Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          /i6axwOppkWj/bTfCXfi4ae/bsMKoTzkPA4FncA8+BY=
Subject key identifier:   2F:1C:16:A0:07:F3:A7:64:88:76:8F:72:F2:02:E7:29:C0:E9:09:E7
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       1962FC892B176D6921272A66E4B78E50E700A020
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:16 +0000
ROA not before:           Sat 16 Oct 2021 16:11:16 +0000
ROA not after:            Sat 15 Oct 2022 16:16:16 +0000
asID:                     262691
IP address blocks:        179.108.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:62:fc:89:2b:17:6d:69:21:27:2a:66:e4:b7:8e:50:e7:00:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:16 2021 GMT
            Not After : Oct 15 16:16:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:cc:3d:63:f4:ab:bc:9f:59:3c:7e:01:9d:
                    82:d4:ae:dc:45:b1:5a:c8:21:c8:bf:91:c3:1a:57:
                    77:23:e4:c5:a6:c5:a5:f8:3a:7c:d1:0b:94:6a:5f:
                    1e:79:9a:ee:6c:9c:40:1d:7b:25:73:96:d5:2d:99:
                    2c:3a:15:62:c7:5c:a8:ec:c2:64:52:92:19:c0:96:
                    af:1e:c4:50:1a:d6:18:54:35:ad:de:ba:fe:b0:45:
                    db:cb:8e:46:30:a5:0e:fb:02:b7:e4:f4:6a:7c:46:
                    32:32:99:32:91:67:81:e0:a6:95:89:cc:36:36:c4:
                    8b:5c:fe:42:e7:49:82:33:85:43:6c:c5:bb:ef:c0:
                    7c:8e:51:54:95:70:25:e1:a6:7b:6f:5f:e8:81:70:
                    3a:f0:9b:ac:fc:74:9b:0d:69:25:60:6f:27:83:9e:
                    cf:e0:47:a1:65:8c:51:d1:14:cd:d2:4a:01:38:fb:
                    da:fd:54:d5:32:00:1f:4b:68:55:90:cc:d1:2c:4a:
                    74:25:13:db:c7:98:12:a8:5b:c0:6b:e5:c7:00:1a:
                    9e:a9:58:9b:82:be:52:03:69:9a:7e:72:a5:d2:26:
                    99:3d:c9:36:48:0f:47:14:de:3d:50:1d:9b:c4:b7:
                    3c:d2:14:fc:92:fb:09:87:0f:d1:e7:3d:ce:75:93:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:16:A0:07:F3:A7:64:88:76:8F:72:F2:02:E7:29:C0:E9:09:E7
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:39:97:12:83:31:81:93:27:4e:9a:d4:8a:9c:aa:9b:45:
         6e:03:7b:8f:c7:45:0b:10:77:24:a9:f8:16:46:8c:34:97:f1:
         fe:99:84:b6:be:b8:33:da:10:c0:fa:96:bb:52:3c:19:a7:93:
         0f:20:be:d8:27:1d:db:60:e9:86:3a:85:57:dd:6f:4a:3e:16:
         23:6e:e4:a6:69:3f:d9:77:44:6c:32:e7:94:bc:0a:e7:67:e4:
         4b:75:e0:00:d2:5a:a8:f1:31:36:8f:3d:91:f9:d9:c7:50:ab:
         8d:db:b9:2c:bc:ec:8c:24:0c:c6:1a:f9:d5:44:87:35:70:bb:
         b7:76:1a:9b:49:1b:6b:91:9a:66:91:b3:b7:2f:6f:37:16:23:
         89:ee:bd:9d:3a:55:96:5b:3b:1b:fd:0d:5a:d4:e3:b2:5b:d4:
         dc:ab:36:f0:78:42:16:56:4e:f3:ab:f5:a2:c1:10:eb:8f:99:
         de:91:17:10:48:0c:61:3c:5d:b1:f8:dc:9c:67:df:81:db:31:
         be:d1:dd:d1:0b:c1:dc:b6:94:57:eb:d5:19:e1:19:c0:70:a1:
         62:b8:3e:25:6c:c4:90:8c:00:86:11:0a:5e:cc:11:cb:a7:24:
         d1:b6:d6:a8:23:a3:45:3e:9c:c7:86:7a:b8:72:f3:0d:22:2a:
         73:41:2d:4d
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUGWL8iSsXbWkhJypm5LeOUOcAoCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTZaFw0yMjEwMTUxNjE2MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUJGOENDM0Q2M0Y0QUJCQzlG
NTkzQzdFMDE5RDgyRDRBRURDNDVCMTVBQzgyMUM4QkY5MUMzMUE1Nzc3MjNFNEM1
QTZDNUE1RjgzQTdDRDEwQjk0NkE1RjFFNzk5QUVFNkM5QzQwMUQ3QjI1NzM5NkQ1
MkQ5OTJDM0ExNTYyQzc1Q0E4RUNDMjY0NTI5MjE5QzA5NkFGMUVDNDUwMUFENjE4
NTQzNUFEREVCQUZFQjA0NURCQ0I4RTQ2MzBBNTBFRkIwMkI3RTRGNDZBN0M0NjMy
MzI5OTMyOTE2NzgxRTBBNjk1ODlDQzM2MzZDNDhCNUNGRTQyRTc0OTgyMzM4NTQz
NkNDNUJCRUZDMDdDOEU1MTU0OTU3MDI1RTFBNjdCNkY1RkU4ODE3MDNBRjA5QkFD
RkM3NDlCMEQ2OTI1NjA2RjI3ODM5RUNGRTA0N0ExNjU4QzUxRDExNENERDI0QTAx
MzhGQkRBRkQ1NEQ1MzIwMDFGNEI2ODU1OTBDQ0QxMkM0QTc0MjUxM0RCQzc5ODEy
QTg1QkMwNkJFNUM3MDAxQTlFQTk1ODlCODJCRTUyMDM2OTlBN0U3MkE1RDIyNjk5
M0RDOTM2NDgwRjQ3MTRERTNENTAxRDlCQzRCNzNDRDIxNEZDOTJGQjA5ODcwRkQx
RTczRENFNzU5Mzc4MEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm/jMPWP0q7yfWTx+AZ2C1K7cRbFayCHIv5HDGld3I+TFpsWl+Dp8
0QuUal8eeZrubJxAHXslc5bVLZksOhVix1yo7MJkUpIZwJavHsRQGtYYVDWt3rr+
sEXby45GMKUO+wK35PRqfEYyMpkykWeB4KaVicw2NsSLXP5C50mCM4VDbMW778B8
jlFUlXAl4aZ7b1/ogXA68Jus/HSbDWklYG8ng57P4EehZYxR0RTN0koBOPva/VTV
MgAfS2hVkMzRLEp0JRPbx5gSqFvAa+XHABqeqVibgr5SA2mafnKl0iaZPck2SA9H
FN49UB2bxLc80hT8kvsJhw/R5z3OdZN4DwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FC8cFqAH86dkiHaPcvIC5ynA6QnnMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKzbNAwDQYJKoZIhvcNAQELBQADggEBAAg6OZcSgzGBkydOmtSKnKqbRW4De4/H
RQsQdySp+BZGjDSX8f6ZhLa+uDPaEMD6lrtSPBmnkw8gvtgnHdtg6YY6hVfdb0o+
FiNu5KZpP9l3RGwy55S8Cudn5Et14ADSWqjxMTaPPZH52cdQq43buSy87IwkDMYa
+dVEhzVwu7d2GptJG2uRmmaRs7cvbzcWI4nuvZ06VZZbOxv9DVrU47Jb1NyrNvB4
QhZWTvOr9aLBEOuPmd6RFxBIDGE8XbH43Jxn34HbMb7R3dELwdy2lFfr1RnhGcBw
oWK4PiVsxJCMAIYRCl7MEcunJNG21qgjo0U+nMeGerhy8w0iKnNBLU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org