Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          HuC+/+YxwNX/hDCqxm9G8GctjHhsoKjVy2mqkziHz4g=
Subject key identifier:   9B:3C:00:21:AE:70:B5:C6:FF:14:D0:31:8E:9A:B4:07:1D:00:5E:43
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2198E43A01CB30E0706358C9F34D0A197FB99D5C
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        179.108.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:98:e4:3a:01:cb:30:e0:70:63:58:c9:f3:4d:0a:19:7f:b9:9d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:a8:31:66:18:c1:0a:58:a4:e8:d1:fb:a7:
                    19:ae:7f:31:c5:b2:31:1f:a1:de:5c:80:bf:12:c0:
                    65:8f:32:28:4d:57:0e:cb:84:ab:18:d9:73:2c:03:
                    78:bc:f6:d8:30:e8:8d:f3:c8:97:cb:31:c1:2f:00:
                    b9:48:61:ea:c7:ca:1c:d9:2a:eb:64:ba:c9:85:69:
                    05:e4:98:92:c2:13:32:50:49:70:24:10:bc:e6:45:
                    d8:86:0a:61:0c:62:44:8c:bb:b0:9d:62:15:b0:52:
                    57:e7:b1:5f:bd:65:7c:66:6b:9c:5c:94:f6:5f:bf:
                    f8:b3:9a:76:cd:cb:97:b8:69:8a:fc:70:a4:aa:fe:
                    d3:1e:52:f5:eb:20:60:b3:53:e7:cf:d3:2f:cd:c8:
                    ea:16:1f:57:0e:3c:c7:64:15:62:ff:08:38:64:19:
                    3e:3a:e9:12:81:11:05:5a:4f:7f:89:81:98:e2:f6:
                    aa:53:e0:44:c7:f1:49:fc:05:50:06:fb:45:60:c7:
                    4c:dd:ce:88:42:17:a5:2b:85:fe:a3:88:b8:35:2d:
                    53:95:fd:fd:f9:ac:31:1e:42:b2:ed:59:ba:60:bb:
                    f9:7b:03:63:a8:2d:90:bd:3f:a5:c2:c0:d8:87:1a:
                    ee:1a:be:54:67:1d:cc:db:76:ef:22:47:c0:7f:ec:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:00:21:AE:70:B5:C6:FF:14:D0:31:8E:9A:B4:07:1D:00:5E:43
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:f6:23:46:56:23:86:e9:b2:b5:bb:14:58:c9:e0:a1:47:52:
         79:45:16:28:d4:16:84:5b:06:8d:06:05:c1:54:e8:40:e6:86:
         ab:95:b0:48:74:8d:5c:bb:5c:b9:2b:c2:65:07:7e:4e:26:3a:
         0f:92:05:f5:db:60:2d:ee:73:87:dd:5b:d1:2e:00:e1:43:04:
         17:62:01:4f:7b:af:68:4d:4c:f4:85:36:4e:5f:a3:1d:d1:d0:
         cf:8c:1a:a9:70:33:28:51:9c:b7:fd:7b:f4:ef:65:8f:34:88:
         49:32:ac:f5:82:c6:d3:d3:61:fb:6e:dd:ec:0e:e5:c7:4b:a5:
         ea:71:7a:a3:26:5d:a5:98:ea:ce:33:62:66:3d:fd:63:d5:bd:
         a3:a4:41:68:f4:5b:42:56:c5:b2:06:9d:43:bc:0f:95:09:46:
         0d:cf:fa:1c:a3:ef:55:68:b1:0b:68:b3:ce:c3:bc:1a:6b:27:
         72:8e:5f:99:bd:63:e8:2e:8f:4a:f4:dd:db:64:a7:15:f2:ae:
         80:e1:85:9a:99:88:c6:89:76:da:db:e0:61:98:7a:9c:0d:f3:
         24:d9:14:d4:5a:dc:58:4b:10:0f:b2:0e:a7:11:e4:5e:46:7f:
         e8:a2:27:9c:85:06:75:b4:ae:c8:e9:3e:4a:91:94:10:9c:59:
         03:b2:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org