Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          VotdU9Bjsuc1CaQyNDKGZ0XdwsitHbFDCFgZb6jV3Cc=
Subject key identifier:   8F:4D:4C:45:A2:C9:69:1B:D6:41:06:EF:C3:5E:36:F0:B5:2E:3E:59
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4356E6CCBA8C4069A2B22E8DA1AF7B74E214BA7C
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        179.108.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:56:e6:cc:ba:8c:40:69:a2:b2:2e:8d:a1:af:7b:74:e2:14:ba:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:08:f1:cc:48:1a:91:96:56:97:f6:64:eb:
                    6e:18:b9:15:7e:0e:15:a1:2d:36:a3:60:c2:02:9f:
                    52:13:1d:3d:ef:8a:59:da:c0:63:3b:23:5f:02:f9:
                    4b:98:d4:a0:e1:6a:c1:82:4c:26:c8:7e:ac:9b:c4:
                    eb:99:ef:57:7c:4c:9f:7a:61:34:30:a8:fe:10:0f:
                    c4:8b:f8:1f:5d:b8:d1:a1:4c:0a:8a:c1:d5:74:ce:
                    ca:6e:8a:25:ab:c3:0a:9e:62:be:9c:1f:fe:d4:32:
                    b2:65:18:38:b8:1f:eb:c0:87:c5:8e:38:bc:d3:d8:
                    8f:4d:e3:ae:d3:0c:cc:c7:81:e4:b9:0b:8f:09:58:
                    ff:83:42:d2:16:1b:53:8d:3a:e7:6b:b0:c1:42:43:
                    ac:87:df:68:ed:07:67:43:74:e3:9a:2d:c4:95:78:
                    c3:b2:19:1e:34:4f:e4:5f:c3:68:ec:b2:bc:1e:89:
                    b2:71:e7:aa:66:d9:70:c5:9a:42:1f:c1:df:8f:c5:
                    e3:1e:d9:65:62:a1:4d:19:eb:6e:94:cf:3f:68:d5:
                    5b:18:12:f8:d7:89:0d:d5:5a:2d:6d:07:59:3d:9a:
                    f1:0d:1d:cd:54:b8:a9:e9:4c:aa:df:78:24:4f:14:
                    e2:a9:76:51:e3:f2:16:e9:68:61:31:f0:ce:cb:be:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:4C:45:A2:C9:69:1B:D6:41:06:EF:C3:5E:36:F0:B5:2E:3E:59
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:5c:c5:9e:fd:0c:0b:b6:2a:33:f1:4f:7d:a5:9e:6a:99:
         c3:b5:b7:6d:b6:ec:f0:bd:3e:be:08:7a:e5:a4:3f:e2:db:02:
         79:ee:3a:e8:fb:dd:7d:ad:cf:8e:23:6b:a7:54:d3:83:ec:2b:
         fd:d8:38:19:aa:28:99:0d:4b:57:f6:6f:a8:b1:23:e4:85:75:
         07:b7:2e:fe:c5:ab:00:4a:94:02:9d:a4:ca:8f:20:07:70:53:
         49:e3:b3:7e:23:d7:13:3c:6b:b6:cc:80:49:ea:cd:c5:be:3c:
         b5:d2:03:af:6f:3d:45:1d:07:66:fe:05:11:9b:bc:87:80:71:
         a3:fa:e5:c7:45:78:28:e4:02:86:7d:53:d6:a0:6b:9e:9b:71:
         e6:59:40:d0:9d:b9:6b:86:8f:93:5b:fa:32:a7:9f:64:31:e8:
         6c:d3:c8:93:ec:d5:b1:b0:1e:b9:94:bb:54:43:b2:11:39:98:
         6b:09:fc:2b:0f:e0:8b:78:57:fd:ec:90:00:09:f9:1d:26:63:
         fb:8f:de:c9:26:92:05:79:8a:52:d4:81:90:a3:d4:e8:94:a4:
         23:6f:ab:8c:79:a1:e5:d3:d2:9b:45:39:9a:64:a3:f3:64:c5:
         bc:31:99:8b:76:f4:8e:a0:87:48:55:00:30:8c:97:8a:10:5a:
         28:2c:a4:71
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUQ1bmzLqMQGmisi6Noa97dOIUunwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTBaFw0yMjEwMTUxNjE2MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg5MDA4RjFDQzQ4MUE5MTk2
NTY5N0Y2NjRFQjZFMThCOTE1N0UwRTE1QTEyRDM2QTM2MEMyMDI5RjUyMTMxRDNE
RUY4QTU5REFDMDYzM0IyMzVGMDJGOTRCOThENEEwRTE2QUMxODI0QzI2Qzg3RUFD
OUJDNEVCOTlFRjU3N0M0QzlGN0E2MTM0MzBBOEZFMTAwRkM0OEJGODFGNURCOEQx
QTE0QzBBOEFDMUQ1NzRDRUNBNkU4QTI1QUJDMzBBOUU2MkJFOUMxRkZFRDQzMkIy
NjUxODM4QjgxRkVCQzA4N0M1OEUzOEJDRDNEODhGNERFM0FFRDMwQ0NDQzc4MUU0
QjkwQjhGMDk1OEZGODM0MkQyMTYxQjUzOEQzQUU3NkJCMEMxNDI0M0FDODdERjY4
RUQwNzY3NDM3NEUzOUEyREM0OTU3OEMzQjIxOTFFMzQ0RkU0NUZDMzY4RUNCMkJD
MUU4OUIyNzFFN0FBNjZEOTcwQzU5QTQyMUZDMURGOEZDNUUzMUVEOTY1NjJBMTRE
MTlFQjZFOTRDRjNGNjhENTVCMTgxMkY4RDc4OTBERDU1QTJENkQwNzU5M0Q5QUYx
MEQxRENENTRCOEE5RTk0Q0FBREY3ODI0NEYxNEUyQTk3NjUxRTNGMjE2RTk2ODYx
MzFGMENFQ0JCRUM4QTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyJAI8cxIGpGWVpf2ZOtuGLkVfg4VoS02o2DCAp9SEx0974pZ2sBj
OyNfAvlLmNSg4WrBgkwmyH6sm8Trme9XfEyfemE0MKj+EA/Ei/gfXbjRoUwKisHV
dM7Kboolq8MKnmK+nB/+1DKyZRg4uB/rwIfFjji809iPTeOu0wzMx4HkuQuPCVj/
g0LSFhtTjTrna7DBQkOsh99o7QdnQ3Tjmi3ElXjDshkeNE/kX8No7LK8Homyceeq
ZtlwxZpCH8Hfj8XjHtllYqFNGetulM8/aNVbGBL414kN1VotbQdZPZrxDR3NVLip
6Uyq33gkTxTiqXZR4/IW6WhhMfDOy77IowIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FI9NTEWiyWkb1kEG78NeNvC1Lj5ZMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKzbMwwDQYJKoZIhvcNAQELBQADggEBAEp5XMWe/QwLtioz8U99pZ5qmcO1t222
7PC9Pr4IeuWkP+LbAnnuOuj73X2tz44ja6dU04PsK/3YOBmqKJkNS1f2b6ixI+SF
dQe3Lv7FqwBKlAKdpMqPIAdwU0njs34j1xM8a7bMgEnqzcW+PLXSA69vPUUdB2b+
BRGbvIeAcaP65cdFeCjkAoZ9U9aga56bceZZQNCduWuGj5Nb+jKnn2Qx6GzTyJPs
1bGwHrmUu1RDshE5mGsJ/CsP4It4V/3skAAJ+R0mY/uP3skmkgV5ilLUgZCj1OiU
pCNvq4x5oeXT0ptFOZpko/NkxbwxmYt29I6gh0hVADCMl4oQWigspHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org