Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          Oiz9kWJYPiIkHvYSgpJrJHeujrLaYnM29pEU7nQgK3U=
Subject key identifier:   23:41:6D:0F:EE:25:2B:46:25:85:C0:D9:1A:44:E4:B9:E2:AF:1B:0F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7955D8C101F92B249FE73EBC7566E9A7E65FEAA6
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        179.108.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:d8:c1:01:f9:2b:24:9f:e7:3e:bc:75:66:e9:a7:e6:5f:ea:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:bb:74:b6:bc:5a:07:bb:8c:6d:b9:e3:45:
                    6e:69:b9:f8:b7:75:7b:19:53:7c:50:1b:0a:c7:0f:
                    1a:e9:b4:2e:d4:e9:29:17:14:09:62:6a:c9:a2:f3:
                    ce:a9:20:34:00:f8:08:be:82:a1:b0:ca:2f:10:b2:
                    24:13:f9:6b:cc:61:ee:a6:04:5d:df:7b:0f:55:68:
                    57:15:12:a1:99:4d:3d:37:4d:8e:ff:cd:bb:c2:35:
                    40:48:2c:f0:68:05:65:a4:95:ac:3f:15:22:44:6b:
                    1d:1d:b9:73:42:a4:e5:af:b6:d0:37:59:b3:d1:6f:
                    81:54:9a:76:04:a4:bc:3e:c3:62:36:f4:81:4a:6a:
                    c8:a8:89:95:5c:9d:39:c6:3b:1e:04:c5:0c:34:f9:
                    bf:f3:04:e7:72:48:ac:03:ab:7d:ac:50:d3:9a:4f:
                    46:d1:5f:e5:b1:9b:b9:74:d4:c4:e1:d1:1b:3d:53:
                    12:29:55:4d:19:00:3f:65:c0:50:88:c5:78:8d:48:
                    95:84:41:b8:44:6f:e2:70:6d:f4:91:65:ff:66:db:
                    1f:26:b7:17:f0:7e:9b:80:22:f7:50:b5:9e:94:2b:
                    90:39:76:3a:42:bf:26:a2:38:7e:89:ac:0d:a8:b8:
                    17:b2:fa:fc:8a:41:98:ca:a7:d7:6d:be:69:a3:21:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:6D:0F:EE:25:2B:46:25:85:C0:D9:1A:44:E4:B9:E2:AF:1B:0F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:09:00:df:d7:42:eb:23:81:9a:62:9a:e1:2b:df:8c:e8:13:
         f1:5d:17:d2:a7:69:4a:ab:f3:9a:1c:a3:5d:b6:be:38:6d:00:
         3c:42:0e:69:82:d2:a1:5f:7b:2d:06:5b:69:aa:99:20:c9:65:
         b5:ec:a9:0e:ae:dd:9b:02:b9:8b:86:87:29:b3:12:b1:0e:79:
         94:57:cb:ba:91:cd:7a:b2:79:dc:e1:30:15:1f:f1:27:12:c8:
         21:d4:0a:c9:80:38:9a:21:33:c1:c6:36:bd:24:09:79:a9:f4:
         e2:e3:a2:9a:8e:26:a4:62:8a:8a:5f:12:6d:13:43:e9:ba:71:
         aa:b6:5e:15:63:52:8d:db:cc:0e:8a:6a:63:96:20:4f:cd:af:
         22:c9:a8:a9:76:42:8c:25:21:ec:3e:50:dc:32:3d:f5:64:e1:
         55:fc:d4:7f:1a:f7:22:e8:4e:94:f2:11:60:da:e4:37:87:6d:
         4b:28:ab:65:62:73:56:7a:c4:e4:a5:7c:c2:b9:9a:e4:10:f3:
         82:12:f1:bc:1d:eb:d6:3d:8d:1e:2d:ae:7b:79:cf:a4:e6:32:
         26:e1:69:3a:cb:b5:da:eb:0f:af:84:20:98:ad:78:84:fa:00:
         d8:89:11:36:5a:9b:36:39:7e:cb:2e:6b:15:89:4e:f1:77:9a:
         aa:e2:0a:97
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUeVXYwQH5KySf5z68dWbpp+Zf6qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTRaFw0yMjEwMTUxNjE2MTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREI3MEJCNzRCNkJDNUEwN0JC
OEM2REI5RTM0NTZFNjlCOUY4Qjc3NTdCMTk1MzdDNTAxQjBBQzcwRjFBRTlCNDJF
RDRFOTI5MTcxNDA5NjI2QUM5QTJGM0NFQTkyMDM0MDBGODA4QkU4MkExQjBDQTJG
MTBCMjI0MTNGOTZCQ0M2MUVFQTYwNDVEREY3QjBGNTU2ODU3MTUxMkExOTk0RDNE
Mzc0RDhFRkZDREJCQzIzNTQwNDgyQ0YwNjgwNTY1QTQ5NUFDM0YxNTIyNDQ2QjFE
MURCOTczNDJBNEU1QUZCNkQwMzc1OUIzRDE2RjgxNTQ5QTc2MDRBNEJDM0VDMzYy
MzZGNDgxNEE2QUM4QTg4OTk1NUM5RDM5QzYzQjFFMDRDNTBDMzRGOUJGRjMwNEU3
NzI0OEFDMDNBQjdEQUM1MEQzOUE0RjQ2RDE1RkU1QjE5QkI5NzRENEM0RTFEMTFC
M0Q1MzEyMjk1NTREMTkwMDNGNjVDMDUwODhDNTc4OEQ0ODk1ODQ0MUI4NDQ2RkUy
NzA2REY0OTE2NUZGNjZEQjFGMjZCNzE3RjA3RTlCODAyMkY3NTBCNTlFOTQyQjkw
Mzk3NjNBNDJCRjI2QTIzODdFODlBQzBEQThCODE3QjJGQUZDOEE0MTk4Q0FBN0Q3
NkRCRTY5QTMyMTA1NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA23C7dLa8Wge7jG2540Vuabn4t3V7GVN8UBsKxw8a6bQu1OkpFxQJ
YmrJovPOqSA0APgIvoKhsMovELIkE/lrzGHupgRd33sPVWhXFRKhmU09N02O/827
wjVASCzwaAVlpJWsPxUiRGsdHblzQqTlr7bQN1mz0W+BVJp2BKS8PsNiNvSBSmrI
qImVXJ05xjseBMUMNPm/8wTnckisA6t9rFDTmk9G0V/lsZu5dNTE4dEbPVMSKVVN
GQA/ZcBQiMV4jUiVhEG4RG/icG30kWX/ZtsfJrcX8H6bgCL3ULWelCuQOXY6Qr8m
ojh+iawNqLgXsvr8ikGYyqfXbb5poyEFYwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCNBbQ/uJStGJYXA2RpE5LnirxsPMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzczOTJlMzEzMDM4MmUzMTM5
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbMYwDQYJKoZIhvcNAQELBQADggEBABkJAN/XQusjgZpimuEr34zoE/FdF9Kn
aUqr85oco122vjhtADxCDmmC0qFfey0GW2mqmSDJZbXsqQ6u3ZsCuYuGhymzErEO
eZRXy7qRzXqyedzhMBUf8ScSyCHUCsmAOJohM8HGNr0kCXmp9OLjopqOJqRiiopf
Em0TQ+m6caq2XhVjUo3bzA6KamOWIE/NryLJqKl2QowlIew+UNwyPfVk4VX81H8a
9yLoTpTyEWDa5DeHbUsoq2Vic1Z6xOSlfMK5muQQ84IS8bwd69Y9jR4trnt5z6Tm
MibhaTrLtdrrD6+EIJiteIT6ANiJETZamzY5fssuaxWJTvF3mqriCpc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org