Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a383a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a383a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          +YdjEn+7GniI6RzJ8XWEFOFeVOoAPUf+NClawPsb8zA=
Subject key identifier:   B1:10:A5:B8:FE:15:4B:92:1C:90:65:51:C7:91:F8:76:86:FB:C7:39
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       181CE64638856A5A60A1E7D6BF9A3BB2180BC655
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a383a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        2804:3244:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:e6:46:38:85:6a:5a:60:a1:e7:d6:bf:9a:3b:b2:18:0b:c6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:71:3a:ae:f3:0c:28:95:45:bc:21:3d:7a:
                    34:02:20:a9:97:bb:e0:a4:c7:0b:3d:c7:2e:64:c6:
                    aa:bd:58:c6:da:23:8b:33:a1:db:b9:1f:13:61:77:
                    6f:d5:67:a0:9d:b7:3b:da:33:c2:a6:91:db:b7:39:
                    fa:92:b4:56:37:17:5f:26:45:c9:9e:46:9a:84:8a:
                    be:9e:da:f6:a4:66:fe:ad:85:75:f0:13:77:11:a7:
                    ca:49:a5:a1:85:f9:90:65:2d:77:e1:6a:36:49:a0:
                    c5:a1:ab:b3:18:f0:ae:2f:6c:66:45:a8:de:1c:5e:
                    90:05:a2:58:23:1d:0d:19:ae:cb:21:bc:ea:fe:fb:
                    08:a8:2a:8e:24:e8:e0:ba:45:52:93:b2:cc:be:af:
                    6e:68:06:6d:f6:33:d5:d0:84:33:ec:cb:70:be:52:
                    b8:04:25:4f:d4:50:07:45:3e:95:9b:8c:fb:af:8a:
                    35:c9:65:79:32:8b:b2:83:e2:82:53:e1:5e:fd:4f:
                    33:1f:eb:b6:17:cc:43:dd:5c:42:88:6e:5c:62:ea:
                    9a:26:ed:53:97:47:97:20:5b:63:81:b3:70:15:c3:
                    5c:b4:8f:3b:cb:40:3f:4f:98:a8:b8:d3:46:e6:f5:
                    a3:00:8c:c8:a9:da:01:aa:a6:6d:78:ef:25:3f:70:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:10:A5:B8:FE:15:4B:92:1C:90:65:51:C7:91:F8:76:86:FB:C7:39
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a383a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:e8:8c:15:81:1f:bd:07:3a:90:cf:1e:a8:ce:fd:2a:7a:
         79:33:68:2d:d9:98:f1:56:f5:99:f0:c3:ad:9e:c6:fb:02:29:
         90:5e:84:d5:d5:59:8c:c9:73:60:7a:4c:4a:6d:df:c3:63:cd:
         16:b8:c2:46:6b:cf:64:b6:4f:55:97:cc:72:bd:b1:cb:39:7c:
         cb:ed:87:31:77:79:d7:38:7d:19:be:b8:79:e0:a4:a7:bb:24:
         10:9e:68:a9:ad:1f:e4:3f:e1:17:82:2d:1d:7e:9a:05:4d:6a:
         60:40:50:1c:70:9d:dd:e8:ef:3a:74:e6:13:0b:2c:d6:e9:26:
         3c:31:35:e2:53:db:de:fd:4e:bd:7f:31:ed:ad:b3:f4:3f:25:
         3f:8c:4d:65:48:f2:47:46:61:78:74:c3:59:6f:7d:d1:8e:59:
         e5:a9:70:00:48:8f:d9:25:56:3c:da:3e:fa:ad:6a:eb:ea:a4:
         61:93:54:82:9c:ef:37:c6:92:91:14:2e:e3:e7:16:bd:43:c1:
         c3:0a:6a:87:31:55:09:f1:68:1d:0b:92:f3:89:0f:18:7f:36:
         33:e4:8f:45:46:2c:4c:51:a5:f5:84:ed:ae:6e:ad:97:41:70:
         a5:cf:07:eb:a1:18:83:78:09:6b:4b:6c:fb:29:8c:f1:b7:aa:
         7e:b8:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org