Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          nmhbqv1wFnM5o8Y+1DOT4pxiG/NW+fS4QwfXVl1FH7U=
Subject key identifier:   8B:AA:72:90:30:B2:DA:3C:D2:74:14:AC:4E:51:4D:E2:03:C3:1A:79
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       65E5E985FA09726B048E4AE3C9A0ACD60BACDD8F
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        179.108.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e5:e9:85:fa:09:72:6b:04:8e:4a:e3:c9:a0:ac:d6:0b:ac:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject: CN=3082010A0282010100D8956D1F6D47C4515BF15F9D912520BC31D4D53A31C4A47C5C386235F5A5CFEFBEE9E0D642B2E00E849BCEEFDC6B06FC93D1DAF067469D22E826AE0B359337B16A7342C33F21C70A6EE998FA2D9F9DE88D6A2742C260DD678D2866AC8DD4E19DE9864320BE906E7232D0EB9CB811B676D31072402F0FF716B0801D1EAAA6969063F961B9AC8B956C5FAD727DE10F03471AB6F647466403FD939D0DE5F7C18F86232CE17863E8C8E1103D4DEED68C9FB24886C664BF09C4B456D2C54861F020EE890DADCE793CECAD4AB6D7307025D644DBAB8A165696507C58D53AFDFE211635F7A1E60D888779AB86C44F5A235DDC0B0F0EFE293AA9AA699090755EEDAD92EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:6d:1f:6d:47:c4:51:5b:f1:5f:9d:91:25:
                    20:bc:31:d4:d5:3a:31:c4:a4:7c:5c:38:62:35:f5:
                    a5:cf:ef:be:e9:e0:d6:42:b2:e0:0e:84:9b:ce:ef:
                    dc:6b:06:fc:93:d1:da:f0:67:46:9d:22:e8:26:ae:
                    0b:35:93:37:b1:6a:73:42:c3:3f:21:c7:0a:6e:e9:
                    98:fa:2d:9f:9d:e8:8d:6a:27:42:c2:60:dd:67:8d:
                    28:66:ac:8d:d4:e1:9d:e9:86:43:20:be:90:6e:72:
                    32:d0:eb:9c:b8:11:b6:76:d3:10:72:40:2f:0f:f7:
                    16:b0:80:1d:1e:aa:a6:96:90:63:f9:61:b9:ac:8b:
                    95:6c:5f:ad:72:7d:e1:0f:03:47:1a:b6:f6:47:46:
                    64:03:fd:93:9d:0d:e5:f7:c1:8f:86:23:2c:e1:78:
                    63:e8:c8:e1:10:3d:4d:ee:d6:8c:9f:b2:48:86:c6:
                    64:bf:09:c4:b4:56:d2:c5:48:61:f0:20:ee:89:0d:
                    ad:ce:79:3c:ec:ad:4a:b6:d7:30:70:25:d6:44:db:
                    ab:8a:16:56:96:50:7c:58:d5:3a:fd:fe:21:16:35:
                    f7:a1:e6:0d:88:87:79:ab:86:c4:4f:5a:23:5d:dc:
                    0b:0f:0e:fe:29:3a:a9:aa:69:90:90:75:5e:ed:ad:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:72:90:30:B2:DA:3C:D2:74:14:AC:4E:51:4D:E2:03:C3:1A:79
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:8c:7f:3d:5e:9d:a8:e9:2d:50:4c:97:99:e7:7f:52:17:
         79:2e:61:a1:40:d1:b4:96:4b:a7:5d:c0:8c:a3:ad:a7:41:af:
         3e:05:af:bb:2e:3b:21:91:26:9d:39:8e:9b:13:ed:63:2f:06:
         54:2c:6f:6f:4f:bc:a4:95:5a:43:43:a8:d3:aa:df:65:2c:63:
         0d:fe:27:6a:30:f6:6c:41:a5:2e:5f:f2:fd:92:18:bc:ba:aa:
         fe:50:51:ff:61:5c:10:30:cf:5e:ce:41:e4:ea:d5:18:4e:8c:
         f7:08:ff:12:3f:38:6e:57:89:f2:19:8c:6c:46:bb:b8:43:a9:
         38:6d:ac:52:05:dd:49:9b:36:ed:1e:8b:0b:1d:99:0e:a4:9c:
         a6:bd:fc:48:f0:16:35:e8:07:46:a8:8a:48:dc:94:0c:4b:33:
         d6:ec:6e:92:fb:ee:ad:fc:6a:12:53:a6:ba:a9:0b:c6:5f:70:
         02:02:14:a6:ce:c5:1f:1e:3a:d4:0d:02:b9:6a:3a:26:2d:d6:
         d7:de:00:c0:e5:7f:a2:17:05:ee:2d:36:de:d5:20:19:29:f5:
         91:99:a8:57:99:ae:60:3e:d2:8f:40:ef:e9:e1:ab:21:e9:1e:
         af:d7:06:b7:b5:ce:77:95:67:71:ca:71:ff:ea:b1:10:1a:4e:
         df:33:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org