Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa
File:                     3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          sYP4IzmUhs7+BPJ9fIlwVAiunyyyBotHW3UGmlA7mVM=
Subject key identifier:   E6:68:82:19:21:A1:73:5C:97:E1:AC:F9:56:B2:FC:C8:FD:E6:CE:91
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       390F1A46099BE3182D2715C68001A860768C4E80
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        131.108.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0f:1a:46:09:9b:e3:18:2d:27:15:c6:80:01:a8:60:76:8c:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:b5:5d:2f:37:c1:86:17:62:4a:09:f4:f8:
                    62:22:b5:57:24:5c:7a:5b:de:80:97:db:e1:c0:3f:
                    a6:64:c5:68:c7:73:d8:a7:eb:b1:d2:c3:87:6a:92:
                    7f:90:2c:4c:df:31:27:96:c2:32:05:92:17:ab:96:
                    89:c1:55:f4:f2:a2:80:00:2d:56:67:50:e7:d9:3d:
                    a7:3f:61:7c:6d:0e:b6:18:fa:44:a8:34:77:9d:fe:
                    09:cc:51:3a:89:2d:6d:17:2b:6d:94:50:9e:1d:4e:
                    83:c8:8c:45:77:7c:63:a9:43:f9:be:a9:53:60:b1:
                    aa:d8:b1:91:b9:ac:c1:f8:b6:8e:17:2b:3c:d6:0f:
                    1a:99:d6:7e:7a:d0:cd:cb:6b:9e:cc:27:54:dc:40:
                    2a:a2:99:71:f6:61:79:50:91:38:07:91:8e:a4:73:
                    c6:f9:a6:e0:45:42:90:0f:84:84:87:76:40:c6:c3:
                    26:4e:b2:bd:54:97:d2:0b:ef:4d:e1:a7:61:01:f6:
                    23:d9:73:0c:5a:32:c7:92:20:2a:c1:d9:1d:23:50:
                    00:e8:6d:07:ac:2c:6f:84:b8:85:9d:f7:be:03:f6:
                    af:1a:4d:89:dc:4b:b0:80:59:e8:61:20:58:4e:22:
                    4d:80:27:7a:5d:27:ea:18:3c:1f:8a:92:3f:55:48:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:82:19:21:A1:73:5C:97:E1:AC:F9:56:B2:FC:C8:FD:E6:CE:91
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:ad:f3:10:8f:50:20:ad:b1:4d:87:85:4f:79:7f:7e:6e:
         5a:75:18:69:75:25:86:f8:09:a9:da:41:f8:67:d5:a7:ee:26:
         11:6c:b7:67:3e:c4:a1:50:a9:e6:96:f1:5b:ab:a3:bd:42:5d:
         cf:15:da:db:1a:d5:c5:d8:f2:52:6d:bc:0e:05:d0:1f:42:f3:
         c4:06:8a:50:18:3c:fe:61:bd:5e:b1:53:4a:98:33:9e:88:a8:
         08:dc:54:f2:fb:a1:aa:b4:a0:31:27:0d:a0:d1:77:0d:5f:53:
         27:8e:05:d5:9e:2d:b5:a3:b0:75:09:73:0b:09:35:0c:ac:da:
         4d:a7:06:65:f2:ca:f2:8b:87:22:18:2d:4d:eb:e7:49:62:e6:
         a2:14:7f:8e:e8:21:28:49:67:5b:d3:11:03:ad:d9:af:33:24:
         8f:46:3a:06:72:ca:0e:4f:3e:b8:b7:a8:98:92:c3:8b:7b:8f:
         de:17:09:f5:9a:f0:16:7e:a9:6d:cb:fb:d0:65:1f:a9:38:1d:
         5f:e8:85:a5:dd:76:f1:49:dd:6c:d4:0f:8a:7c:ed:bf:fb:70:
         ee:90:fe:60:76:49:05:d9:b2:16:ac:8a:5c:4c:28:50:b8:d7:
         f9:82:88:d6:91:37:b3:4a:c2:11:3c:53:12:3a:0b:0e:58:c4:
         d3:8a:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org