Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          dj7cHTRcGFqaFV7DCrAx/UwHBpMLn5DeqokxfWa+Le8=
Subject key identifier:   60:CC:D1:23:3E:D6:7B:1D:7F:F3:FE:4A:8A:E2:F3:05:C0:E1:39:07
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3942B901C7F74B0700132ACEA39390A1082A3DBD
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        177.87.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:b9:01:c7:f7:4b:07:00:13:2a:ce:a3:93:90:a1:08:2a:3d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:1a:e4:14:e6:95:55:12:66:fe:9b:62:9d:
                    09:6a:1b:e3:2a:17:32:58:e8:ab:36:57:70:eb:bc:
                    96:b1:44:cd:9d:9f:2d:02:e4:90:47:61:d8:4f:af:
                    4f:70:92:7b:ad:bc:c1:96:c2:a3:8a:93:4e:a3:bc:
                    21:05:49:fe:2a:32:b5:84:c6:bd:4f:5f:c5:b2:0c:
                    1e:93:ce:9f:02:61:9c:b5:f9:bc:fe:04:14:d1:63:
                    b9:a1:02:67:e1:48:a1:13:c1:f9:38:f3:6c:dd:8c:
                    14:4e:37:10:94:bd:dc:7a:4b:8c:c4:1e:f4:7b:9e:
                    2f:0e:3a:bb:d6:e5:be:da:5e:c1:86:ed:0f:6a:3b:
                    5d:47:3c:b7:6d:cb:9e:61:50:73:30:02:e1:13:45:
                    e8:75:cf:28:e7:8e:06:b7:b1:1e:a5:c9:93:f5:3c:
                    fc:db:2e:bb:3c:3e:d7:e9:36:ff:e2:dc:a4:16:60:
                    d0:6e:6e:ef:1e:57:17:f8:4a:d6:c4:e5:7a:5e:02:
                    52:d1:85:54:65:67:70:a3:12:f7:6f:f4:49:26:32:
                    3f:e3:58:0f:1e:fa:c8:2a:4a:7f:c2:b8:c1:5c:64:
                    c8:f4:df:ca:49:87:a7:11:78:bc:a1:38:a9:f5:26:
                    1d:69:e5:47:c6:a6:08:a4:e3:81:20:be:54:d4:5b:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:D1:23:3E:D6:7B:1D:7F:F3:FE:4A:8A:E2:F3:05:C0:E1:39:07
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:6d:64:9d:19:9b:c3:96:ce:8e:ea:b3:5e:d6:6c:96:4f:
         48:97:82:18:59:1e:b7:57:74:d2:97:a9:e4:a2:c8:50:7c:60:
         98:d1:f9:4c:de:2f:19:90:2e:a5:04:59:11:87:2a:63:2b:0d:
         8e:ce:38:c5:1d:7f:ea:36:11:a9:fc:13:b1:91:8e:55:86:3b:
         09:e0:fb:3b:0f:da:12:e2:4d:64:52:3f:2f:b0:92:1e:1a:83:
         2a:70:cb:72:32:07:6d:ea:88:37:9c:8a:39:f8:43:c4:a9:6c:
         56:05:40:87:55:6e:31:de:98:57:ea:65:e8:d3:d7:09:a5:62:
         a4:e0:9e:b5:f3:b9:53:ae:89:ee:67:ef:c4:2a:59:4d:5f:79:
         06:19:66:82:72:7d:77:38:e4:bb:1e:9c:1d:0e:e4:c6:a9:89:
         1a:1f:c8:36:b4:ff:2c:57:0f:68:2d:05:6e:3b:89:54:46:66:
         78:fb:b5:0c:ab:76:43:17:c1:11:27:c4:cb:d5:2c:5a:b7:db:
         10:f8:ef:57:14:ea:3d:cb:db:63:22:17:f4:e2:95:6c:ba:77:
         39:09:bf:d4:00:97:3e:8a:e2:10:b9:5b:f1:d0:e3:e6:6b:a3:
         47:06:ef:38:1b:a3:3d:3c:1a:e6:0a:a0:c8:1d:f0:e4:b9:2f:
         0a:08:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org