Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          TckYNMpRInd60OsxV6GXm3GlUDgz7B7QhddaWkVtEXA=
Subject key identifier:   43:6C:A7:C7:CC:47:D1:89:80:A6:80:C1:5E:7D:CF:0E:19:0B:D3:C4
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       179C7974FBA2C35E5AB9C9605B77564F4A2EDDD4
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        179.108.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:79:74:fb:a2:c3:5e:5a:b9:c9:60:5b:77:56:4f:4a:2e:dd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:ec:f3:43:56:43:51:38:ca:88:ed:69:74:
                    db:ca:a8:d7:25:8e:a2:a4:73:33:22:f8:6f:50:2f:
                    fc:e0:9f:47:a3:0c:20:66:18:e7:42:f3:fd:f9:0f:
                    a4:0a:dc:6e:e7:1e:0e:fe:93:73:ef:a1:f3:d6:7c:
                    b9:14:de:d0:e1:ca:3b:10:84:d9:fb:e8:25:ef:5e:
                    ce:b0:27:1d:e8:c3:29:4a:3e:d1:8b:d0:2a:9a:c8:
                    b2:a7:d3:02:b9:60:52:0d:f2:e0:ea:17:de:12:a2:
                    00:cd:d3:9e:14:e6:ba:c5:63:5e:56:40:9b:30:ab:
                    b3:4b:ef:00:9d:0a:12:da:d8:0f:da:fb:99:4c:ef:
                    5c:f4:44:c5:e9:f5:f0:7f:82:93:07:da:1e:b1:4d:
                    82:0c:e9:34:d2:bc:fb:61:2c:57:59:46:70:db:d7:
                    2b:88:79:2c:3c:37:cf:26:8f:d3:57:e1:d0:04:26:
                    52:f8:48:42:8c:5e:7e:96:3f:03:c6:0d:cc:67:1f:
                    56:d1:3b:a6:6b:d3:b6:59:5a:aa:0f:c7:8a:1c:56:
                    06:f8:a1:fb:55:dd:f7:e8:da:43:d9:7b:99:9c:b8:
                    3c:45:6e:76:92:c8:99:6b:2e:b0:2c:87:e3:ab:3a:
                    a7:9f:c1:aa:b3:3d:ca:b1:9a:03:03:96:d3:ec:cb:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:A7:C7:CC:47:D1:89:80:A6:80:C1:5E:7D:CF:0E:19:0B:D3:C4
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:2c:4d:2d:4f:2b:93:cb:6b:88:e7:b5:dc:93:f3:e2:5b:
         61:f7:2c:8c:ea:b5:76:90:d1:8a:b7:3f:3d:80:8d:38:d5:fb:
         99:b4:b6:e1:a5:90:f9:69:db:19:36:04:6c:1d:ef:d8:d8:52:
         e9:c8:1e:2a:06:d4:76:a3:3b:c4:4f:ec:95:69:23:01:25:84:
         b8:aa:1a:28:93:d6:92:f4:41:99:d2:3e:71:dc:14:dd:13:f6:
         94:60:d3:7b:87:6e:d9:f4:9e:2d:7e:6a:2e:1f:f0:04:81:c6:
         34:d6:9d:7b:97:3e:58:bd:20:37:31:86:d1:80:cd:de:ae:50:
         da:09:ba:62:08:bc:14:15:4f:e9:85:f9:82:fe:07:bb:a4:a5:
         0a:9f:01:a1:56:ee:0a:d3:2b:eb:89:fe:05:38:18:41:d2:d8:
         14:04:3e:97:c0:a7:54:db:01:e2:a7:cf:e2:44:2f:3f:02:39:
         a4:83:88:a6:d2:43:2b:81:8c:77:44:b9:3b:1e:41:c3:92:89:
         0b:76:c2:fe:77:13:ca:d2:e7:d7:96:20:84:fe:56:f4:2e:e8:
         08:2f:ce:9b:b0:38:d4:39:14:04:23:97:42:ac:9e:9c:61:39:
         1e:92:e3:cb:6b:bd:75:18:36:4e:dc:b2:11:11:64:a9:f6:e1:
         5c:21:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org