Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3a2f33322d3332203d3e20323635303636.roa
File:                     323830343a333234343a3a2f33322d3332203d3e20323635303636.roa (raw, json)
Hash identifier:          Ix9j7wwfw2yjEqQWS65vue2wboC+azXzmjGGU82bPsY=
Subject key identifier:   7F:9E:55:1E:87:0D:99:31:6B:CA:62:4D:E4:14:72:98:EF:8F:F1:20
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       41ACBF0430FF23EB2D6E125DDA96682CECF1F3DF
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3a2f33322d3332203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:34 +0000
ROA not before:           Sat 05 Jun 2021 20:31:34 +0000
ROA not after:            Sat 04 Jun 2022 20:36:34 +0000
asID:                     265066
IP address blocks:        2804:3244::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ac:bf:04:30:ff:23:eb:2d:6e:12:5d:da:96:68:2c:ec:f1:f3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:34 2021 GMT
            Not After : Jun  4 20:36:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:3d:6b:1f:b1:65:b6:0b:92:da:4d:ce:e2:
                    25:bf:49:3e:c0:21:db:e6:58:46:7c:db:5c:59:53:
                    cc:5f:f7:3c:83:86:e6:cd:77:61:c5:8c:b4:97:79:
                    41:eb:07:af:cd:14:e6:38:2e:f3:d6:47:62:ca:96:
                    2f:28:a8:d4:fc:dc:c7:60:8e:9e:ae:7b:15:aa:2a:
                    52:c6:fc:a4:30:3b:2e:97:d1:4f:dd:34:c0:23:4a:
                    8e:cd:70:fe:86:e7:e2:4d:47:4e:f6:21:99:65:ad:
                    52:4f:32:95:2c:88:87:93:a6:a4:7f:a8:eb:a3:ee:
                    84:29:21:71:ce:5f:51:30:90:3a:6c:9d:40:54:09:
                    52:1e:10:ae:31:1a:7f:09:5f:bb:72:87:de:b9:89:
                    8f:cd:0a:09:b2:20:f3:77:b2:bd:a3:b9:4f:f0:06:
                    aa:4b:24:57:24:71:ae:54:58:30:76:9b:02:33:a4:
                    2e:74:a1:00:c0:af:8f:e2:de:1c:57:ee:c3:09:43:
                    97:82:69:ec:d9:d7:70:e3:00:29:22:5f:37:53:22:
                    04:a3:77:5a:d6:f7:eb:38:df:77:fe:25:a9:c9:fc:
                    65:f6:e0:c5:5a:bd:f1:2c:98:ae:ce:0b:73:b7:36:
                    b6:57:42:2d:1e:6a:43:56:3f:dd:36:88:5e:b0:f0:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:55:1E:87:0D:99:31:6B:CA:62:4D:E4:14:72:98:EF:8F:F1:20
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a3a2f33322d3332203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:07:dc:c5:dc:d3:a3:f6:06:d3:97:23:5b:69:fd:ea:23:81:
         fc:f1:c8:84:09:62:c9:53:82:78:6a:f0:81:5d:c8:a5:e5:6f:
         76:1b:ab:62:70:c3:03:ed:21:e6:11:8a:ff:d1:73:f4:53:22:
         c1:f3:99:ff:4e:07:1e:7a:e6:24:0b:6c:fe:38:ff:0c:bf:3f:
         5d:db:8c:0e:a2:d1:70:27:83:87:c1:00:29:15:d4:e8:92:83:
         d0:98:28:5a:76:39:a7:9a:74:95:54:24:a3:d7:4b:b0:ba:8a:
         b5:17:e0:4b:c5:72:2c:29:f1:ce:c6:61:0c:67:05:7b:6e:ab:
         c5:11:dc:a0:d4:72:ee:69:b7:94:a8:10:14:d4:8f:6f:7e:3b:
         73:3d:64:33:0d:0a:27:18:52:73:4e:17:0b:9e:09:4d:0d:db:
         a5:37:e7:2b:b0:7a:ce:33:f8:92:99:4c:02:13:20:33:3b:a0:
         d5:3f:9b:aa:53:9f:04:a5:62:e6:97:4b:fa:51:77:23:b8:86:
         7d:7d:7b:b6:46:a3:be:48:09:36:82:3b:1d:e5:68:83:e1:7d:
         0d:df:21:26:7a:00:78:e5:af:3f:67:e3:7f:88:05:49:02:ed:
         76:8e:b4:94:6d:dc:bb:9d:b6:da:94:de:a4:78:dd:45:63:41:
         43:0d:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org