Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          v6QNecKeZsYK59DpzWQSqUVq7DriM/kUsOPlazji3H0=
Subject key identifier:   B1:69:E3:97:EE:84:C2:9E:38:EA:26:ED:79:23:D9:3D:F4:CC:46:D4
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       67EDF5C39A2BA6338ECF547B9EBDE651482657C6
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        179.108.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ed:f5:c3:9a:2b:a6:33:8e:cf:54:7b:9e:bd:e6:51:48:26:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:07:a1:6c:5b:22:b1:b4:06:6d:8b:de:e8:
                    4b:8b:6c:54:9f:d4:4c:53:62:f4:68:fc:2b:12:8f:
                    12:a3:e4:4a:e3:42:10:98:49:9a:f5:d8:3e:de:ce:
                    28:ee:d2:a4:40:17:96:24:aa:09:7c:25:73:c6:14:
                    a7:e3:a9:1d:a0:3a:ec:8b:64:78:87:f0:b5:d4:8d:
                    2c:ea:d1:26:c5:65:64:b1:8b:6c:69:24:b2:36:ab:
                    e9:73:30:3d:fb:5e:f2:21:4c:a9:6d:dc:55:ba:2f:
                    8a:d2:94:78:05:6b:8e:42:b1:0a:be:70:a1:d9:6c:
                    0d:c6:79:19:9a:d1:ba:b8:38:d8:a1:63:82:62:2a:
                    c9:05:7a:f4:24:32:45:34:7d:5a:1b:8b:06:f6:ad:
                    52:c8:c5:b3:a5:bf:e6:47:e3:3c:72:7f:d5:af:c7:
                    1e:74:22:39:20:8e:d9:9d:ff:0e:fd:1a:80:f7:3d:
                    86:bc:da:7c:af:e7:44:b5:72:70:54:b1:a4:44:94:
                    71:86:38:7c:cb:10:c3:bd:f9:05:ee:e0:9e:d1:c4:
                    bc:b9:0b:9e:9e:e4:56:6e:1f:71:47:64:73:49:55:
                    85:36:db:60:3e:05:69:5b:5c:5d:2b:27:ec:07:81:
                    54:b9:a9:1b:33:17:a3:ed:93:5d:13:4e:11:b3:17:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:E3:97:EE:84:C2:9E:38:EA:26:ED:79:23:D9:3D:F4:CC:46:D4
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:5b:5c:5f:91:42:d4:41:a4:cb:a9:af:bf:fe:53:af:3c:
         a2:16:06:f6:23:5f:5e:e3:91:b5:f0:9f:30:8f:0c:61:ef:12:
         0b:f2:ae:97:cd:42:21:fe:3d:a8:84:5c:a9:f4:37:85:14:95:
         d6:75:a0:46:6b:2b:38:ff:bd:48:cb:e0:1a:88:73:50:78:d1:
         cc:fe:da:ca:44:9e:2f:ab:83:14:ce:39:43:13:f0:f0:be:8d:
         d1:2c:4b:cd:ba:44:3c:41:54:2c:89:bb:9e:42:dd:1b:f8:c4:
         51:04:ae:84:ee:ec:73:97:8d:16:14:22:45:cb:75:17:29:34:
         95:01:90:59:c6:58:88:f9:b8:24:a2:6f:0e:e0:77:af:9a:42:
         cc:f5:3d:a2:e3:79:f5:8a:1d:c1:45:28:97:24:89:44:5b:c0:
         56:2f:c9:65:52:47:68:a6:78:47:c4:2a:84:b9:3d:17:c8:3f:
         64:c4:a3:5a:98:e4:b0:c0:b3:2d:71:44:6a:06:11:1a:3a:3d:
         28:45:45:64:f3:e3:06:2c:c6:83:48:67:e9:e5:47:92:0f:d3:
         8e:67:7b:d2:a9:25:a6:dc:47:d9:20:0d:e0:3a:15:ec:28:f1:
         56:73:bd:f0:ec:14:98:27:91:b6:51:78:99:3d:d5:58:89:ab:
         55:2a:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org