Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          ekeScdNmb3j6P4UffWKuwbBv4iMyOt4hd9yHRnZeRcQ=
Subject key identifier:   3E:A3:D6:03:D8:C4:A4:7A:BA:19:2C:84:9D:90:74:0F:30:DB:E5:0F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2E58AD65FAD2DEA7FDD2B635F2116047C6130848
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:18 +0000
ROA not before:           Sat 16 Oct 2021 16:11:18 +0000
ROA not after:            Sat 15 Oct 2022 16:16:18 +0000
asID:                     262691
IP address blocks:        179.108.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:ad:65:fa:d2:de:a7:fd:d2:b6:35:f2:11:60:47:c6:13:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:18 2021 GMT
            Not After : Oct 15 16:16:18 2022 GMT
        Subject: CN=3082010A0282010100BF8E1D6F287448B747E50FCBA55DB78AB9C046AFB2C6121323B67419EF73188ADCD785D8295ACAA52D698ACCFC013BA1AEEBCAC5D6255D430AB3D0ABB2309BF6AF656ED7BC174AFAA67D71FDF96BE9FCFBBE8CA3F363C00387682411E02003BECDDCAFE4E6E0DF29D26B3EF7E80260CCBC163C07925A1BE18045FB5E0D6E4B8D87B2707E94A1DFA4F0C8A2AAC64DD0552F8CD5719690086A14D6C27598B454259037CB2458B7CDF1EA1CF2DE881D48AE08DE0F59CF79B930E958DC1F6942568041E7C0B2260B88A72AE602DA410C899979FA8BC0EDE7B8A6FDD89E14300EE34900E703ACD33832D5536289FD4BF2D5841E1AAA8E939173F2645DEB027EDD01370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:1d:6f:28:74:48:b7:47:e5:0f:cb:a5:5d:
                    b7:8a:b9:c0:46:af:b2:c6:12:13:23:b6:74:19:ef:
                    73:18:8a:dc:d7:85:d8:29:5a:ca:a5:2d:69:8a:cc:
                    fc:01:3b:a1:ae:eb:ca:c5:d6:25:5d:43:0a:b3:d0:
                    ab:b2:30:9b:f6:af:65:6e:d7:bc:17:4a:fa:a6:7d:
                    71:fd:f9:6b:e9:fc:fb:be:8c:a3:f3:63:c0:03:87:
                    68:24:11:e0:20:03:be:cd:dc:af:e4:e6:e0:df:29:
                    d2:6b:3e:f7:e8:02:60:cc:bc:16:3c:07:92:5a:1b:
                    e1:80:45:fb:5e:0d:6e:4b:8d:87:b2:70:7e:94:a1:
                    df:a4:f0:c8:a2:aa:c6:4d:d0:55:2f:8c:d5:71:96:
                    90:08:6a:14:d6:c2:75:98:b4:54:25:90:37:cb:24:
                    58:b7:cd:f1:ea:1c:f2:de:88:1d:48:ae:08:de:0f:
                    59:cf:79:b9:30:e9:58:dc:1f:69:42:56:80:41:e7:
                    c0:b2:26:0b:88:a7:2a:e6:02:da:41:0c:89:99:79:
                    fa:8b:c0:ed:e7:b8:a6:fd:d8:9e:14:30:0e:e3:49:
                    00:e7:03:ac:d3:38:32:d5:53:62:89:fd:4b:f2:d5:
                    84:1e:1a:aa:8e:93:91:73:f2:64:5d:eb:02:7e:dd:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:D6:03:D8:C4:A4:7A:BA:19:2C:84:9D:90:74:0F:30:DB:E5:0F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:1e:ff:78:89:8a:43:3f:51:b1:89:3a:48:0e:69:31:c7:ed:
         55:89:4b:58:1b:96:0f:01:36:7c:2d:15:b0:bf:66:23:b7:cf:
         8c:b1:4e:da:6b:f9:0f:9e:6a:0d:81:2f:70:e8:47:98:a4:3d:
         0f:24:71:b0:26:f5:29:06:11:2c:91:8b:e6:6b:94:a3:9b:90:
         1d:45:cc:b0:af:6f:d2:56:eb:df:b5:74:de:f8:49:ef:10:9e:
         94:ec:4f:2c:40:bd:ae:a5:eb:d4:f3:97:9c:b4:9e:5f:ea:06:
         62:a1:6f:fe:df:3b:b2:86:b0:d6:ef:8b:8d:70:ca:2e:ca:d3:
         b4:02:81:85:e3:59:5d:8b:b1:b4:d8:c8:ec:d7:c9:18:c6:01:
         0f:9b:e6:45:4d:ff:21:7c:a6:bf:da:01:ab:c5:ed:b3:ac:9a:
         53:98:5c:84:a4:2f:26:05:08:0d:97:80:0f:eb:cc:97:eb:61:
         ac:4b:7d:df:03:fb:45:fe:a9:e8:b2:c3:94:ba:ea:a5:cb:72:
         a4:b5:34:7a:99:7a:1a:1f:ea:d4:40:dd:e4:da:47:70:c8:57:
         85:83:d7:eb:29:9f:47:90:d5:fd:bf:e0:69:2a:8f:95:1c:02:
         5d:80:89:37:ea:49:02:61:9f:55:8d:3c:58:0c:77:4f:10:30:
         2d:a6:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org