Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          9xOryqwFgXMPJhohsdDaq5Z/BWPxTkBF88lPZLtbvUM=
Subject key identifier:   71:0A:38:AD:2D:63:64:D5:07:31:0B:34:93:D0:DB:75:D8:67:10:7A
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       293D5E42A21FDDA907B78910A44FFE41E9A972CF
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        179.108.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3d:5e:42:a2:1f:dd:a9:07:b7:89:10:a4:4f:fe:41:e9:a9:72:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:72:97:14:d4:15:b4:ef:64:22:5d:86:41:
                    6a:46:85:64:3e:8d:16:ac:a2:2e:e2:10:37:d7:47:
                    fb:80:f7:3d:c1:df:e7:af:87:aa:15:76:5d:b3:3f:
                    93:55:88:66:bf:8e:c9:da:cd:15:4e:7a:50:f4:9e:
                    47:ee:01:ee:13:05:b2:b3:05:78:27:c0:3b:73:db:
                    23:bf:a2:5d:dc:cb:37:b7:07:b5:39:46:e4:2e:40:
                    f6:33:ea:70:96:24:04:9a:d8:e2:e6:2a:5e:b9:dc:
                    24:43:24:30:33:9c:61:e3:2a:57:eb:b3:31:45:8f:
                    df:92:89:d1:cc:dd:30:91:d5:22:c1:79:20:87:cc:
                    58:19:03:65:7b:6a:d6:75:5a:9b:5a:fd:fe:af:b6:
                    be:ec:66:e9:58:22:fa:c7:87:79:be:da:b5:27:10:
                    a9:f7:8f:4f:0e:75:62:55:5d:3b:bc:f8:80:a2:9d:
                    10:90:3b:de:38:29:ab:d2:bd:cf:74:23:a4:28:48:
                    b9:a7:53:e6:15:46:fd:7e:f2:76:07:68:f7:87:84:
                    26:c5:90:52:ac:37:61:20:6d:77:78:fa:74:a2:06:
                    e4:a9:da:65:7a:80:ac:b7:15:6e:fa:5e:8b:b3:cc:
                    73:87:bc:0f:3c:bc:d1:4d:b1:a8:55:de:b7:a6:9d:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:38:AD:2D:63:64:D5:07:31:0B:34:93:D0:DB:75:D8:67:10:7A
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:d7:e1:74:c6:42:12:a6:6d:7c:53:8d:10:4f:a0:b8:a0:
         a2:b9:09:df:6e:40:da:7e:1d:96:3f:0d:ad:4b:54:49:0b:40:
         65:e0:62:df:0c:5f:5c:db:7a:2f:b8:9f:1d:df:07:5b:b3:72:
         67:41:76:66:3c:f3:74:af:f1:57:b4:6b:1b:a0:3d:a5:0c:73:
         3e:38:55:1d:b4:fe:e9:ac:71:a2:74:d8:b0:1e:ad:5c:4a:43:
         c4:99:18:bc:46:e5:32:52:bd:73:81:9d:e8:75:6c:e2:e6:15:
         4d:5e:22:be:4c:01:ea:39:35:f4:32:17:ef:fd:8b:4f:64:07:
         91:f7:3e:e1:d8:ce:6d:c4:3c:32:04:75:88:fe:0c:e6:41:a4:
         ef:36:2b:74:b5:7e:66:ba:d1:fd:16:a8:2c:4c:03:96:b7:08:
         eb:67:5a:f2:e0:69:10:01:91:78:ee:25:d3:fb:be:b3:9b:f2:
         19:fd:68:b2:d6:da:47:02:1e:0b:cf:78:93:34:39:9b:11:bd:
         52:91:e7:25:38:3e:96:03:49:f8:60:0d:c4:66:73:d3:c6:e3:
         11:28:33:f0:b9:b4:aa:84:e8:5f:f1:b3:1e:cc:83:d9:42:b3:
         5c:07:82:a6:02:a5:71:56:ad:cb:12:3a:ac:6d:14:3a:4d:a1:
         62:5a:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org