Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          7x2UIGmgx4dqfj8IHTGLTgR1Sz2mT548/rgvXO9R5Js=
Subject key identifier:   9E:DB:9D:64:53:31:B5:FA:A1:0D:C1:2C:62:89:A2:15:0A:67:18:22
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       0FABBF736F2434FCB4472E3D7BFB919A9871A16E
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:08 +0000
ROA not before:           Sat 16 Oct 2021 16:11:08 +0000
ROA not after:            Sat 15 Oct 2022 16:16:08 +0000
asID:                     262691
IP address blocks:        177.87.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:bf:73:6f:24:34:fc:b4:47:2e:3d:7b:fb:91:9a:98:71:a1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:08 2021 GMT
            Not After : Oct 15 16:16:08 2022 GMT
        Subject: CN=3082010A0282010100B4183B2A064292B64594759E6015FCDDC114B7D9761FF9C5579F4EE766F7032428BDF0D4945B75F23D3CA798B8A3794F82C9442D46D1726F2BD88BBB6B3ECFFC6521EABC6EDC79F88B88BB180D52A2EAB910C8917AE7F8C15C87DD38F4FDFF99743CFA8C5A7EF8DCD9AAECF35FCFF0C39C7B045CF537C7A3272FE7B9E112BDD2B20B6FEE06AAF34E834C41FC817D565191463DEA63930E8B355741C6AE3538FBAC2368BE12981A96C549AD5CE97223FA04A544D9FB49C0AF2086F56B47F468BC9966C7A184D2E39EDEFD804A03A5BFFA682D83002BF2992EB82D02A0B8BF347095EF381F4AF2F85DF7B8D97C24630D86E32CFAEEAFFB2EE2BDB0961CA904E6690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:3b:2a:06:42:92:b6:45:94:75:9e:60:15:
                    fc:dd:c1:14:b7:d9:76:1f:f9:c5:57:9f:4e:e7:66:
                    f7:03:24:28:bd:f0:d4:94:5b:75:f2:3d:3c:a7:98:
                    b8:a3:79:4f:82:c9:44:2d:46:d1:72:6f:2b:d8:8b:
                    bb:6b:3e:cf:fc:65:21:ea:bc:6e:dc:79:f8:8b:88:
                    bb:18:0d:52:a2:ea:b9:10:c8:91:7a:e7:f8:c1:5c:
                    87:dd:38:f4:fd:ff:99:74:3c:fa:8c:5a:7e:f8:dc:
                    d9:aa:ec:f3:5f:cf:f0:c3:9c:7b:04:5c:f5:37:c7:
                    a3:27:2f:e7:b9:e1:12:bd:d2:b2:0b:6f:ee:06:aa:
                    f3:4e:83:4c:41:fc:81:7d:56:51:91:46:3d:ea:63:
                    93:0e:8b:35:57:41:c6:ae:35:38:fb:ac:23:68:be:
                    12:98:1a:96:c5:49:ad:5c:e9:72:23:fa:04:a5:44:
                    d9:fb:49:c0:af:20:86:f5:6b:47:f4:68:bc:99:66:
                    c7:a1:84:d2:e3:9e:de:fd:80:4a:03:a5:bf:fa:68:
                    2d:83:00:2b:f2:99:2e:b8:2d:02:a0:b8:bf:34:70:
                    95:ef:38:1f:4a:f2:f8:5d:f7:b8:d9:7c:24:63:0d:
                    86:e3:2c:fa:ee:af:fb:2e:e2:bd:b0:96:1c:a9:04:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:9D:64:53:31:B5:FA:A1:0D:C1:2C:62:89:A2:15:0A:67:18:22
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:55:bf:50:db:5c:48:74:b7:ba:91:46:3c:2e:24:52:68:41:
         9d:3a:6d:52:59:11:9e:7c:f0:42:83:8d:1d:03:3d:36:33:a2:
         5c:ef:11:65:f9:0f:d1:07:34:c1:56:ee:e3:74:a7:b6:af:4d:
         05:bc:12:b5:3a:0f:41:4d:b2:56:25:a2:5f:b0:17:79:f3:6f:
         39:28:f3:74:10:56:d4:93:6a:aa:3e:7a:05:45:b0:29:37:eb:
         ea:dc:46:36:d1:33:38:37:61:b9:5b:6e:e7:84:8d:49:a0:70:
         15:7e:5a:8d:fc:de:f3:0f:bd:d1:0a:f7:40:1d:b1:5a:26:39:
         e3:f6:d6:4e:66:a6:cb:d4:64:2c:2d:bd:99:da:6b:72:4f:e9:
         5d:b1:64:f9:13:9f:25:b8:fe:ab:2b:79:5e:00:3b:34:0e:37:
         d9:3b:ad:1f:8d:cf:db:2a:74:26:66:3e:69:01:17:8e:c1:cb:
         1f:00:42:da:47:00:4d:83:5d:14:c6:3a:9e:fb:3c:4f:e4:f3:
         f6:5b:e7:f6:e7:8d:38:41:fd:dd:80:2b:30:b4:f5:67:98:b0:
         8e:c0:94:ac:1d:52:82:bb:e8:42:b9:86:59:a3:e3:ba:ca:87:
         84:5b:41:4b:e6:29:2f:f9:99:87:a1:87:b2:e6:c0:d5:ba:4f:
         94:da:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org