Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a373a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a373a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          2sepOsEDW3z4RbqFQElcJAiMoIg7r9csDvicKnknMwY=
Subject key identifier:   84:72:69:77:56:6D:7B:3E:1A:54:55:69:CF:51:AC:D4:01:89:DE:E0
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       137B8CA5E35F510DD5CABE006CA95669319D1096
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a373a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:31 +0000
ROA not before:           Sat 05 Jun 2021 20:31:31 +0000
ROA not after:            Sat 04 Jun 2022 20:36:31 +0000
asID:                     265066
IP address blocks:        2804:3244:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7b:8c:a5:e3:5f:51:0d:d5:ca:be:00:6c:a9:56:69:31:9d:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:31 2021 GMT
            Not After : Jun  4 20:36:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:12:fb:e5:36:96:8b:ac:59:47:fa:9c:b0:
                    47:02:14:9c:db:89:41:27:7b:7c:be:da:2d:fd:92:
                    66:5a:21:ca:50:95:74:33:d0:d9:65:80:80:d4:1a:
                    60:9f:d1:b8:98:85:a1:24:3d:5f:6a:9c:bc:99:2a:
                    3d:c5:23:7b:92:96:e9:b0:b9:d2:f5:c3:c3:07:7b:
                    6d:fd:57:a7:8f:ac:37:e3:72:bd:36:fd:8e:2a:6a:
                    6d:24:e9:13:50:9b:3b:7e:60:6d:ce:10:06:2d:f9:
                    9c:6b:91:09:ec:17:d8:53:15:51:8b:6b:09:e4:66:
                    5a:53:e3:ca:ef:8b:67:f7:b6:b7:99:3d:4d:44:89:
                    9a:00:32:03:ab:b4:39:89:8c:cb:85:a4:79:f7:40:
                    63:50:25:d0:5c:18:b5:2c:39:0f:df:15:7f:dc:3a:
                    51:21:4e:42:e5:a2:87:49:84:1d:b2:50:e2:e5:de:
                    2c:ae:a8:49:4a:c9:50:ca:f4:51:78:d6:a3:8a:12:
                    8c:ad:fc:82:2a:67:40:cf:bb:37:df:78:e2:3d:34:
                    a2:97:1d:ca:83:0e:31:08:6f:a2:e5:b2:4c:50:36:
                    31:c9:0b:72:f1:be:f4:02:a8:0b:87:2f:94:2c:4d:
                    0c:6b:a6:d8:52:f5:ac:72:ec:c1:b2:65:da:65:41:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:69:77:56:6D:7B:3E:1A:54:55:69:CF:51:AC:D4:01:89:DE:E0
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a373a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:a3:21:d1:10:d9:fc:82:b5:7b:54:21:09:66:7d:92:d0:00:
         58:b7:da:1a:fc:51:db:0e:94:45:a5:8a:2b:78:e1:9c:36:f6:
         67:51:1e:cc:27:8a:70:62:2d:7e:cb:5a:96:38:54:fe:9a:6e:
         f4:ab:3d:35:29:5f:98:bb:41:68:65:a7:81:35:a8:63:c4:8a:
         a1:a6:55:e1:ec:9f:ea:8b:af:38:89:f1:2d:1b:8e:3c:02:c2:
         b2:e2:16:d4:ef:3e:a8:22:69:23:3f:b4:f3:59:ab:e0:89:be:
         6c:36:08:de:6e:d7:a3:18:d2:d3:41:d8:c8:5d:14:fb:70:ae:
         59:0b:d4:ef:76:92:ee:11:3a:9e:27:82:60:36:06:a1:8b:74:
         26:59:67:39:0a:57:71:6b:a4:03:45:9a:33:80:9e:ae:b4:6a:
         61:5b:49:2a:08:6b:90:ca:9f:2c:8b:14:d2:ef:d8:a2:04:74:
         fb:db:a8:e4:d2:f3:9b:fc:05:11:94:ea:97:2a:b2:f0:c8:b7:
         b1:27:9a:a2:c2:0b:73:08:5b:72:60:dd:55:77:3a:6e:a0:79:
         5e:ed:c7:ef:55:be:da:87:81:9d:1b:e1:8b:33:e8:97:a0:d2:
         e2:14:ce:32:8d:32:43:11:ff:ac:b3:d6:55:33:73:1c:ff:1b:
         88:a8:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org