Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          9kAXAIqUXOYDM0oKvbtuR7dRLOkw3Oua4NUhzzV9QlY=
Subject key identifier:   51:5C:93:B8:F9:72:3B:FD:7A:98:AC:50:13:88:AF:C2:B3:16:88:52
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       29EA188067139EC90E5A2BA3F1017D9735611520
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        179.108.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ea:18:80:67:13:9e:c9:0e:5a:2b:a3:f1:01:7d:97:35:61:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject: CN=3082010A0282010100C32C78F96EFD9B0E35196D74A26EE106F18AA38331BE9B6AC121E13983290BE4B4AF22BD3232B767C8D8C2AF506C261BA12A4408A414CDC37BA7745E587B4C98A13F9B906907CE5DA70A9E402028FCE593068F75C481BAC2B42EA3777EEEA88AC7D31A5572073176DFFB99D954250EB4CCCE027400067B0BD7F79306FE508ABF738D39E099DEB031E6535D2BB2909EECF6250848453D2A2C793CD1003B51A36CE58F5343DB87C70BB991EFFB7E21AA0D035B6CF76EEEC9E8946CCD119933B9AFCF5859D8F3EA1888EC15DF6C50A2DA86A03556B15D637CDEFE569F2F2AE5E02848D054DAE65BE07DD9F08B31290427537C341929B4B7F94B6682FE5C91375E710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:78:f9:6e:fd:9b:0e:35:19:6d:74:a2:6e:
                    e1:06:f1:8a:a3:83:31:be:9b:6a:c1:21:e1:39:83:
                    29:0b:e4:b4:af:22:bd:32:32:b7:67:c8:d8:c2:af:
                    50:6c:26:1b:a1:2a:44:08:a4:14:cd:c3:7b:a7:74:
                    5e:58:7b:4c:98:a1:3f:9b:90:69:07:ce:5d:a7:0a:
                    9e:40:20:28:fc:e5:93:06:8f:75:c4:81:ba:c2:b4:
                    2e:a3:77:7e:ee:a8:8a:c7:d3:1a:55:72:07:31:76:
                    df:fb:99:d9:54:25:0e:b4:cc:ce:02:74:00:06:7b:
                    0b:d7:f7:93:06:fe:50:8a:bf:73:8d:39:e0:99:de:
                    b0:31:e6:53:5d:2b:b2:90:9e:ec:f6:25:08:48:45:
                    3d:2a:2c:79:3c:d1:00:3b:51:a3:6c:e5:8f:53:43:
                    db:87:c7:0b:b9:91:ef:fb:7e:21:aa:0d:03:5b:6c:
                    f7:6e:ee:c9:e8:94:6c:cd:11:99:33:b9:af:cf:58:
                    59:d8:f3:ea:18:88:ec:15:df:6c:50:a2:da:86:a0:
                    35:56:b1:5d:63:7c:de:fe:56:9f:2f:2a:e5:e0:28:
                    48:d0:54:da:e6:5b:e0:7d:d9:f0:8b:31:29:04:27:
                    53:7c:34:19:29:b4:b7:f9:4b:66:82:fe:5c:91:37:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:93:B8:F9:72:3B:FD:7A:98:AC:50:13:88:AF:C2:B3:16:88:52
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:5f:d2:65:f1:b6:a1:73:ad:05:b3:b6:e3:21:7d:c3:bd:
         f2:05:59:5a:eb:14:a3:42:ed:c3:12:32:73:75:e2:29:39:96:
         1b:3a:ca:ee:be:25:d6:08:f9:b3:74:02:14:d9:4d:e4:00:e9:
         8c:ae:5a:dc:ee:b3:84:b5:e6:be:e8:42:6d:20:eb:33:5f:ab:
         63:37:6e:90:2b:4f:45:0b:8d:e0:7f:7f:8e:48:cd:b0:58:9b:
         34:ac:97:d9:31:ed:af:63:74:09:91:83:e7:98:c2:20:50:3d:
         ff:f2:47:a2:dc:eb:55:fb:6e:6e:38:46:15:ad:ca:46:d1:d2:
         7b:be:5b:3a:58:c8:0b:81:b6:46:fc:9f:73:06:c8:f6:73:d5:
         2e:0f:32:6c:4f:ae:99:58:27:ca:27:29:6f:8b:4e:64:80:01:
         bb:d6:97:78:56:f2:34:0f:17:ef:f3:1f:84:04:71:32:07:11:
         09:be:0a:a1:32:86:9e:57:ba:73:48:aa:0e:b1:d8:ac:c3:3b:
         27:64:fb:79:9d:1f:95:25:8b:0d:ac:95:82:f9:4c:d0:05:aa:
         05:f0:8c:e5:0a:fa:10:d4:6e:62:42:81:42:7a:1d:7d:f2:10:
         1d:f8:dc:8b:21:56:e1:0c:06:4d:ba:05:3c:53:94:c3:f7:b1:
         bc:09:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org