Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          C2v4UBY7kAk4QifnsTOaLPc0rEm5+m7sI95cDZRF+bw=
Subject key identifier:   45:D6:50:94:84:0E:EB:FD:39:D6:13:57:40:9C:F1:52:72:81:99:0F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5A572CCBBE82AE83D84F782BC9F32028A30CEB30
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        179.108.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:57:2c:cb:be:82:ae:83:d8:4f:78:2b:c9:f3:20:28:a3:0c:eb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:23:82:50:0b:76:9f:ad:97:dc:6b:d5:aa:
                    2d:94:d2:a7:41:07:5b:bb:0b:7f:e2:18:38:25:3c:
                    fe:ae:51:3a:54:94:63:da:ad:60:b7:35:fb:50:f5:
                    38:07:4a:73:9f:d6:41:bd:52:a3:8f:a5:26:7a:db:
                    84:44:48:b2:4e:09:87:03:e4:71:25:fb:d8:f4:8f:
                    c9:ef:30:51:7c:c6:a3:ca:c9:6a:08:5f:5f:41:45:
                    59:3e:34:9c:1e:e3:bb:b8:cf:0d:ba:38:82:71:7c:
                    1b:f7:07:bc:a0:38:87:65:f5:cc:bd:a0:cf:f5:0d:
                    2a:ce:ba:ea:e4:11:7c:7f:d6:08:91:15:f7:23:6a:
                    0d:2c:a7:62:a5:ce:59:b7:3b:22:53:ce:9f:1f:b8:
                    36:51:a6:28:87:f9:8d:4f:d0:f5:78:3e:cb:4d:a3:
                    21:48:03:f8:4f:67:bb:db:a0:15:5f:e6:8e:da:18:
                    d8:c2:20:9e:bc:8e:84:45:ee:3d:f2:22:86:e7:66:
                    f3:6a:62:ce:c7:28:92:32:40:34:27:97:75:1b:4e:
                    f4:bd:76:2f:8c:90:fd:2d:36:c7:b4:95:58:d2:7f:
                    82:1f:ab:ea:71:1a:cf:7a:f6:70:ef:85:f1:e8:02:
                    0c:48:dd:60:1c:9d:2e:92:14:5c:76:fd:aa:73:f9:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D6:50:94:84:0E:EB:FD:39:D6:13:57:40:9C:F1:52:72:81:99:0F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:b5:05:0b:a4:7c:6e:14:68:d2:52:fa:48:cb:fc:a1:b0:
         72:fd:d5:f8:a5:57:c0:d6:7a:94:ab:ff:b1:25:88:34:26:09:
         3d:dd:0c:46:e6:52:16:10:d5:32:ba:f0:5b:ad:ed:67:d7:55:
         71:fb:b8:82:f1:f1:68:ea:94:d2:be:e1:f6:7e:d1:43:10:89:
         24:d9:82:d6:cd:65:1e:54:14:bf:31:38:df:dc:2c:e0:5b:51:
         e0:a6:86:7e:c6:7b:b6:b1:06:e7:98:cb:b1:71:be:12:59:07:
         da:7a:d2:d2:42:69:53:bf:c9:c0:33:8d:f0:28:4c:0c:46:18:
         5d:4a:30:5e:2c:cc:a2:03:7d:ff:5c:1b:e3:af:2d:4e:0d:6e:
         df:0b:1c:c6:23:21:3c:7a:1a:76:8b:a3:65:5e:e5:1d:d7:4d:
         cb:30:4b:3a:43:57:bb:41:5d:32:a2:7c:54:a6:fe:6d:de:46:
         d9:bb:96:e6:0f:36:df:e2:de:ff:94:31:44:df:12:8b:10:03:
         47:74:af:53:1d:63:94:0a:91:8b:4a:6b:22:a9:1c:69:ea:3e:
         0f:2c:34:49:6d:bd:e3:b4:84:92:70:a3:49:91:7e:bb:d6:4d:
         a5:df:fb:23:17:0e:e0:8c:30:a0:8f:53:19:a3:03:6e:16:5b:
         6f:b4:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org