Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a353a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a353a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          QjFaaWCLbrmRSYFWwDbUJZdwYU7YCf8QDH+YZzWfs24=
Subject key identifier:   20:26:D9:E8:86:04:11:DF:D8:6A:56:96:FE:93:A7:CB:4E:2A:F4:19
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       583E824BA884B9835186F27926EE11079F2862AE
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a353a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:29 +0000
ROA not before:           Sat 05 Jun 2021 20:31:29 +0000
ROA not after:            Sat 04 Jun 2022 20:36:29 +0000
asID:                     265066
IP address blocks:        2804:3244:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:82:4b:a8:84:b9:83:51:86:f2:79:26:ee:11:07:9f:28:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:29 2021 GMT
            Not After : Jun  4 20:36:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:fb:db:57:d4:52:19:d3:74:9d:7e:e4:5a:
                    a6:74:48:64:62:66:05:aa:7b:7a:69:dc:1e:69:1c:
                    4a:01:cc:2d:8d:9f:ef:d9:b6:7e:2e:a5:a3:37:fd:
                    b9:41:42:c6:0d:c8:ca:32:2a:50:da:92:ab:74:2c:
                    e1:a3:77:2c:27:e1:f7:e6:d8:5c:5c:99:a1:db:52:
                    94:d7:77:0f:d6:f5:47:2a:20:02:e6:30:60:99:fb:
                    d2:06:93:5f:19:57:0c:19:c3:e8:8d:50:51:19:ff:
                    49:ea:59:55:88:65:2e:5d:44:25:3e:49:cf:d4:b5:
                    9b:5b:87:cd:ee:59:0e:bf:48:b0:06:c9:39:7e:e5:
                    d4:17:1c:18:ed:5c:bd:e3:92:a7:f3:57:6c:3c:de:
                    6d:62:10:a9:22:a7:e7:ba:9b:6f:6c:f6:a0:11:e9:
                    13:ed:b2:45:b0:23:67:56:84:25:75:e8:c7:7f:22:
                    cf:75:5b:d0:1c:2f:d8:57:8b:11:ba:c9:e4:85:30:
                    6f:bc:9b:ed:3a:66:d2:d6:fa:5f:34:9b:26:96:da:
                    00:f5:4d:c7:ee:49:cb:36:30:49:1c:83:b0:a1:16:
                    97:e6:a6:d8:99:70:9d:37:cc:b3:68:50:31:ed:52:
                    c7:e9:88:b3:82:74:07:de:51:72:07:a7:fa:f9:31:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:D9:E8:86:04:11:DF:D8:6A:56:96:FE:93:A7:CB:4E:2A:F4:19
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a353a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:16:7d:73:7f:73:04:1a:c2:66:96:c8:f2:44:aa:70:d3:
         6a:fa:d0:4d:69:02:cc:0e:9f:34:9e:a5:ed:97:fb:cc:2a:aa:
         33:a8:19:0e:28:8e:18:24:67:ff:74:3b:f2:e2:30:74:39:a8:
         89:41:e1:b1:a5:21:a9:b7:b0:7b:94:f7:2f:85:34:62:b5:cf:
         c1:79:46:81:a6:19:0d:e0:df:e9:17:c9:e9:18:a4:a9:e9:e0:
         b0:86:17:36:41:b2:1c:ef:64:3b:d3:fd:c7:9e:4a:00:f3:d5:
         0b:50:45:d3:f9:4f:2e:3a:21:82:67:50:02:9e:86:5c:1b:09:
         c5:7b:d9:bb:69:59:3f:b3:9a:db:3d:36:34:45:12:ed:aa:29:
         b8:b1:de:c0:43:31:2a:0a:86:df:e3:4c:c7:b6:af:80:96:22:
         da:72:3a:ff:bf:cb:32:e4:f8:3d:2e:7b:ad:36:d1:c9:1a:94:
         44:81:ca:50:6f:db:ce:83:ff:61:9a:7a:e9:8d:b8:83:68:66:
         30:56:11:b0:10:e0:2d:1e:e3:5f:a7:3e:83:c3:82:66:a9:88:
         4f:94:18:40:33:0c:6e:32:c2:eb:08:5b:d4:1d:46:25:04:e6:
         07:ac:9b:f5:56:d1:fa:99:e9:56:48:7d:78:88:0e:1f:b9:8a:
         85:61:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org