Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa
File:                     3137372e37322e32322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          gSXWyxX7yWJm07LhYdOuZzaEb0CJ1Z824WOA3ILoHcQ=
Subject key identifier:   2B:1B:A2:52:79:6B:26:46:C3:71:8A:7D:A1:62:6E:4B:EE:7E:0C:BD
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3C255B368A88661CCE61DF9A022042CB68C24B1D
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        177.72.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:25:5b:36:8a:88:66:1c:ce:61:df:9a:02:20:42:cb:68:c2:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:4a:11:bf:75:43:c0:2b:21:43:49:96:2f:
                    eb:b3:56:b7:1a:e4:0a:39:14:37:3e:e3:fa:81:3c:
                    30:be:00:61:aa:e0:83:65:41:a9:b8:86:4e:d8:1b:
                    da:2a:95:9b:51:59:56:d1:ac:76:81:1b:dd:b0:38:
                    fa:23:b4:85:4c:e6:8d:3b:9d:a2:d7:33:5b:80:f6:
                    b1:8c:fa:01:16:f7:31:7e:00:60:05:f9:bb:bb:a1:
                    d2:8e:57:eb:7f:4a:9a:02:5e:00:2d:a4:fc:32:53:
                    ce:f7:28:51:66:04:76:c0:9c:fa:86:fb:33:7f:06:
                    1a:cb:39:96:ae:7b:05:ed:27:9e:05:19:f2:c6:e1:
                    2b:24:55:13:b3:82:5c:c6:69:0a:af:cf:07:fe:4b:
                    08:09:be:76:47:01:0e:67:ea:b0:17:28:2f:a8:71:
                    a6:ac:43:ba:04:a0:7d:35:91:b8:f8:0e:f0:0d:a6:
                    03:54:a2:d9:a8:93:d3:ce:0a:80:49:b9:3b:67:dc:
                    41:11:2c:96:5f:04:51:12:94:f0:11:6a:4a:28:1f:
                    e6:fe:e1:e0:bb:06:ca:21:4d:6a:fd:3c:31:eb:fe:
                    0a:bc:9f:89:72:f1:57:6a:b2:92:51:96:d2:20:fe:
                    08:1e:d9:80:59:60:7c:b6:7d:95:b3:bd:8c:2c:08:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:A2:52:79:6B:26:46:C3:71:8A:7D:A1:62:6E:4B:EE:7E:0C:BD
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:69:c0:b7:4c:51:fb:f3:f7:56:2f:27:d2:0b:32:5b:c3:6d:
         bb:b0:2a:02:7e:5e:20:53:71:41:13:a6:0c:a4:fc:10:3b:29:
         74:2e:e7:54:00:06:0c:68:21:94:7a:35:9f:0d:f1:97:5b:99:
         bf:c2:c7:8b:84:d3:2d:a0:01:26:78:64:48:ea:05:ab:ad:8c:
         22:1c:0c:ba:45:a8:e6:2d:bf:53:82:33:8c:32:15:c5:18:91:
         e2:e9:08:57:75:3b:a1:2b:e1:9d:02:58:cc:27:97:7d:5e:1a:
         87:d6:a3:21:6f:c0:d2:9a:dd:8f:0e:65:1d:07:6d:35:68:ae:
         bb:58:b9:70:41:5b:00:91:f9:00:e2:02:c3:17:89:91:a7:fe:
         05:30:3b:0a:f2:65:de:ea:3d:38:8e:0d:6f:5a:40:dd:36:8d:
         bd:94:ac:9b:57:f4:cd:ce:7c:f2:e1:5a:25:59:c8:db:45:06:
         5e:c7:98:2f:2d:c3:90:b3:31:4d:ea:f8:39:0e:82:87:45:db:
         ef:4a:7f:3f:61:6e:51:73:5e:e1:94:25:26:82:6b:9d:79:c5:
         1d:33:32:de:21:ca:86:6d:ae:c5:64:28:f2:65:72:ab:0e:1a:
         91:a7:df:fe:1b:04:ca:7f:ee:aa:5c:b5:d2:a9:08:22:94:9a:
         76:98:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org