Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          R7vl9FYmL4fuUdfpeiT1lFFB9mdecTlbXX6oVGvfIRU=
Subject key identifier:   AF:74:5D:09:1A:63:28:27:86:91:B4:45:83:44:A4:D6:41:22:ED:78
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       6E8A154219299D329BC0B4EE0CDCEA1998E3A806
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        177.87.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:15:42:19:29:9d:32:9b:c0:b4:ee:0c:dc:ea:19:98:e3:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:ce:cc:00:aa:bd:a6:e6:23:05:7a:1e:aa:
                    47:71:46:f5:1a:0c:2d:b1:50:b4:eb:f6:19:56:f3:
                    8d:fc:1b:cf:a7:96:89:e5:de:e5:2f:ad:86:ce:20:
                    19:43:62:63:9f:7c:1e:14:d7:1b:b3:61:af:2a:4e:
                    31:b3:d4:b7:dc:c8:15:a4:00:0e:58:3a:60:fd:1b:
                    9d:8f:bc:27:0b:03:57:35:8c:ba:fa:7a:b5:28:7b:
                    d3:f0:67:3b:f0:a6:69:74:1a:57:94:b3:8e:8c:0e:
                    0f:e3:41:7c:90:fe:9e:61:7b:7f:91:34:d6:1e:f9:
                    86:1f:0f:d1:b2:f9:81:bd:cc:1e:93:92:a0:2c:a1:
                    07:1d:ba:c9:eb:ed:8a:e9:73:12:64:a9:fb:d0:23:
                    6a:01:0d:f2:58:5c:3a:7f:1b:e2:66:f2:55:90:a3:
                    d6:be:93:19:49:82:86:97:e4:aa:3f:ec:fe:71:cb:
                    a2:00:6b:94:e6:a1:ff:39:50:42:ac:3e:65:d6:0b:
                    2c:8e:25:57:29:f1:76:d4:ee:0e:d8:18:ef:9e:07:
                    e4:be:fc:b3:25:7e:f4:bd:83:32:aa:8e:07:2d:ea:
                    ba:7c:e9:f4:d0:01:a8:23:c1:21:d9:49:aa:10:04:
                    96:5d:1f:70:5e:fb:a1:8f:22:1e:8f:4a:e9:e9:ad:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:5D:09:1A:63:28:27:86:91:B4:45:83:44:A4:D6:41:22:ED:78
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:0a:89:21:ed:39:df:9c:d6:8c:e3:57:8c:2b:3b:71:c1:
         de:4d:95:d3:f6:e2:a8:4e:2c:7d:d2:97:20:07:7f:a8:92:dc:
         a8:43:44:a3:5a:c7:40:ca:3c:ef:f9:45:67:62:fd:4e:0e:be:
         59:cb:f1:04:41:3d:5f:79:70:18:b3:91:d1:d6:b6:0e:a9:d7:
         1a:67:1f:c3:67:b9:1c:66:c0:9b:53:de:21:e9:4b:ee:06:2d:
         53:67:5f:30:65:42:a5:62:94:52:76:5f:ac:2b:bf:59:90:ac:
         0a:9e:c7:f0:3c:4b:1b:71:2c:cf:cb:e7:0e:4d:de:2c:0d:52:
         33:2f:cb:2f:6b:7f:bb:b7:95:d7:06:43:e8:72:27:67:05:7c:
         26:ce:79:cf:16:60:39:e2:ac:76:57:d5:1e:21:02:ba:b3:2e:
         42:e4:35:00:f8:43:7c:48:88:5f:13:a3:ab:5c:4c:44:ff:10:
         52:02:a5:99:97:7d:f3:62:88:eb:6b:48:62:aa:57:fe:23:28:
         60:02:8e:55:56:21:23:5a:95:fc:65:69:cd:86:5d:d8:ce:8f:
         ad:cc:60:9e:a7:a1:f9:1d:06:90:06:cd:f4:29:86:7a:29:5c:
         73:b8:40:d5:17:06:ec:61:fe:2e:f9:0d:50:13:e9:d4:fb:be:
         df:44:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org