Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a393a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a393a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          7M2ep+CSDqp1wN+6mTZr6yoTsNAASNvFLldc455AoD8=
Subject key identifier:   38:E1:78:4E:29:57:C3:F1:9B:CE:37:22:5B:A8:5B:44:F4:58:F5:C9
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       2C4D0CE420F6B10CE3B08833D3701AC69E6C959B
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a393a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        2804:3244:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:0c:e4:20:f6:b1:0c:e3:b0:88:33:d3:70:1a:c6:9e:6c:95:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject: CN=3082010A0282010100D1A33ED84FCC8CC70E952EC2601319F2C458B42760E9CE9CA1056D934A61A11C676113C8B40A627BAD1FBCE94DE230C49BC34E322B0A9C2262AA9FA9DE2A1C9FE54ACB83F62A16D97314609961149749733F602F5C0E612962E60755CCA812AE3DC8A9973284EE11CBE7E197A18E287F6FEE21F4B2BF49E15C54CFD7A532051573A8B06D7B661A0802DDA3658655FF4C9A67425BCFAFC0F988FD24A61B6BA5CBD82CB0153781356B34852C119DA55FCD602453D4FFE37D744C8DE87B750E2640981583CAC1C7E37FF1BAED89325053F58079BF36E63F0A4E1EFFF178AF5914FFD2B0BC0CD90EB7EEB98E9FC610E4F3DD70EC669BB27EF5E4EF471FEA590ECB5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:3e:d8:4f:cc:8c:c7:0e:95:2e:c2:60:13:
                    19:f2:c4:58:b4:27:60:e9:ce:9c:a1:05:6d:93:4a:
                    61:a1:1c:67:61:13:c8:b4:0a:62:7b:ad:1f:bc:e9:
                    4d:e2:30:c4:9b:c3:4e:32:2b:0a:9c:22:62:aa:9f:
                    a9:de:2a:1c:9f:e5:4a:cb:83:f6:2a:16:d9:73:14:
                    60:99:61:14:97:49:73:3f:60:2f:5c:0e:61:29:62:
                    e6:07:55:cc:a8:12:ae:3d:c8:a9:97:32:84:ee:11:
                    cb:e7:e1:97:a1:8e:28:7f:6f:ee:21:f4:b2:bf:49:
                    e1:5c:54:cf:d7:a5:32:05:15:73:a8:b0:6d:7b:66:
                    1a:08:02:dd:a3:65:86:55:ff:4c:9a:67:42:5b:cf:
                    af:c0:f9:88:fd:24:a6:1b:6b:a5:cb:d8:2c:b0:15:
                    37:81:35:6b:34:85:2c:11:9d:a5:5f:cd:60:24:53:
                    d4:ff:e3:7d:74:4c:8d:e8:7b:75:0e:26:40:98:15:
                    83:ca:c1:c7:e3:7f:f1:ba:ed:89:32:50:53:f5:80:
                    79:bf:36:e6:3f:0a:4e:1e:ff:f1:78:af:59:14:ff:
                    d2:b0:bc:0c:d9:0e:b7:ee:b9:8e:9f:c6:10:e4:f3:
                    dd:70:ec:66:9b:b2:7e:f5:e4:ef:47:1f:ea:59:0e:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E1:78:4E:29:57:C3:F1:9B:CE:37:22:5B:A8:5B:44:F4:58:F5:C9
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a393a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:39:27:ff:c7:ed:f1:12:49:43:30:fa:42:b5:3f:ea:4d:
         05:4c:0d:94:9c:20:ff:a3:7c:45:3c:5f:18:a9:6c:56:52:fd:
         b8:cb:24:4d:83:05:a8:3d:76:19:53:b5:23:04:05:69:13:25:
         d0:0d:5e:57:7e:eb:eb:9f:7b:37:d1:6a:b6:f0:39:e6:df:dd:
         8e:33:23:f1:bf:f2:5e:c0:8f:0d:1d:d6:db:8c:32:8c:ad:07:
         90:db:cc:ae:4c:c8:2c:fd:7c:da:e1:8f:0a:56:38:49:83:62:
         7e:98:e5:d9:e8:7f:2c:f2:73:32:97:fd:4c:c2:66:4a:7d:d1:
         3b:bb:37:f1:61:14:8b:72:09:c9:01:c8:ac:90:15:4c:0b:00:
         95:6a:95:a1:1b:cf:40:48:45:ff:f6:1b:15:ec:79:12:5a:49:
         af:6e:fe:66:61:c3:66:26:05:01:1c:23:24:ee:16:2f:f2:70:
         8f:35:e0:0c:bc:ef:19:f4:00:c9:c0:06:86:71:c9:db:9a:30:
         37:0a:14:bf:f5:65:91:66:92:a6:10:43:b6:ed:56:a2:2c:6e:
         5b:e6:c5:58:88:9d:3e:8f:ec:e4:ad:b8:94:d3:0b:6b:b5:c8:
         bd:fb:a4:d0:2e:fd:65:3a:44:c7:59:85:07:44:7c:46:c2:74:
         a9:b8:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org