Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a633a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a633a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          z429T+IrPJZjk6c8FM9mmqdKwxWnjKDWCaR7WmOW/h0=
Subject key identifier:   E5:03:69:F8:40:8B:93:10:61:7D:00:BF:68:46:E6:D9:88:4D:D0:83
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       3AB2B93589BD5451CFD4B1B5A2F07E611C18F646
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a633a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        2804:3244:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b2:b9:35:89:bd:54:51:cf:d4:b1:b5:a2:f0:7e:61:1c:18:f6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:63:b8:e4:4e:6f:95:7a:c6:95:e5:d3:10:
                    a5:cc:f8:45:e7:d5:51:b4:da:6e:0f:f6:05:e7:a0:
                    e1:fe:5a:7c:a7:a3:36:39:e6:d8:75:bb:33:4f:00:
                    b0:af:fa:24:ca:a9:14:32:96:f1:36:ab:53:52:1e:
                    ce:45:32:f7:3a:ee:21:0c:c2:9a:4e:c3:41:f1:73:
                    6a:8a:0f:88:34:92:da:ee:25:49:6d:76:11:c2:21:
                    54:43:a1:aa:10:64:09:e2:5c:e7:6e:d0:f2:60:78:
                    46:7d:fc:a3:59:b9:3b:80:b0:66:ab:f1:1e:88:42:
                    92:fb:62:05:43:92:62:07:6a:50:bb:cc:26:3e:44:
                    67:78:96:f8:4d:fb:6d:17:e2:0d:b4:52:f8:71:81:
                    91:bb:39:c4:5f:3a:8d:11:ef:d7:49:fd:0c:de:4f:
                    ea:81:f8:56:eb:a7:a7:9d:44:c5:59:9d:86:0e:02:
                    81:26:64:3e:d0:88:7f:89:36:03:e0:ce:30:4d:fd:
                    11:42:1b:1e:e9:4b:fb:f0:2c:4b:70:7e:fd:99:31:
                    fa:6e:fe:54:23:26:23:b1:83:85:3d:9c:c9:4a:bc:
                    ed:fa:ff:fb:62:ba:ff:8d:95:cf:36:88:3e:15:d0:
                    ec:af:ee:97:37:22:59:f8:63:22:a1:c9:f3:76:e5:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:03:69:F8:40:8B:93:10:61:7D:00:BF:68:46:E6:D9:88:4D:D0:83
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a633a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:4d:da:ce:22:17:c8:b5:7d:9a:76:25:b2:20:89:c3:02:
         c0:ad:b3:a4:6a:50:4a:2e:f1:16:e0:0c:ad:bd:63:f5:6a:d8:
         d5:02:57:95:30:29:c3:43:4b:21:30:54:33:78:a2:ab:7d:dd:
         db:df:45:c6:a3:f3:7e:fa:d9:89:d3:69:1f:1a:09:63:c4:7b:
         f9:4a:f3:9c:67:42:13:ea:13:63:5c:d8:9e:e8:e2:d6:9a:cf:
         ee:4c:5a:a7:e1:cf:c4:b2:8c:4c:22:94:9d:d5:e5:db:d6:60:
         d4:ed:5a:30:b2:27:10:65:62:b2:1d:1f:27:4f:11:d6:6b:d8:
         b4:9d:6b:51:fb:4f:0c:a0:81:f0:58:e0:b8:00:60:58:c9:68:
         72:20:62:9e:35:5b:87:39:d6:04:c1:ba:9b:ee:67:69:e6:41:
         b9:92:38:f7:ac:05:c8:9a:cf:bd:b4:d0:9e:30:b9:89:a4:46:
         4f:2e:23:0a:70:e4:a9:a4:9e:a0:1a:c4:1f:77:bc:83:1e:cf:
         8a:58:46:69:55:77:e7:d4:4b:49:3f:f9:7d:97:e9:53:95:a9:
         c2:56:b7:b0:37:e1:85:9c:d6:00:26:20:74:cd:d0:df:c5:22:
         45:26:5a:3d:ce:43:2d:76:25:03:84:a5:3c:77:94:97:3d:fe:
         db:80:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org