Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa
File:                     3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          gsW5N/wDDgfMyKBWyDWv2vsS7hjjpIoKk5AN6SXj548=
Subject key identifier:   2C:B6:07:12:88:43:8D:D3:4C:7C:96:64:87:F6:E9:D7:64:B6:57:6D
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       28B2808D8FE34F57123B0CBD55F6AE094455CC92
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:16 +0000
ROA not before:           Sat 16 Oct 2021 16:11:16 +0000
ROA not after:            Sat 15 Oct 2022 16:16:16 +0000
asID:                     262691
IP address blocks:        131.108.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:80:8d:8f:e3:4f:57:12:3b:0c:bd:55:f6:ae:09:44:55:cc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:16 2021 GMT
            Not After : Oct 15 16:16:16 2022 GMT
        Subject: CN=3082010A0282010100DDE17AF0BA8CFC7F927FD2D7743AD60DAE3E4119B22EC7D71EBD5FDC5CAE52F229C0A94C70544024FBF5EBE2FBD4EA7B497C61EDB869DAAE56E8C990DA53A2A1E3A2299CE68C741C1B2A8283B1B6E507824E1D143D4ABDBD65C39176A1D1ECA0C04D32E906BA6F162F0747FBB1ACE92A7C15846825054BAE6D2F41769ABAD1BD8F329B7C7BD4DDFCFADD6B3F7211A58525B558145C8BAAD03CC3C9646DD17DD7947043385B24AFB32D84CB17871BAACA83E9A1AA6C6E31EF24D068558F0C2BDCAF5448C84C9A9444FF0A89C65142DB5F088BC0723A3F13424DD775EC1E4804033DE6541F03E5634A1CB37A489CD8D0552E8A1E88BF01B45B55AD74F2F7617E9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:7a:f0:ba:8c:fc:7f:92:7f:d2:d7:74:3a:
                    d6:0d:ae:3e:41:19:b2:2e:c7:d7:1e:bd:5f:dc:5c:
                    ae:52:f2:29:c0:a9:4c:70:54:40:24:fb:f5:eb:e2:
                    fb:d4:ea:7b:49:7c:61:ed:b8:69:da:ae:56:e8:c9:
                    90:da:53:a2:a1:e3:a2:29:9c:e6:8c:74:1c:1b:2a:
                    82:83:b1:b6:e5:07:82:4e:1d:14:3d:4a:bd:bd:65:
                    c3:91:76:a1:d1:ec:a0:c0:4d:32:e9:06:ba:6f:16:
                    2f:07:47:fb:b1:ac:e9:2a:7c:15:84:68:25:05:4b:
                    ae:6d:2f:41:76:9a:ba:d1:bd:8f:32:9b:7c:7b:d4:
                    dd:fc:fa:dd:6b:3f:72:11:a5:85:25:b5:58:14:5c:
                    8b:aa:d0:3c:c3:c9:64:6d:d1:7d:d7:94:70:43:38:
                    5b:24:af:b3:2d:84:cb:17:87:1b:aa:ca:83:e9:a1:
                    aa:6c:6e:31:ef:24:d0:68:55:8f:0c:2b:dc:af:54:
                    48:c8:4c:9a:94:44:ff:0a:89:c6:51:42:db:5f:08:
                    8b:c0:72:3a:3f:13:42:4d:d7:75:ec:1e:48:04:03:
                    3d:e6:54:1f:03:e5:63:4a:1c:b3:7a:48:9c:d8:d0:
                    55:2e:8a:1e:88:bf:01:b4:5b:55:ad:74:f2:f7:61:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:07:12:88:43:8D:D3:4C:7C:96:64:87:F6:E9:D7:64:B6:57:6D
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:e6:f8:42:59:0d:a8:ec:8f:ca:13:40:df:9e:c1:b9:1a:
         32:12:c0:fc:b9:91:4f:09:df:44:91:6e:7d:21:25:66:42:7e:
         41:b3:58:c7:90:55:0d:9b:0f:f6:2a:d0:40:bc:1e:4c:8a:3e:
         50:3a:2f:c2:99:55:23:8f:b0:1c:82:a6:1b:8b:66:6c:b2:5b:
         43:f0:02:4c:e4:5e:c1:55:68:9c:eb:9b:da:b1:4b:06:7f:ec:
         da:41:7e:e7:6a:b3:08:7d:8e:b8:90:45:14:a8:24:33:57:df:
         4b:3b:36:0e:32:be:4e:4b:31:48:c9:84:fe:a2:be:00:cc:40:
         eb:f5:00:73:42:74:a9:e3:45:0b:79:fb:af:e3:bb:ff:a7:f3:
         d1:c9:c7:0e:44:d2:9e:7e:cc:7b:31:ec:88:9c:10:35:f1:13:
         73:5a:d1:bc:5a:16:d1:30:3e:d3:27:71:5a:aa:97:94:0a:0f:
         9a:fb:e3:5b:fc:b0:00:ce:62:f4:63:6a:42:2f:ef:92:c7:b6:
         bd:8b:a9:1f:09:99:2d:32:b8:e7:50:58:8b:56:2c:2d:72:d4:
         85:bc:16:1b:d7:0b:0c:8d:48:98:37:f5:f4:25:9c:c8:08:c9:
         46:cf:c2:1b:1e:19:1b:09:5e:bc:f6:5c:4a:d5:1b:6a:cd:44:
         b2:00:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org