Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a613a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a613a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          PF+5XU2BEZNpjIcn8XyZLJWOE6xThJaYrqMF9Wb/cjY=
Subject key identifier:   C1:6F:B9:2F:DE:4F:F4:38:AA:CD:86:01:51:88:C4:2A:99:63:E9:88
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       0733ED55BA8A47EA4F2C279B2A098AF7D7EB6F72
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a613a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        2804:3244:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:33:ed:55:ba:8a:47:ea:4f:2c:27:9b:2a:09:8a:f7:d7:eb:6f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:bd:be:b0:96:6d:0a:f8:68:61:1b:7d:86:
                    3d:9a:14:e4:5b:90:54:80:8e:d9:d3:0b:2b:90:e7:
                    20:6b:75:f9:5b:8c:c4:2c:37:c7:22:cc:8a:7e:8c:
                    4d:d2:c1:68:c6:a3:ed:c7:a4:2f:78:51:64:3d:d2:
                    51:ec:f6:c5:a0:22:2c:12:c4:5c:b5:f8:e0:87:5e:
                    00:c1:d6:7e:0d:08:56:f6:d0:00:33:f1:cd:fb:74:
                    49:d5:f3:49:b1:ba:19:90:7f:23:a7:cc:dd:1b:58:
                    eb:54:dc:a2:a2:4e:ce:86:5a:93:d9:8f:d0:48:57:
                    c2:73:59:34:61:0f:95:c5:8c:0d:17:88:cb:46:69:
                    0b:67:d6:2d:ca:1d:2c:e6:e7:3c:a5:c2:ac:5d:26:
                    83:80:a9:8c:05:7b:2b:df:8f:40:b8:30:28:71:08:
                    e8:d6:98:e9:0b:09:76:16:a4:6d:52:61:d9:e2:0c:
                    d5:6a:a0:dc:c7:6f:57:49:24:10:de:5b:14:67:da:
                    52:e6:6b:85:12:96:85:f1:f9:00:3f:d5:6e:f7:14:
                    71:d6:ee:9b:08:82:4b:bd:f1:e8:4e:70:e7:ae:bf:
                    34:b8:cc:4b:81:ce:79:7f:8b:78:da:41:f3:ee:b8:
                    c6:e3:ef:09:06:19:53:bd:8d:0c:e3:30:a2:28:7e:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6F:B9:2F:DE:4F:F4:38:AA:CD:86:01:51:88:C4:2A:99:63:E9:88
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a613a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:d6:b0:b4:51:41:b9:cd:d8:80:4c:af:b9:c5:9f:38:79:9b:
         23:7b:8d:d0:9f:2e:bb:ca:e7:b4:a4:e4:37:22:fc:68:dc:f6:
         32:df:1e:53:07:17:80:6f:e0:b1:d7:ce:51:1a:6b:93:a1:a2:
         5c:d0:cd:57:ef:83:49:86:94:b2:e9:60:ee:2c:1d:60:f9:f2:
         28:3a:d5:e4:98:c4:d5:7b:b6:1b:b5:61:f4:bd:2e:86:c7:8b:
         3a:a4:3a:24:8e:5c:dd:ba:4b:d0:c1:3d:c4:8d:06:da:f2:26:
         6d:ca:94:13:47:7c:2d:e7:bb:7c:52:c7:ba:06:2c:ab:e4:87:
         5f:00:76:98:2f:92:3f:09:df:a8:ea:96:f6:fe:8b:29:71:aa:
         1e:e2:1a:50:36:0a:89:15:9c:1a:6e:50:9a:6c:87:f8:d0:89:
         c1:6c:58:ff:4a:51:e5:64:12:93:b7:c2:49:a7:b4:c7:9c:d5:
         8d:f2:8b:55:7a:2b:0e:e6:dd:a9:96:1d:9e:59:33:87:17:15:
         db:03:bc:71:2b:3c:71:08:66:89:50:7e:d7:58:d4:cc:b3:b9:
         65:f7:33:1d:a9:75:dc:c7:ac:b4:5c:88:b3:c9:10:ca:db:28:
         d7:9d:50:3f:89:4e:b2:f1:fc:33:b8:ea:83:a9:3a:ab:b3:9b:
         bf:8c:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org