Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          UaDY4EnwhD+tLE7IuYBTHFEvKT2WWS5BdN44t8gb540=
Subject key identifier:   FC:FE:58:FE:D0:40:68:81:5F:B5:FB:F4:13:8F:44:04:C6:C8:AD:AF
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       082E0796E3C1D484384912F14BE98F7454302800
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        179.108.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:07:96:e3:c1:d4:84:38:49:12:f1:4b:e9:8f:74:54:30:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:e8:d0:4f:26:60:c4:68:4d:28:59:81:10:
                    7c:bd:f7:de:e5:72:80:9c:ec:16:05:45:6c:ef:2c:
                    b2:4a:3a:84:69:c5:c0:58:e4:36:99:a2:1f:00:ba:
                    87:5f:b9:0e:7c:83:07:f0:7c:d8:5d:88:3a:11:f9:
                    7f:96:88:9c:6e:c5:62:36:e0:1c:b2:89:e6:8f:a5:
                    9e:17:b4:7e:24:ed:49:4c:8b:1a:96:e3:bc:e9:73:
                    c5:df:56:63:1a:89:97:92:5a:e5:db:5c:7a:6e:f0:
                    23:e2:d0:cb:aa:6d:02:26:48:f3:80:39:79:f7:ff:
                    fb:38:8b:d1:55:48:34:22:f6:82:6f:51:d4:5f:c2:
                    6b:50:7c:65:91:27:4b:dc:db:bb:7c:3b:9a:82:d3:
                    eb:a7:d8:6e:f2:e2:28:3b:03:05:f8:52:38:dd:16:
                    60:96:53:8f:71:5b:9e:e7:27:f0:41:4f:0f:4c:54:
                    9d:66:97:53:50:40:54:b2:af:cb:21:67:45:7e:82:
                    ac:27:c2:9d:66:97:bc:fd:4f:ff:80:e1:b9:14:3f:
                    86:13:bc:af:0a:66:39:46:a8:67:ef:9a:e9:a5:f1:
                    da:f2:ad:1a:69:60:95:db:32:9e:3b:9e:7e:e0:69:
                    ef:66:e4:de:3a:6e:ba:79:5c:52:6c:8c:8d:95:71:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FE:58:FE:D0:40:68:81:5F:B5:FB:F4:13:8F:44:04:C6:C8:AD:AF
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:f9:36:ae:ae:2d:81:79:c0:ea:2c:da:76:51:b0:f6:4c:
         c8:6c:98:df:72:60:c5:60:9d:d1:8f:70:aa:c9:18:1f:b1:17:
         43:ce:80:f5:a3:1f:56:b8:e1:72:71:d2:51:1a:21:42:e7:a0:
         39:c6:e1:32:72:02:c1:f0:f6:1c:b2:3c:2b:86:2c:15:e1:10:
         e0:ec:a4:0a:7f:6f:fa:4e:b0:8b:9f:1d:3e:c0:d5:7d:0e:7d:
         f0:0c:03:ac:79:c1:bb:16:78:1b:9d:e9:b0:0f:44:3c:02:27:
         52:fa:c9:a6:6a:70:07:bc:53:5f:fe:94:43:05:4a:79:a9:f6:
         f5:b4:56:fd:cb:18:4e:cc:0e:d0:3d:d2:37:0d:97:a9:52:a8:
         fc:d4:e7:e7:16:c0:a8:95:03:e8:94:90:69:78:03:ce:86:79:
         a1:77:59:e5:6b:df:74:a9:85:4d:00:23:65:45:2b:dc:41:08:
         bb:f7:43:4c:c1:0c:01:59:1d:b0:1d:93:64:9a:be:c8:6e:f4:
         b9:8b:17:5c:ce:96:f6:78:57:5e:9a:9e:22:a1:cf:e9:ea:81:
         4a:c9:84:c4:00:ab:0a:6b:ac:8e:b8:b9:ab:32:68:4a:25:9a:
         fa:ca:ca:c0:c7:97:25:27:f2:55:db:99:85:23:3f:4f:c7:ca:
         83:b8:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org