Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa
File:                     3137372e37322e32302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          5wWvQx/UaOiTP/U1MGx/cOOTffTdWo05YqrysmUunZk=
Subject key identifier:   F4:59:FD:F2:C2:69:11:A8:06:DE:F1:94:7A:EC:64:F2:5F:6A:CF:FD
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       0CD14204D5AA4DF8167DAA1DB91E4BA1B3647F2B
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        177.72.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:42:04:d5:aa:4d:f8:16:7d:aa:1d:b9:1e:4b:a1:b3:64:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject: CN=3082010A02820101009C466D605819556F099E61F9CC4344CF48A5DD9CD66FE3487BAD4D0891F7EF9282700219A5BEBD6B01A814E88BDF2609101690F44A6511E0CC41B931A0514DE489FE27889ADC5466BBE440F766A47E84AA72BBD82F842E177280F181D20E6EABEB3FFF748518400792D850A54827A842C57EEC8644E977B46EA79BDA7FBAA668EBB1025F9BEC1016E4DBFB3EE69526B5130FCCBB204E03E91FE63985C152DECDCB220DBD3AD7A07715ED3E3A7BE6BDC78616889465C5DD2F4C0A5280061FD5D6C2FE1F0FBEECD8B1AE793B82A0B47414EC471B1DBC2F4170A563791B20FE8F2BC0B9ED1D43D7C7221761F3110BFD0E3ABC67F53A977EDD661064F27818EF050D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:6d:60:58:19:55:6f:09:9e:61:f9:cc:43:
                    44:cf:48:a5:dd:9c:d6:6f:e3:48:7b:ad:4d:08:91:
                    f7:ef:92:82:70:02:19:a5:be:bd:6b:01:a8:14:e8:
                    8b:df:26:09:10:16:90:f4:4a:65:11:e0:cc:41:b9:
                    31:a0:51:4d:e4:89:fe:27:88:9a:dc:54:66:bb:e4:
                    40:f7:66:a4:7e:84:aa:72:bb:d8:2f:84:2e:17:72:
                    80:f1:81:d2:0e:6e:ab:eb:3f:ff:74:85:18:40:07:
                    92:d8:50:a5:48:27:a8:42:c5:7e:ec:86:44:e9:77:
                    b4:6e:a7:9b:da:7f:ba:a6:68:eb:b1:02:5f:9b:ec:
                    10:16:e4:db:fb:3e:e6:95:26:b5:13:0f:cc:bb:20:
                    4e:03:e9:1f:e6:39:85:c1:52:de:cd:cb:22:0d:bd:
                    3a:d7:a0:77:15:ed:3e:3a:7b:e6:bd:c7:86:16:88:
                    94:65:c5:dd:2f:4c:0a:52:80:06:1f:d5:d6:c2:fe:
                    1f:0f:be:ec:d8:b1:ae:79:3b:82:a0:b4:74:14:ec:
                    47:1b:1d:bc:2f:41:70:a5:63:79:1b:20:fe:8f:2b:
                    c0:b9:ed:1d:43:d7:c7:22:17:61:f3:11:0b:fd:0e:
                    3a:bc:67:f5:3a:97:7e:dd:66:10:64:f2:78:18:ef:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:FD:F2:C2:69:11:A8:06:DE:F1:94:7A:EC:64:F2:5F:6A:CF:FD
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:77:c7:1a:a1:e0:b3:c3:ff:ec:49:36:11:8a:c1:0e:d9:66:
         08:c6:63:45:4b:f9:74:75:c0:50:c4:e0:06:06:f0:3b:1d:e9:
         e3:a8:df:6a:ae:f9:f8:13:00:79:06:2d:a4:4d:7d:28:0c:db:
         c9:f1:f5:f1:aa:a0:82:d9:7f:ad:2e:70:05:f7:a2:33:bd:78:
         82:35:4b:5b:9a:bd:85:f5:81:43:cd:d2:fa:5a:e2:72:07:0c:
         66:e5:1f:90:fc:22:ff:29:33:a6:3c:d3:93:af:89:71:ca:18:
         b8:42:21:85:78:b6:1d:c9:ab:e0:d4:93:11:2f:92:30:f4:46:
         1e:9c:30:12:a0:78:b3:3a:da:73:83:34:e6:d7:f7:b6:94:96:
         48:d8:55:44:5c:4a:f9:17:b7:90:6e:2f:69:6e:76:22:fe:f8:
         47:0f:54:58:8c:6b:6e:db:d0:c7:0e:1f:b0:78:aa:11:06:76:
         41:b3:da:fb:b7:3c:73:91:b4:a8:82:d8:00:75:1f:e3:d5:0c:
         8d:de:21:ae:4b:7e:ed:98:75:ee:79:94:53:ff:b2:09:88:71:
         a0:d2:d5:43:a2:da:d4:81:f9:f8:46:1a:af:14:98:1e:4d:e1:
         4e:d2:0c:a4:58:18:eb:53:56:91:c7:cb:17:98:31:fc:39:87:
         07:68:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org