Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          o7ADS7z6tpPAYGaMVNtWWyY15LbQ+T0GxaDsnLuqRdk=
Subject key identifier:   AC:26:0D:05:F8:6C:C8:F3:D3:69:DB:A0:BD:12:1E:C0:7A:CB:F5:42
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5F6948308A12DC1BB7FCF02D8A0C10A5A7F16CD2
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:08 +0000
ROA not before:           Sat 16 Oct 2021 16:11:08 +0000
ROA not after:            Sat 15 Oct 2022 16:16:08 +0000
asID:                     262691
IP address blocks:        179.108.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:69:48:30:8a:12:dc:1b:b7:fc:f0:2d:8a:0c:10:a5:a7:f1:6c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:08 2021 GMT
            Not After : Oct 15 16:16:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:d1:24:a5:69:24:9a:43:16:fb:a3:d0:74:
                    37:c2:f9:9f:70:bd:78:bb:0e:f7:28:42:53:a1:59:
                    6e:f5:fc:5b:9e:9e:2b:15:fb:10:f0:42:43:74:38:
                    eb:42:8f:19:92:31:3b:9f:04:2c:bf:f2:de:fd:c4:
                    3c:31:93:15:cc:51:1a:66:87:f0:e2:58:72:22:d0:
                    29:64:2d:85:28:50:6b:55:e3:bf:2c:69:e4:7d:18:
                    f7:2c:54:73:42:c7:79:a5:03:6d:2a:61:92:39:f6:
                    4a:11:4e:b3:eb:0b:4a:13:a3:8e:94:6d:55:f1:ee:
                    d1:5c:0f:36:b4:e9:6a:fd:7c:cb:cb:fb:98:15:e3:
                    8d:bb:13:17:9a:a3:5c:8a:ef:eb:7b:47:c2:40:6a:
                    e0:d6:a0:12:5d:38:e9:4c:09:27:c1:b9:54:c7:f1:
                    56:53:08:92:df:9b:55:03:a7:b6:a7:1c:e0:f3:9f:
                    65:cf:ac:5e:4c:3e:44:e3:be:35:02:c7:f8:89:fd:
                    94:74:71:dc:52:c6:70:e4:25:f8:87:1e:40:ff:07:
                    12:4f:62:71:e0:9e:9c:eb:b0:66:77:06:2b:ad:84:
                    94:ab:13:ca:93:aa:58:94:e8:af:f4:ac:9c:cb:33:
                    41:72:b8:e4:49:8b:61:25:05:59:79:de:f2:39:d5:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:0D:05:F8:6C:C8:F3:D3:69:DB:A0:BD:12:1E:C0:7A:CB:F5:42
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:4c:52:63:22:af:41:ef:ff:a6:f2:ed:c1:02:82:1a:d3:
         a2:5a:ba:2e:af:86:01:69:e3:f6:30:0c:2c:6b:d5:c5:0a:9f:
         32:4f:e0:a4:91:ef:4b:89:a6:36:75:fd:f5:46:83:5b:c3:81:
         c5:3b:db:85:21:f5:c2:50:1f:84:ca:b3:aa:92:2c:8c:6f:60:
         53:f6:8b:a1:86:f0:1b:21:cb:7e:96:91:c3:be:c2:cc:f5:7d:
         49:62:d6:fe:64:41:ec:92:1d:2b:e6:9a:75:8f:e8:fb:1d:ae:
         8c:fd:24:9c:a9:52:65:fe:d0:76:31:8f:a7:58:5f:13:08:00:
         68:ca:ec:55:c3:45:68:4a:4f:a8:78:09:81:9b:c3:71:dd:40:
         50:8d:96:d4:4f:27:f2:93:70:26:e5:a3:33:cc:16:a9:91:59:
         0f:c1:6b:e4:6e:41:64:52:9d:e5:89:16:41:a5:fa:82:54:1c:
         bf:44:69:9b:78:d4:93:1c:b4:9a:8b:73:89:bc:12:d3:c0:32:
         f3:c9:ff:d0:10:0b:ff:98:fb:7d:8c:a9:b1:4b:c7:04:d2:ee:
         68:6f:44:6c:a6:02:97:db:bd:73:f3:12:8c:9b:85:65:f3:ac:
         bc:a8:98:f0:6a:3f:7c:f7:79:5e:8b:1b:8c:1a:43:ca:17:3c:
         5f:e3:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org