Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          QQQCG+2viH5XbTzqGyCetnJlhb3XU7r/U4PNPLX2GxM=
Subject key identifier:   4B:73:B0:BC:AB:D4:77:05:FF:7D:D1:6C:58:0D:3C:B0:8B:2C:F9:67
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5F2C509640CDBCBA68AFBE583A6E77E327989145
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        179.108.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2c:50:96:40:cd:bc:ba:68:af:be:58:3a:6e:77:e3:27:98:91:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject: CN=3082010A0282010100B1D1C53434BAAC2CAF8780781ECEE465A82291907D2B0A19BF0FE291778FF96A525EA7D0FC22D9DB62DE22157394554C0924FBF40F7EB07BA12AE274891EE7DF1B7A102D507C108309EAF4AE7D2D7DAA28891FD9BA8C958C005C8C6CE678521E2D952C4B802CA79DDD1F1DAE5A6FAB072475092AB67347A427AE87476D82E85D0C9F8A2EE53D64A4EB77AEDA5504DD5ECCCB8AD56DB396B2926FE99EB33DA172BA19E7234D53EDB77F57FEE49083E72ED8FE4EDDD6B092861026C4A363DF38F3300DCBE5BE2D3DA078843EF48BB169E628BADBFA87297D6B71382FF3E48E079C7ED5498BD12A051CA2771E52F34665DF51635AD0EE8AA3C2D5E22C127CFE2AE10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:c5:34:34:ba:ac:2c:af:87:80:78:1e:ce:
                    e4:65:a8:22:91:90:7d:2b:0a:19:bf:0f:e2:91:77:
                    8f:f9:6a:52:5e:a7:d0:fc:22:d9:db:62:de:22:15:
                    73:94:55:4c:09:24:fb:f4:0f:7e:b0:7b:a1:2a:e2:
                    74:89:1e:e7:df:1b:7a:10:2d:50:7c:10:83:09:ea:
                    f4:ae:7d:2d:7d:aa:28:89:1f:d9:ba:8c:95:8c:00:
                    5c:8c:6c:e6:78:52:1e:2d:95:2c:4b:80:2c:a7:9d:
                    dd:1f:1d:ae:5a:6f:ab:07:24:75:09:2a:b6:73:47:
                    a4:27:ae:87:47:6d:82:e8:5d:0c:9f:8a:2e:e5:3d:
                    64:a4:eb:77:ae:da:55:04:dd:5e:cc:cb:8a:d5:6d:
                    b3:96:b2:92:6f:e9:9e:b3:3d:a1:72:ba:19:e7:23:
                    4d:53:ed:b7:7f:57:fe:e4:90:83:e7:2e:d8:fe:4e:
                    dd:d6:b0:92:86:10:26:c4:a3:63:df:38:f3:30:0d:
                    cb:e5:be:2d:3d:a0:78:84:3e:f4:8b:b1:69:e6:28:
                    ba:db:fa:87:29:7d:6b:71:38:2f:f3:e4:8e:07:9c:
                    7e:d5:49:8b:d1:2a:05:1c:a2:77:1e:52:f3:46:65:
                    df:51:63:5a:d0:ee:8a:a3:c2:d5:e2:2c:12:7c:fe:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:B0:BC:AB:D4:77:05:FF:7D:D1:6C:58:0D:3C:B0:8B:2C:F9:67
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:20:67:fc:07:e7:27:86:3c:8f:84:7b:77:a6:8e:8e:c8:89:
         fc:9b:6e:57:ee:1a:5b:92:1d:88:5f:ff:43:a4:aa:11:50:71:
         70:0c:15:13:06:6b:7a:4f:55:5a:a3:f0:be:d7:7d:1a:39:6e:
         4d:62:24:cb:96:3b:29:04:40:fb:79:63:10:39:d4:7c:32:d1:
         43:6a:59:8d:b1:7e:ae:3b:11:7c:a6:a2:71:65:89:d4:70:1c:
         28:76:4c:c2:62:3c:56:bf:85:b7:27:1c:d9:cf:eb:c5:77:39:
         e8:9c:37:51:21:c9:80:6f:46:10:5c:d4:43:76:39:3e:c4:46:
         f9:13:9f:d6:0c:9e:18:39:c8:81:53:24:0b:a9:e3:77:e4:10:
         bb:de:8e:c5:79:ec:c7:33:b4:01:24:26:59:78:56:1e:87:a2:
         1c:62:96:8e:12:ad:cd:3c:62:d4:81:e7:4b:4c:b7:46:b6:cc:
         f2:4a:6f:eb:a7:11:b3:5c:90:0c:78:6f:7b:3b:9c:01:b3:c0:
         a9:8c:01:2c:a8:4f:93:e3:40:73:9c:3f:71:0d:b2:bf:ed:b1:
         54:ad:62:67:6f:d8:4e:ef:7f:79:94:50:72:85:2e:16:6e:37:
         a4:67:74:a4:52:21:6f:fc:67:d9:b2:43:7f:49:85:ca:b5:ac:
         0f:b1:ca:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org