Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a663a3a2f34382d3438203d3e20323635303636.roa
File:                     323830343a333234343a663a3a2f34382d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          S0jJNGm7M1iGYiS3D2UIKCy+2uT+gs+vO0vgiuAGeqY=
Subject key identifier:   5C:52:C8:E9:32:6E:81:22:A6:22:A4:34:6D:48:94:AF:96:9B:47:73
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       20A235848E0846F9050753544F5F0E566638D112
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a663a3a2f34382d3438203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        2804:3244:f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:35:84:8e:08:46:f9:05:07:53:54:4f:5f:0e:56:66:38:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:fd:68:60:8d:b2:62:b4:43:d9:df:07:da:
                    6a:8a:c3:34:94:3f:8a:7d:ee:5a:74:fc:fa:fb:10:
                    af:6a:1d:7e:f5:41:b4:48:94:49:8b:ae:48:ee:a4:
                    25:0a:d3:1c:67:f5:53:74:b3:41:16:f7:c4:fb:ca:
                    33:a9:b8:4d:42:9e:07:17:bb:14:12:f2:ac:ed:09:
                    bb:83:63:a7:bf:0d:79:5e:a5:00:b8:a0:4b:17:07:
                    35:83:0c:76:8c:63:53:77:a2:32:7a:f1:0d:09:b2:
                    4b:c4:28:28:8b:39:43:e4:f4:bd:b2:ff:81:b9:5a:
                    7d:96:fa:21:ac:a9:ca:08:3c:9d:af:ab:40:2e:5a:
                    29:59:f5:35:75:1a:25:dd:ea:c2:2a:53:d3:dc:23:
                    a1:c8:09:9d:34:a2:de:83:9c:9a:76:e1:2e:ab:ae:
                    06:4b:9b:4a:88:36:d4:c6:fc:6f:2d:bf:38:e9:71:
                    55:3d:8b:59:28:e6:09:46:40:dc:05:9b:a7:9b:07:
                    e9:41:0f:b9:0b:65:2f:35:ae:48:58:ac:a3:5e:cf:
                    70:a7:89:cb:0d:b3:36:0b:fe:d5:81:11:dd:e2:bb:
                    e3:88:6e:22:08:6b:57:ba:62:33:58:d2:57:74:59:
                    93:d3:ba:bd:e8:b5:32:ff:b1:b0:09:2a:e9:88:0e:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:52:C8:E9:32:6E:81:22:A6:22:A4:34:6D:48:94:AF:96:9B:47:73
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/323830343a333234343a663a3a2f34382d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:fe:73:8c:f7:dc:a9:8f:3a:43:ba:8f:39:2f:cc:9a:47:
         9d:0f:54:e6:87:23:28:24:5d:8c:84:7e:fe:1d:19:b1:df:02:
         dc:b1:6c:5d:76:fb:30:a0:ec:27:21:8e:6f:6c:bb:c7:13:27:
         37:c3:e9:ed:65:2a:58:5c:ab:26:21:e9:20:0b:f5:84:cf:cd:
         a0:35:e1:3e:52:1d:46:63:7b:af:a5:99:81:67:e5:ed:12:74:
         e8:15:00:3c:68:f2:37:95:14:fa:e7:34:b7:0f:39:00:5a:b3:
         a2:f5:4b:28:0d:2b:39:4e:bb:4d:c8:49:80:3e:2b:2f:1d:5a:
         b4:7f:bb:30:d3:83:d4:2c:16:73:65:06:1e:2b:38:ff:4d:f2:
         3d:f9:3a:25:21:0b:3c:d6:aa:a9:b4:1e:98:47:7d:89:25:4c:
         9d:9a:48:b7:fb:5b:32:a6:4c:ab:2d:4f:57:41:c3:7e:9a:85:
         b1:c6:22:eb:43:af:af:6a:8a:db:0c:b0:8c:38:e6:ee:4a:1a:
         d7:2f:8d:b5:02:54:ab:1c:39:82:1a:9b:e2:23:74:05:f0:39:
         be:11:59:c8:0e:8b:97:5f:53:7b:c7:fc:8e:e3:63:7e:d7:6c:
         aa:fc:db:88:48:0b:75:be:27:5f:41:e2:d6:20:dc:97:f3:d8:
         cf:61:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org