee:7b:bd:ab:da:c9:0d:ab:70:26:89:b7:76:
         5e:33:81:61:14:d0:82:f0:e8:cc:0a:70:dc:50:5c:9e:7b:95:
         1a:7d:24:ac:77:92:a5:a6:3e:c9:d8:fa:03:24:88:60:c5:13:
         1d:8e:ed:a8:36:78:b7:de:6f:4c:c7:73:57:3d:73:56:58:f2:
         4a:bd:64:de:2d:65:93:19:c9:50:05:07:4d:11:ad:84:4f:d6:
         df:1b:fa:2a:be:45:f4:90:22:7d:53:99:1b:ee:ef:c4:f6:ed:
         65:93:b1:31:61:61:b7:01:98:de:a2:da:dc:92:a9:8d:e3:1f:
         e0:51:9d:30:16:10:b7:13:b6:73:2c:b7:80:68:43:2b:fa:c3:
         e6:0c:35:5d:8e:36:27:ee:d3:7d:00:d4:65:12:18:1d:df:53:
         5a:6e:59:b4:20:19:7a:fd:3a:8d:d6:bd:3a:8d:a9:e1:e2:38:
         37:79:62:47:dc:d0:ae:ec:b0:39:d9:b8:00:6a:86:23:df:b7:
         da:90:40:b2:88:ea:39:6c:10:4a:b4:ad:07:35:70:32:42:fa:
         47:c4:79:23:e8:e9:81:9f:47:00:c6:9f:e4:eb:63:20:9a:48:
         84:c9:c8:45:c1:71:be:fa:21:ed:fb:a8:26:02:ec:0a:58:ed:
         e8:f1:73:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org