Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          2Ws1qOTntl5SjOwtxeq2zf+9Uo+xzwbwi9XdQLO3Skk=
Subject key identifier:   35:1B:D8:32:A1:E4:83:9D:42:EA:92:C6:C5:23:30:F5:D2:D8:CE:32
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       356D840C1A518516F47457219DC46BA7BD23FE31
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        179.108.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6d:84:0c:1a:51:85:16:f4:74:57:21:9d:c4:6b:a7:bd:23:fe:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:28:0f:cc:aa:08:21:ec:b2:a1:9c:5c:71:
                    38:9f:40:16:27:ec:dd:45:f1:8b:e5:8c:fa:d5:22:
                    59:1f:93:e4:d4:8d:c0:f2:9f:11:a7:90:76:3c:74:
                    da:b2:ed:c1:53:2b:79:d6:55:df:62:b7:af:2e:d5:
                    e1:88:d2:4c:1e:f5:13:da:e3:3a:65:22:f2:9d:e1:
                    68:fe:48:02:05:dc:ef:b4:ee:e9:7d:a3:33:87:8b:
                    90:ee:51:2b:32:e4:e5:87:58:a8:b5:15:22:a3:86:
                    70:85:e7:51:f3:d3:b3:f4:fd:d0:fc:34:00:41:fa:
                    f5:b2:a8:36:ee:33:f6:7a:19:6c:d3:5d:81:96:c2:
                    a9:aa:74:c5:18:cd:77:a2:fb:0b:48:b3:ab:de:d3:
                    f1:d4:ba:a2:52:50:91:a9:c7:79:ee:35:4d:12:f8:
                    df:60:0b:16:97:ff:8b:3f:34:a8:0f:7f:a2:42:36:
                    11:26:25:ad:4d:67:67:b8:42:cf:27:6c:f4:c3:8b:
                    95:25:fc:6f:8d:96:59:9e:7f:d7:c2:ef:48:54:a3:
                    29:9a:72:65:aa:87:dd:b1:ac:d1:65:20:52:64:e5:
                    91:ea:1a:80:8f:ab:fe:1b:22:7e:96:47:54:bb:98:
                    a9:76:df:02:eb:3d:db:49:19:07:e6:c7:e2:ea:01:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1B:D8:32:A1:E4:83:9D:42:EA:92:C6:C5:23:30:F5:D2:D8:CE:32
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:e4:47:28:5b:c0:be:31:ff:93:c2:62:8c:75:52:19:8f:
         2f:ae:9f:fd:fb:1f:99:d9:4a:6e:7d:77:88:89:fe:41:3c:76:
         80:a1:ce:7c:30:ab:d3:bf:5d:e2:89:85:b1:6a:23:9d:3a:ce:
         a4:18:07:ae:64:9f:9c:b7:5e:66:68:08:40:e4:ec:1a:16:10:
         e3:e0:4f:35:8c:7d:79:8e:38:37:95:9f:d0:8f:b9:f2:5f:b9:
         90:91:36:d3:e6:c3:8c:68:07:81:2f:ca:73:68:fb:25:67:39:
         79:d8:06:5b:19:e6:8b:f3:20:b3:4e:09:b7:6f:d7:22:0c:43:
         73:ef:f2:f5:7e:65:eb:de:bb:ec:77:ee:d2:e7:6c:31:f9:34:
         d5:5f:eb:e2:92:07:f1:58:05:cb:89:6f:fd:8a:d5:bb:b6:6e:
         5b:9a:59:71:5c:c9:5e:1b:6a:6d:4d:e7:5b:7d:44:c4:56:2c:
         d1:92:13:b9:c3:ac:9d:d1:d5:9d:0e:a6:a3:a7:e6:89:8f:15:
         aa:1e:3c:8d:0c:79:27:0e:bf:46:b8:a7:3c:a7:e1:42:dc:14:
         41:99:a0:67:72:22:0b:4a:e0:f9:47:24:36:03:e0:a4:e8:39:
         5b:1d:87:17:4a:40:cf:e3:73:04:e6:1c:76:83:ee:d6:93:de:
         5a:a0:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org