Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          CpKzBz5S3WnvGiOUi6bKM9sC1ypbVV6/64GdDW8btNw=
Subject key identifier:   A0:DE:08:59:18:E1:0D:B0:D2:2A:CC:CE:AC:EB:ED:65:74:5A:78:8A
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       27B13F958BD8764ECAD8E308FA286C39E8CD10CD
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:16 +0000
ROA not before:           Sat 16 Oct 2021 16:11:16 +0000
ROA not after:            Sat 15 Oct 2022 16:16:16 +0000
asID:                     262691
IP address blocks:        179.108.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b1:3f:95:8b:d8:76:4e:ca:d8:e3:08:fa:28:6c:39:e8:cd:10:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:16 2021 GMT
            Not After : Oct 15 16:16:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:27:cb:29:46:81:c6:c0:89:07:e8:62:89:
                    ad:4f:6e:7b:c5:0f:49:07:68:49:90:64:f0:c2:52:
                    13:ed:e0:7e:13:e5:8d:18:a6:71:65:d4:c5:ba:d2:
                    06:38:6d:55:91:00:5e:2d:ac:d2:3e:4f:b8:5d:5d:
                    fd:52:48:b4:22:8c:ba:08:e9:09:59:0a:7e:7e:8b:
                    f1:6d:fd:67:fd:e7:b4:6f:9c:3b:1e:fd:f3:58:9d:
                    95:d3:20:64:3e:79:0f:e4:26:5d:42:b8:32:f6:5a:
                    59:fd:8b:a0:c5:04:64:fb:ff:a4:3c:fa:10:91:0e:
                    0a:81:0c:2c:8d:a9:e9:90:a8:2f:56:3f:76:7b:f4:
                    4e:f2:dd:24:92:94:00:93:91:7c:3b:eb:fc:c4:b7:
                    8d:7a:8f:73:29:e9:fe:9f:03:9b:fd:d5:cb:63:c0:
                    93:29:74:f6:84:36:29:ae:c2:7a:a8:0d:58:1e:e6:
                    f7:b6:95:93:0f:9d:ad:46:ee:f3:8f:48:47:50:75:
                    8b:0c:81:0b:67:2f:b5:bd:e0:dc:4d:46:4a:81:62:
                    f7:79:64:6a:27:79:39:3b:79:ec:7e:a7:ff:48:d8:
                    32:43:08:84:e6:28:f5:65:a5:22:45:7e:57:93:7f:
                    d3:c3:97:dd:8b:93:96:69:65:de:8b:32:b5:5b:df:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DE:08:59:18:E1:0D:B0:D2:2A:CC:CE:AC:EB:ED:65:74:5A:78:8A
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:97:bb:4a:82:57:89:6d:f0:4b:f7:60:2f:b5:d8:b0:4b:
         b5:41:94:97:fd:10:63:39:ba:60:90:22:c3:34:15:ef:a8:ff:
         0e:e7:d8:b1:5a:9b:9e:a2:fe:b6:c8:3e:97:d5:be:6d:fb:d5:
         2e:cd:08:7f:2b:02:b4:a3:a9:0e:5d:e9:b7:98:cd:4d:3c:47:
         39:78:23:fa:75:aa:be:61:66:14:78:cb:5e:5b:99:0f:60:c3:
         eb:c6:0b:97:ea:4d:0b:56:7f:57:40:48:1f:0d:91:d0:fd:14:
         45:1f:c6:3d:1f:04:22:49:87:20:42:48:70:54:34:2f:38:71:
         e0:ba:b9:c6:1c:55:ec:27:7b:b9:87:3d:1b:b7:3d:39:90:ed:
         e6:4f:52:b5:1f:47:a5:e2:5c:26:3d:8b:6e:dd:41:e8:bf:f0:
         e4:33:2d:fa:4c:59:20:58:12:b6:a7:70:a5:69:28:b5:1b:58:
         12:b2:8f:cb:82:e8:c8:18:47:27:06:1d:78:0b:71:bc:85:ab:
         7c:86:11:59:e2:ff:92:73:0b:c3:62:dd:f4:aa:75:7e:14:84:
         24:d1:08:87:53:b8:b5:b9:8c:ac:4f:af:91:28:f2:ef:d1:f5:
         a5:7a:cc:19:0e:df:d5:c0:32:ce:44:b2:c5:03:56:11:be:60:
         26:6e:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org