Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          ahUPXE/zBn7RY3dKO9iD1Xxq9Y2vuj7bRNkvoO90jwY=
Subject key identifier:   00:13:DA:58:E8:B8:48:09:8D:2E:E8:CC:41:5A:C3:CB:6B:16:4F:77
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7A11B8AAABB27E5090CBD301DCC25977363830C6
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        179.108.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:b8:aa:ab:b2:7e:50:90:cb:d3:01:dc:c2:59:77:36:38:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:35:9f:f2:b2:ff:b8:c5:ef:b8:82:f7:4d:
                    97:03:fa:68:da:ba:7f:a7:d1:b7:9e:6e:0b:f8:e4:
                    ae:40:1f:14:51:b5:91:88:ca:9d:cc:0c:14:25:ce:
                    bf:1d:6c:69:78:42:1c:b0:3c:61:da:1e:cb:56:5f:
                    c5:35:6a:50:54:a6:e3:4e:82:c2:29:02:de:12:39:
                    06:9b:2c:6c:91:d0:3d:be:b3:3b:b3:5a:73:93:65:
                    04:23:f2:89:fc:09:96:82:8a:78:e4:f2:85:65:2d:
                    1d:df:b0:56:9b:55:0b:5e:5b:c6:8b:b0:77:bb:be:
                    7a:a3:3d:65:b8:4f:3b:6b:f4:73:29:19:55:98:6a:
                    02:29:fc:c4:22:41:61:17:fb:f0:4a:55:de:1e:b5:
                    6c:dd:c1:cd:5d:55:35:e7:a2:0a:ef:26:8c:a4:32:
                    ea:01:4b:6a:23:d9:35:c1:0d:66:44:6d:a0:a2:12:
                    f3:91:0f:fa:0c:fd:c5:38:f8:aa:18:d8:9a:2d:01:
                    fb:d6:77:c1:f4:9e:cb:d0:65:4e:7f:80:c1:16:dc:
                    61:91:e8:e8:c6:cd:d1:3d:40:55:4d:06:11:29:db:
                    72:99:89:18:30:77:bd:42:7c:f5:1b:1f:a1:cd:e7:
                    fa:cb:f7:e7:af:ec:39:03:cf:49:3a:17:fc:cb:b4:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:DA:58:E8:B8:48:09:8D:2E:E8:CC:41:5A:C3:CB:6B:16:4F:77
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:b3:ff:22:02:a1:ea:a0:60:e4:b7:5f:af:bc:3e:2f:50:
         8a:e5:f1:c4:96:88:bd:80:52:3e:f6:a3:af:1f:47:a2:e8:cd:
         2a:9b:01:81:a2:0f:ad:49:54:0c:39:12:3b:41:b5:f3:1d:02:
         96:d8:e7:a3:11:fe:24:2c:e4:03:4a:d7:e0:0f:bd:2d:53:c9:
         aa:4f:36:1f:65:7c:77:c3:ea:b3:d0:dc:5b:47:52:81:b9:e2:
         4b:43:33:07:59:fc:19:77:80:c9:72:5f:fb:1c:73:e2:8c:0e:
         c0:7e:58:08:cc:58:a3:6c:e3:05:a2:90:eb:94:e7:0b:b8:dd:
         05:0c:b9:b1:49:0f:d2:5c:74:af:60:f9:12:08:6d:14:f2:1b:
         bd:3b:de:ab:6e:ba:7d:55:c1:08:5a:f9:44:7c:da:ea:1f:21:
         0e:ce:69:94:a6:72:e4:e5:8e:35:16:be:14:84:1a:23:74:b9:
         79:ce:53:54:d5:db:06:42:31:00:21:b1:8a:d9:cb:2e:80:fb:
         4a:15:0d:40:5c:cd:9f:7a:75:53:2e:11:c4:a7:7f:92:77:a6:
         9e:ae:df:92:57:b8:ce:49:e5:93:a8:33:29:a3:94:89:a0:6e:
         ee:b5:67:30:36:a6:cb:61:c7:18:b8:ac:90:5d:e2:bd:08:90:
         a3:a9:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org