Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          tm+7JJIzPHHg0iKlc9yMqxOxz3zatk2PPh2I3KQHI3U=
Subject key identifier:   2D:3C:2C:A6:77:39:0F:8B:F3:76:17:57:A5:69:E1:EB:DC:D9:0C:86
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5A6F1627742F41BF8191D26087D4BA95233B5CD4
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:16 +0000
ROA not before:           Sat 16 Oct 2021 16:11:16 +0000
ROA not after:            Sat 15 Oct 2022 16:16:16 +0000
asID:                     262691
IP address blocks:        179.108.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6f:16:27:74:2f:41:bf:81:91:d2:60:87:d4:ba:95:23:3b:5c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:16 2021 GMT
            Not After : Oct 15 16:16:16 2022 GMT
        Subject: CN=3082010A0282010100C362FA20090A5BBE9EBC3CE1627CA97A8B381C82AA23FDFEC007DC34EB29E06010A5CACA1DF8910AEE0C2C29DE5E113188A464DF3498BE2B013D4EBCC8E6B1C976A7E6A9D1024E9E2661AF875254307207785DCD0FB4816C265C55B6735F58F921BDD38A0D964B0A63CDF7F1DC862C187CA9608A4EF6AAA8D786AD4E4A4E7BE1D365C64AF0F7AE2B9D2CD7359D54C5C2E790B036D0E162092E0C119A63822D389F2EF73ED0A231057777E99F5A7904F5033E3C27EF6D77A297641DCF4435BC3A5B325A745F80969B69BAB7127ECCBA78747B3AD7EAE400A40CF97530759B51F93A4E5E061308DE897B5C994FA098EECDDBB81750E6B08A685228D13596FF51B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:fa:20:09:0a:5b:be:9e:bc:3c:e1:62:7c:
                    a9:7a:8b:38:1c:82:aa:23:fd:fe:c0:07:dc:34:eb:
                    29:e0:60:10:a5:ca:ca:1d:f8:91:0a:ee:0c:2c:29:
                    de:5e:11:31:88:a4:64:df:34:98:be:2b:01:3d:4e:
                    bc:c8:e6:b1:c9:76:a7:e6:a9:d1:02:4e:9e:26:61:
                    af:87:52:54:30:72:07:78:5d:cd:0f:b4:81:6c:26:
                    5c:55:b6:73:5f:58:f9:21:bd:d3:8a:0d:96:4b:0a:
                    63:cd:f7:f1:dc:86:2c:18:7c:a9:60:8a:4e:f6:aa:
                    a8:d7:86:ad:4e:4a:4e:7b:e1:d3:65:c6:4a:f0:f7:
                    ae:2b:9d:2c:d7:35:9d:54:c5:c2:e7:90:b0:36:d0:
                    e1:62:09:2e:0c:11:9a:63:82:2d:38:9f:2e:f7:3e:
                    d0:a2:31:05:77:77:e9:9f:5a:79:04:f5:03:3e:3c:
                    27:ef:6d:77:a2:97:64:1d:cf:44:35:bc:3a:5b:32:
                    5a:74:5f:80:96:9b:69:ba:b7:12:7e:cc:ba:78:74:
                    7b:3a:d7:ea:e4:00:a4:0c:f9:75:30:75:9b:51:f9:
                    3a:4e:5e:06:13:08:de:89:7b:5c:99:4f:a0:98:ee:
                    cd:db:b8:17:50:e6:b0:8a:68:52:28:d1:35:96:ff:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3C:2C:A6:77:39:0F:8B:F3:76:17:57:A5:69:E1:EB:DC:D9:0C:86
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:2f:74:3e:85:fd:e1:69:ba:1f:49:05:2a:8b:83:61:10:69:
         6b:26:47:2f:fa:a8:94:d5:09:b0:62:82:08:d4:a9:91:96:fa:
         25:28:71:54:e7:af:9f:9e:57:cb:0c:5e:38:6a:3f:80:d5:57:
         9e:e2:bd:80:05:7f:25:ff:26:42:06:a7:ad:c1:f2:f9:3b:f7:
         34:20:fb:80:21:c9:85:e6:ea:bc:ab:6c:2c:45:d2:2e:b1:6f:
         c8:a9:0d:9d:c4:99:81:9d:be:62:6f:e2:01:33:43:c0:10:62:
         91:39:b6:23:8b:3a:17:f9:aa:f8:1e:e1:5d:68:4f:d2:b8:47:
         38:2b:e9:98:8f:5d:19:33:99:3a:b1:dc:bd:f9:ab:2d:fe:dc:
         a2:fe:79:3e:a2:94:59:b7:d0:3b:00:5a:e0:bd:22:84:45:67:
         ac:82:f5:0c:eb:b2:46:ad:50:b9:1f:51:89:12:72:74:bb:1d:
         cf:21:c4:2c:ba:26:e4:2b:d9:30:79:54:17:4c:e4:80:c1:34:
         48:c9:5f:64:47:84:b3:be:e3:3e:f6:4e:17:b3:4b:42:9f:ee:
         25:09:d4:2c:64:f6:ff:ab:ee:95:87:4e:66:3f:8c:c2:d5:41:
         7d:c9:fe:ea:bf:3c:a0:f9:0e:c2:f8:bf:79:8c:fb:3e:45:ec:
         69:f1:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org