Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32332d3233203d3e20323632363931.roa
File:                     3137372e37322e32302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          QqunbEjXdTRwkPxW9JyVIufMVDNJmj76k6LIp/WEaFs=
Subject key identifier:   AA:7A:5E:86:A7:C0:26:50:9B:1C:08:7E:0F:D0:A2:49:00:C1:9D:D6
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       685FFB0611382A8DB659C23F98265DC87E4339E2
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        177.72.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5f:fb:06:11:38:2a:8d:b6:59:c2:3f:98:26:5d:c8:7e:43:39:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:af:09:a7:8c:f5:b3:9a:4d:07:84:f4:be:80:
                    83:72:ee:8a:73:46:e5:e4:72:f5:58:c9:b0:6c:8c:
                    98:33:43:21:26:b5:9a:fd:5a:bc:7c:f2:16:5a:c9:
                    44:aa:73:c9:cd:41:79:c9:c6:3c:47:f1:3d:40:09:
                    f8:1c:74:9d:3b:1a:61:34:18:3a:3f:e2:2b:3e:6b:
                    ff:b4:18:e4:bc:36:00:01:8a:16:40:88:d0:f8:53:
                    05:47:42:16:9a:5b:6c:00:bc:d6:69:79:ce:50:76:
                    76:fc:e7:b0:59:25:ac:ad:17:0f:08:5b:e1:72:24:
                    ab:c5:27:2c:3c:54:35:e5:57:70:cf:2c:0b:7a:4f:
                    3c:19:97:b0:94:b8:5c:45:eb:71:f5:4a:12:04:b5:
                    04:da:88:42:a4:f5:be:58:62:48:bc:c4:31:c0:1c:
                    9a:d5:8a:1d:27:0f:f4:26:bf:e1:36:15:92:9c:32:
                    2b:5c:1f:9b:77:87:bd:bb:c6:1b:1b:3f:6c:9c:39:
                    6b:79:3d:11:2b:e4:58:be:e6:f1:23:c0:1e:11:ea:
                    58:c7:52:c2:1e:f7:38:22:74:e4:33:c0:4a:7d:8c:
                    5a:de:2b:b1:0a:03:67:e2:04:d1:58:47:be:2b:41:
                    4e:28:ae:90:37:91:7c:cd:4e:97:b3:a2:14:8a:a3:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:5E:86:A7:C0:26:50:9B:1C:08:7E:0F:D0:A2:49:00:C1:9D:D6
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:e1:ad:4f:b9:ee:81:f6:d0:ae:8d:60:db:76:c7:9f:56:e3:
         90:c3:56:d2:f2:58:58:a8:ca:00:23:93:59:9d:c5:4d:29:7d:
         1d:dd:52:c3:59:2c:54:d8:37:3d:aa:3d:7b:5f:49:ae:c3:b5:
         33:50:15:08:22:13:0f:10:3c:86:78:68:84:57:a1:26:fe:66:
         2d:07:f1:2c:40:d0:53:89:c3:93:d5:e1:b7:3c:0f:2d:88:c7:
         7b:82:24:42:ae:4a:63:8d:38:07:23:36:d1:fa:3d:f4:2e:ff:
         88:35:46:4c:0a:ca:12:51:44:5a:80:4b:b6:5c:b1:37:b9:1f:
         82:27:f5:62:96:7b:0a:b0:bc:89:39:55:31:ab:a0:cc:11:7e:
         fb:77:4b:e6:86:c8:a6:5c:8c:ae:92:26:49:71:c3:4d:ac:52:
         35:19:15:7d:43:18:f6:0c:bd:e8:3a:35:6c:3c:24:7a:9a:9a:
         a2:9a:86:e2:f3:cb:9f:6c:1a:71:0b:5e:1d:e9:72:92:13:db:
         03:e8:bb:f6:ad:36:40:6b:64:93:b4:70:73:2b:8e:4b:a0:54:
         d1:92:4b:4f:10:69:29:c3:bd:87:b9:bb:e4:cf:cf:c2:cc:79:
         44:af:d2:40:c8:2e:e4:58:df:bf:cc:5c:64:37:73:56:4c:0c:
         af:41:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org