Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          FemFPuAHWOASsPwvS+9QSKyyEiBuYSFn581BtrBchLg=
Subject key identifier:   8B:32:2C:A1:53:06:C2:78:9B:92:70:BB:D2:86:9B:AE:FC:53:0A:4D
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2CFCFCC9C0256D4AAEBEA452ECA8001BCEED25E6
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        179.108.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fc:fc:c9:c0:25:6d:4a:ae:be:a4:52:ec:a8:00:1b:ce:ed:25:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:4c:c8:26:24:22:eb:18:f3:57:90:bb:6a:
                    d5:87:33:c5:15:d4:ec:d5:93:f6:34:6c:99:85:9c:
                    3d:ea:74:c4:10:00:dc:89:e9:86:32:63:e1:b0:b7:
                    86:6c:dc:ab:cb:a8:21:39:17:a0:b2:ce:8f:4e:63:
                    2b:ec:2d:20:fb:31:9c:79:67:d3:f7:27:2f:0b:ff:
                    04:94:d2:c0:87:d6:d8:aa:22:09:66:86:36:70:2c:
                    46:56:1c:04:b7:aa:7f:f0:41:6d:61:99:cd:ea:1e:
                    1d:eb:a9:f4:28:de:91:a7:a4:c2:af:b0:ec:f4:67:
                    a5:47:61:7a:93:7f:a3:84:ed:2f:19:df:18:8e:04:
                    f0:94:43:7b:55:40:de:cc:1d:ca:41:7c:8e:4f:34:
                    a3:32:dd:33:02:8e:cd:cd:ae:5c:55:33:d2:73:53:
                    9e:91:5d:11:62:3d:54:e4:44:c7:f8:ad:55:65:59:
                    da:2f:88:4c:04:9e:e2:63:d1:94:f7:89:ab:bd:c2:
                    f5:f6:e1:e2:05:37:9e:4f:e4:78:94:12:ae:d3:5d:
                    fd:2c:dc:5b:aa:58:90:b2:06:7d:57:21:f9:04:68:
                    f4:bb:4e:09:c3:4a:12:b7:dc:99:78:21:64:dd:0c:
                    79:de:34:fa:0b:a1:ec:ce:52:43:6c:5a:64:62:73:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:2C:A1:53:06:C2:78:9B:92:70:BB:D2:86:9B:AE:FC:53:0A:4D
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:95:4c:5a:12:0d:62:ee:56:68:7d:be:4f:4a:7b:de:76:
         46:22:82:9c:6a:2f:cd:c8:8b:6a:8c:c3:94:a6:3d:65:9f:97:
         f1:1a:23:33:5f:f6:3d:30:c0:6d:93:a5:02:39:60:00:ae:1b:
         4a:d5:13:98:f1:d8:25:41:38:51:85:d4:58:9b:4e:b5:3b:eb:
         58:15:37:59:85:b2:4a:13:5e:39:d6:08:13:47:09:e9:9b:a0:
         32:55:20:3f:e6:f6:cf:a3:2d:7d:1a:1c:89:10:da:46:19:b9:
         4f:f3:04:20:53:55:b1:95:84:37:3b:9c:f2:27:a0:15:20:18:
         be:d4:13:a8:ce:cd:ca:98:3d:bd:e1:58:16:0d:f0:5d:21:59:
         ca:de:0f:31:12:ac:af:0c:ba:72:bb:e5:e2:66:89:0c:e3:36:
         7e:5b:2c:0a:48:b5:a8:fa:2d:cd:9d:1c:3a:61:d9:58:23:ec:
         46:fb:65:37:9b:33:15:37:20:64:43:02:89:d8:01:28:7f:96:
         98:9a:0e:6c:ea:75:0a:20:9b:e6:8d:08:12:64:60:a1:73:b6:
         57:92:61:51:9f:37:fd:77:88:3a:07:10:c3:07:40:9a:b9:1f:
         d2:0a:ba:40:97:31:da:f4:7d:63:7c:dc:df:26:02:72:f5:54:
         5d:0e:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org