Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230302e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3230302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          zBLoCIVZjOB2eJAN10UFobKZRnIFg4jWWGa8ozgYdI0=
Subject key identifier:   57:21:26:B6:0B:D5:B1:BC:19:18:45:5B:ED:8C:40:6A:08:A7:39:5E
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       6FF239E83F8708942C04CA34E7FC636ABEEE87CB
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        179.108.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:39:e8:3f:87:08:94:2c:04:ca:34:e7:fc:63:6a:be:ee:87:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:58:9f:40:3e:4e:82:fa:e4:e6:4f:eb:24:
                    89:fe:fe:15:a3:8c:3b:f1:8c:a6:ce:a9:c0:b8:86:
                    e5:7e:96:b2:1e:51:16:11:9c:05:29:66:35:d1:b6:
                    2c:4a:32:91:fc:82:05:44:8a:7b:e9:49:bb:69:e4:
                    39:4d:d0:14:c4:a0:40:fc:d9:44:d9:c8:e0:67:d8:
                    7c:1e:60:f1:02:e5:6c:53:02:5d:d4:80:f3:f8:f0:
                    74:77:63:fd:d9:5d:98:6b:12:d5:63:69:9a:b2:82:
                    12:6a:eb:f0:16:c5:6f:01:b8:85:b5:fb:6c:b7:82:
                    34:1c:30:26:f5:1d:81:95:6f:2e:36:ad:3e:d2:9b:
                    6a:ff:3f:d2:02:bf:5a:b3:ba:26:6a:70:8d:bf:44:
                    71:ca:bb:61:ad:15:4f:25:db:56:8e:1e:6a:3b:49:
                    22:77:92:9c:c7:f1:69:48:43:ee:1e:5b:5b:b2:10:
                    04:8c:32:19:9a:84:53:64:f5:fa:06:43:a0:d2:ad:
                    18:07:c7:27:f1:d2:e7:e7:c5:63:41:ce:4c:5e:85:
                    db:92:16:89:a7:5f:8b:2d:7f:f0:1e:2e:d8:46:95:
                    70:a4:72:4d:d9:93:23:b0:3d:1d:72:9d:6b:76:b5:
                    71:75:33:3b:20:63:19:4e:8f:fc:a4:a1:b8:17:31:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:21:26:B6:0B:D5:B1:BC:19:18:45:5B:ED:8C:40:6A:08:A7:39:5E
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:33:43:a2:ca:a6:16:95:1b:51:9b:58:49:c2:9f:51:20:ea:
         3d:cd:cd:3f:d4:cf:26:55:65:59:c3:fa:35:13:b8:be:d1:62:
         40:2c:0c:99:f5:a3:18:a7:cf:5b:84:13:cb:fe:0a:ec:c1:4a:
         97:39:df:69:2d:51:a6:0a:38:07:2a:f0:51:15:69:c5:3b:10:
         c7:3c:19:1a:0c:12:b6:fa:69:9c:0a:87:2b:47:1a:4e:61:40:
         47:33:78:38:a2:7a:87:d6:21:33:56:fc:bd:8f:5d:e4:01:5b:
         93:2b:0e:fd:ac:17:49:ca:cb:5a:04:9e:f1:63:88:50:24:8e:
         59:c5:fe:02:ca:24:20:d2:fb:d6:5e:cd:08:f6:bb:29:a2:0d:
         7c:46:bb:0a:ff:ff:fa:ae:fe:13:b0:d8:65:5a:08:16:65:b6:
         74:a2:4a:df:bc:71:a0:c6:c1:dc:bd:a2:2a:02:d1:d4:68:24:
         00:44:fb:8b:35:36:ef:73:b9:56:1c:36:5c:0f:68:b6:53:df:
         a8:87:c9:46:b5:ea:c9:94:9f:6d:a1:85:cc:ba:1a:68:3a:33:
         6d:24:6d:c4:1d:6d:56:2d:b7:68:30:29:61:e4:21:83:de:16:
         48:2b:5e:03:f0:df:3a:d0:63:e9:88:e1:c0:cb:c4:6f:af:aa:
         2e:77:21:eb
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUb/I56D+HCJQsBMo05/xjar7uh8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTFaFw0yMjEwMTUxNjE2MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZFOTU4OUY0MDNFNEU4MkZB
RTRFNjRGRUIyNDg5RkVGRTE1QTM4QzNCRjE4Q0E2Q0VBOUMwQjg4NkU1N0U5NkIy
MUU1MTE2MTE5QzA1Mjk2NjM1RDFCNjJDNEEzMjkxRkM4MjA1NDQ4QTdCRTk0OUJC
NjlFNDM5NEREMDE0QzRBMDQwRkNEOTQ0RDlDOEUwNjdEODdDMUU2MEYxMDJFNTZD
NTMwMjVERDQ4MEYzRjhGMDc0Nzc2M0ZERDk1RDk4NkIxMkQ1NjM2OTlBQjI4MjEy
NkFFQkYwMTZDNTZGMDFCODg1QjVGQjZDQjc4MjM0MUMzMDI2RjUxRDgxOTU2RjJF
MzZBRDNFRDI5QjZBRkYzRkQyMDJCRjVBQjNCQTI2NkE3MDhEQkY0NDcxQ0FCQjYx
QUQxNTRGMjVEQjU2OEUxRTZBM0I0OTIyNzc5MjlDQzdGMTY5NDg0M0VFMUU1QjVC
QjIxMDA0OEMzMjE5OUE4NDUzNjRGNUZBMDY0M0EwRDJBRDE4MDdDNzI3RjFEMkU3
RTdDNTYzNDFDRTRDNUU4NURCOTIxNjg5QTc1RjhCMkQ3RkYwMUUyRUQ4NDY5NTcw
QTQ3MjRERDk5MzIzQjAzRDFENzI5RDZCNzZCNTcxNzUzMzNCMjA2MzE5NEU4RkZD
QTRBMUI4MTczMUNDQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtulYn0A+ToL65OZP6ySJ/v4Vo4w78YymzqnAuIblfpayHlEWEZwF
KWY10bYsSjKR/IIFRIp76Um7aeQ5TdAUxKBA/NlE2cjgZ9h8HmDxAuVsUwJd1IDz
+PB0d2P92V2YaxLVY2masoISauvwFsVvAbiFtftst4I0HDAm9R2BlW8uNq0+0ptq
/z/SAr9as7omanCNv0RxyrthrRVPJdtWjh5qO0kid5Kcx/FpSEPuHltbshAEjDIZ
moRTZPX6BkOg0q0YB8cn8dLn58VjQc5MXoXbkhaJp1+LLX/wHi7YRpVwpHJN2ZMj
sD0dcp1rdrVxdTM7IGMZTo/8pKG4FzHMsQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFchJrYL1bG8GRhFW+2MQGoIpzleMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKzbMgwDQYJKoZIhvcNAQELBQADggEBAKczQ6LKphaVG1GbWEnCn1Eg6j3NzT/U
zyZVZVnD+jUTuL7RYkAsDJn1oxinz1uEE8v+CuzBSpc532ktUaYKOAcq8FEVacU7
EMc8GRoMErb6aZwKhytHGk5hQEczeDiieofWITNW/L2PXeQBW5MrDv2sF0nKy1oE
nvFjiFAkjlnF/gLKJCDS+9ZezQj2uymiDXxGuwr///qu/hOw2GVaCBZltnSiSt+8
caDGwdy9oioC0dRoJABE+4s1Nu9zuVYcNlwPaLZT36iHyUa16smUn22hhcy6Gmg6
M20kbcQdbVYtt2gwKWHkIYPeFkgrXgPw3zrQY+mI4cDLxG+vqi53Ies=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org