Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a623a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a623a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          sjZWWhdyjv/vuFfXyFd0oJYFCTfEObw/ndi1pgHiuHY=
Subject key identifier:   4D:D4:21:F1:BB:10:D0:AD:A5:41:7E:03:10:84:1A:63:8C:95:23:D3
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       1167FEAC8F51244E0BC55F602E495CB375946DAE
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a623a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:29 +0000
ROA not before:           Sat 05 Jun 2021 20:31:29 +0000
ROA not after:            Sat 04 Jun 2022 20:36:29 +0000
asID:                     265066
IP address blocks:        2804:3244:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:fe:ac:8f:51:24:4e:0b:c5:5f:60:2e:49:5c:b3:75:94:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:29 2021 GMT
            Not After : Jun  4 20:36:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:0b:ca:22:f6:87:70:dc:6e:d1:ba:14:92:
                    46:ed:1a:c2:43:7f:96:90:64:4c:20:b9:36:26:9e:
                    54:af:6c:cf:1e:70:1b:75:c0:12:92:bc:47:02:12:
                    af:1a:d0:f0:77:bb:36:25:0f:e8:24:b3:e0:8e:99:
                    0a:51:04:5c:70:ef:18:d0:32:72:f2:ef:c6:06:a0:
                    3e:28:a5:5e:44:1f:42:53:c6:96:77:f3:a6:9e:c3:
                    56:4d:a8:94:e2:4e:68:ac:a7:b5:b9:ce:16:3c:02:
                    ea:07:7f:c4:ea:21:0d:91:e2:b9:f7:96:8a:f4:b6:
                    bf:43:f1:80:54:89:7b:e7:56:13:6b:63:8f:84:a5:
                    92:e6:7c:be:1f:d3:d8:78:8a:7f:59:56:73:5c:ce:
                    6b:70:12:e7:ae:c6:00:9c:81:54:23:3d:3f:c8:90:
                    4c:05:b0:2b:99:89:de:62:45:0e:75:9f:46:26:81:
                    b3:0d:bb:eb:69:e0:5e:1f:4e:8e:e4:a5:3b:2c:a7:
                    fd:9a:aa:69:97:5d:f3:c2:e9:0e:ba:3c:ca:f5:07:
                    12:bc:16:11:75:f8:9c:ce:8a:73:e7:20:d7:a3:14:
                    7c:c7:cc:32:17:cb:e2:ec:35:d3:e3:af:c4:f5:96:
                    30:e9:fd:07:7b:ed:91:69:8b:d3:b7:12:3e:59:e0:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:21:F1:BB:10:D0:AD:A5:41:7E:03:10:84:1A:63:8C:95:23:D3
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a623a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:9e:ba:90:cc:ff:23:26:25:79:b5:20:fd:3f:99:0f:17:
         2a:6e:c9:03:cb:50:36:ce:04:03:02:84:06:ad:d8:71:f0:fa:
         5a:89:17:a0:ae:b3:61:ea:36:b6:18:8e:43:c0:e3:4d:fe:5f:
         36:da:6c:53:17:72:7b:9d:7e:d6:1a:44:08:98:c5:93:35:2d:
         af:04:57:60:7d:e2:ab:dc:59:90:f6:18:aa:bc:f7:31:1c:ac:
         4c:bd:6a:f9:da:74:2d:12:4b:44:fe:af:cd:89:c7:04:69:20:
         6c:15:2b:51:c5:fa:e3:3e:61:ac:eb:79:56:f9:14:01:1a:31:
         d3:8c:ef:50:3b:3e:ba:5b:39:08:b2:48:61:de:98:9e:b6:1d:
         6d:35:88:d3:33:bf:a4:3c:b4:c3:c8:d9:10:de:24:e8:b9:65:
         86:a5:82:11:77:6f:00:0c:ec:37:0e:c7:0f:05:6c:f3:cc:29:
         58:b1:19:11:03:6f:4a:54:6a:09:91:d3:c2:c7:0b:7a:8a:e8:
         59:92:9b:ba:fe:46:4e:6a:95:8c:04:84:88:fa:83:e3:38:77:
         d4:78:23:51:38:6f:dd:56:43:9b:e0:72:1d:c2:43:3e:18:ba:
         62:ff:98:0b:2b:70:89:54:a7:fd:75:4a:38:46:ed:82:71:7e:
         40:fe:3f:63
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUEWf+rI9RJE4LxV9gLklcs3WUba4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjlaFw0yMjA2MDQyMDM2MjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc2MzBCQ0EyMkY2ODc3MERD
NkVEMUJBMTQ5MjQ2RUQxQUMyNDM3Rjk2OTA2NDRDMjBCOTM2MjY5RTU0QUY2Q0NG
MUU3MDFCNzVDMDEyOTJCQzQ3MDIxMkFGMUFEMEYwNzdCQjM2MjUwRkU4MjRCM0Uw
OEU5OTBBNTEwNDVDNzBFRjE4RDAzMjcyRjJFRkM2MDZBMDNFMjhBNTVFNDQxRjQy
NTNDNjk2NzdGM0E2OUVDMzU2NERBODk0RTI0RTY4QUNBN0I1QjlDRTE2M0MwMkVB
MDc3RkM0RUEyMTBEOTFFMkI5Rjc5NjhBRjRCNkJGNDNGMTgwNTQ4OTdCRTc1NjEz
NkI2MzhGODRBNTkyRTY3Q0JFMUZEM0Q4Nzg4QTdGNTk1NjczNUNDRTZCNzAxMkU3
QUVDNjAwOUM4MTU0MjMzRDNGQzg5MDRDMDVCMDJCOTk4OURFNjI0NTBFNzU5RjQ2
MjY4MUIzMERCQkVCNjlFMDVFMUY0RThFRTRBNTNCMkNBN0ZEOUFBQTY5OTc1REYz
QzJFOTBFQkEzQ0NBRjUwNzEyQkMxNjExNzVGODlDQ0U4QTczRTcyMEQ3QTMxNDdD
QzdDQzMyMTdDQkUyRUMzNUQzRTNBRkM0RjU5NjMwRTlGRDA3N0JFRDkxNjk4QkQz
QjcxMjNFNTlFMDZGOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA12MLyiL2h3DcbtG6FJJG7RrCQ3+WkGRMILk2Jp5Ur2zPHnAbdcAS
krxHAhKvGtDwd7s2JQ/oJLPgjpkKUQRccO8Y0DJy8u/GBqA+KKVeRB9CU8aWd/Om
nsNWTaiU4k5orKe1uc4WPALqB3/E6iENkeK595aK9La/Q/GAVIl751YTa2OPhKWS
5ny+H9PYeIp/WVZzXM5rcBLnrsYAnIFUIz0/yJBMBbArmYneYkUOdZ9GJoGzDbvr
aeBeH06O5KU7LKf9mqppl13zwukOujzK9QcSvBYRdficzopz5yDXoxR8x8wyF8vi
7DXT46/E9ZYw6f0He+2RaYvTtxI+WeBvlQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FE3UIfG7ENCtpUF+AxCEGmOMlSPTMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMyMzgzMDM0M2EzMzMyMzQzNDNh
NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzMDM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBDJEAAswDQYJKoZIhvcNAQELBQADggEBAITHnrqQzP8jJiV5tSD9P5kPFypu
yQPLUDbOBAMChAat2HHw+lqJF6Cus2HqNrYYjkPA403+XzbabFMXcnudftYaRAiY
xZM1La8EV2B94qvcWZD2GKq89zEcrEy9avnadC0SS0T+r82JxwRpIGwVK1HF+uM+
YazreVb5FAEaMdOM71A7PrpbOQiySGHemJ62HW01iNMzv6Q8tMPI2RDeJOi5ZYal
ghF3bwAM7DcOxw8FbPPMKVixGREDb0pUagmR08LHC3qK6FmSm7r+Rk5qlYwEhIj6
g+M4d9R4I1E4b91WQ5vgch3CQz4YumL/mAsrcIlUp/11SjhG7YJxfkD+P2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org