Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          HKhV1dIvjj9kWJ3tAAPZy81T2K/R+3GZ2zR1cNkz1bQ=
Subject key identifier:   79:8A:24:A2:4E:8B:16:07:25:8F:EE:EE:89:67:AA:F6:DE:BC:F2:13
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       70AB2A0673069B63EBC201C35A329B1AAF3622A6
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        179.108.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:2a:06:73:06:9b:63:eb:c2:01:c3:5a:32:9b:1a:af:36:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:52:f6:92:a5:81:2c:70:c4:1c:08:15:ee:
                    f0:b7:89:02:68:b0:ba:37:02:a4:36:0b:30:a7:5d:
                    ad:93:4e:03:8d:10:eb:32:f6:62:72:73:c1:c2:f4:
                    64:7f:ca:00:98:08:a7:2e:75:a6:b0:38:b4:00:69:
                    74:4a:82:ad:14:7b:a3:6a:72:38:de:d5:bf:bb:3d:
                    eb:3f:37:58:ad:07:41:13:99:93:52:be:83:ed:ba:
                    ae:86:44:e4:d1:ce:11:0c:62:50:3a:1e:89:2e:b8:
                    9e:37:c6:49:50:e1:cd:36:70:49:df:a7:24:61:33:
                    d6:7e:e1:13:de:56:d8:d7:24:51:73:46:ce:bf:fa:
                    ae:57:1c:d5:17:5e:eb:50:b0:6f:4f:22:92:58:9e:
                    e6:a5:a3:dc:c0:25:e5:a5:ad:be:b1:3e:56:49:ff:
                    12:44:0b:45:91:5e:88:95:56:e3:3b:97:27:7d:a3:
                    c0:f8:e9:cc:b3:f1:2e:d5:05:24:2a:03:ce:b3:0c:
                    ea:ae:fd:a1:7e:2c:86:34:a9:91:ef:2b:bd:f2:63:
                    97:fa:dc:32:c9:c2:dc:73:f8:60:36:15:9c:27:1e:
                    b2:78:5a:d9:a2:d6:fa:10:31:5c:6d:02:91:dc:46:
                    83:a1:4b:b3:01:87:c4:6b:67:0e:25:67:0e:0a:bd:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:24:A2:4E:8B:16:07:25:8F:EE:EE:89:67:AA:F6:DE:BC:F2:13
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:80:01:9d:77:72:84:a8:bc:fb:3b:29:88:87:2d:0a:d3:90:
         2d:f4:5a:c4:a1:f2:a2:b4:19:14:03:96:96:d4:f4:8c:e3:85:
         67:39:63:80:1d:3b:c2:77:89:96:af:13:9f:90:d1:fe:fd:12:
         67:81:80:5d:d3:bd:28:32:7c:15:89:60:cb:e3:54:1d:6e:eb:
         b2:15:d7:7a:5b:11:d3:73:bb:c5:c0:f2:7a:fa:23:0d:65:5c:
         13:28:57:b2:dc:82:d7:41:5e:f5:89:f0:9b:4e:d7:11:ef:e8:
         a8:e4:3e:a3:ca:e6:15:31:7c:0b:6d:b3:4b:b5:a6:1c:62:b2:
         33:af:39:cf:a8:1a:aa:eb:b2:b1:f6:83:b5:0b:d2:e2:ba:39:
         c2:b8:25:65:4a:15:d5:1d:6c:9c:b3:a9:63:b8:85:a9:2d:83:
         78:4e:61:46:3e:f8:0b:86:c0:f6:f1:3f:8c:43:ee:46:e6:33:
         37:37:3d:b8:04:07:c6:81:03:ac:98:af:0f:27:ac:16:86:1b:
         de:a0:b7:d2:f3:de:2f:d6:b2:65:33:db:8a:69:04:62:86:d1:
         a4:65:f9:71:fa:e0:75:93:09:af:ce:b0:a0:f6:f8:38:45:f2:
         80:af:ec:46:c2:fa:b0:be:d9:d2:a6:2d:53:a5:eb:44:66:f4:
         e6:38:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org