Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          C/oEZhFaofcW6S5iXRHuopx5vQAlz6/MjWu1DvuGg6g=
Subject key identifier:   1C:B2:02:70:A6:10:AE:6D:B0:F9:C6:EF:A4:1C:B1:29:2A:BE:A7:32
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       26F33978C53422333CA0154F3614A62FF1444ED2
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        179.108.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:39:78:c5:34:22:33:3c:a0:15:4f:36:14:a6:2f:f1:44:4e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:30:5e:60:8f:b0:5f:c8:82:d5:74:fd:cd:
                    cd:ed:53:db:4f:06:eb:71:36:99:a9:05:b7:57:b7:
                    65:54:14:a6:d9:ad:8e:e5:5f:ce:78:16:6e:20:70:
                    77:81:f3:8f:f7:c7:f8:8e:2e:a5:88:f3:d4:84:63:
                    a0:ba:9d:00:16:8b:23:c8:3e:fc:90:29:db:3d:cf:
                    8e:3c:b4:06:dc:57:23:37:6b:9e:ac:67:38:45:1e:
                    a9:ca:6e:82:29:9e:5f:ce:e6:0f:e5:93:f8:2f:13:
                    f8:6d:59:8a:5c:81:7d:7d:39:fb:be:15:04:72:8b:
                    05:ef:21:7c:20:3e:03:6d:25:9c:9b:a8:ed:a9:7a:
                    d9:eb:f0:18:57:df:f4:7b:a4:c3:b0:4e:59:18:35:
                    58:09:62:36:01:3b:7f:37:0f:0e:3d:a6:b7:44:52:
                    33:c2:b7:40:b2:a7:f5:90:f4:60:46:0c:13:27:14:
                    78:14:c2:e3:3a:83:a5:5e:85:50:fb:75:0a:20:9e:
                    10:75:31:c3:6b:df:84:d2:3e:14:aa:af:5f:d7:cc:
                    5a:25:c8:7a:51:ef:b7:ef:62:71:b9:4e:d5:e3:5b:
                    3d:ba:89:47:46:fd:08:c3:87:d0:75:a6:d1:54:e8:
                    61:fd:5c:a7:83:0c:59:1f:62:8a:b4:30:b6:73:74:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:02:70:A6:10:AE:6D:B0:F9:C6:EF:A4:1C:B1:29:2A:BE:A7:32
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:96:77:e9:b8:22:99:90:dd:d6:2e:e4:1d:e9:3e:9c:10:
         e9:83:45:ca:09:78:35:7d:e0:fd:26:bd:63:5e:27:b6:46:64:
         16:d8:2e:9b:12:29:74:ba:9c:6d:a5:84:3a:2c:00:23:ef:a4:
         e7:c5:a0:29:25:d7:4c:bf:ed:3c:3f:9a:92:a7:01:bb:01:07:
         c8:7b:3c:4d:00:d7:ae:86:77:8a:df:5e:e4:61:55:bd:ed:04:
         02:aa:f8:2f:ea:6c:c5:80:26:18:b7:89:bb:2d:60:c4:00:23:
         63:44:cb:b0:78:40:98:38:63:6c:9d:1e:3a:b0:1b:d9:4e:8a:
         0d:9c:38:d2:c1:0a:00:30:14:18:07:14:90:92:71:88:59:85:
         f0:5c:f4:93:26:1e:54:ac:16:f7:d8:e4:3c:21:e3:60:5e:01:
         0a:c3:c8:b8:31:20:e0:eb:7c:aa:e5:39:ad:91:cf:59:5f:7e:
         70:24:17:6a:c5:02:8d:7a:43:c4:a5:c9:f1:31:d9:5b:7d:11:
         5a:e5:25:29:bb:ee:c7:b3:a3:ad:49:b4:7c:b3:de:3e:24:59:
         16:17:bf:66:05:ef:c6:eb:e0:da:fb:37:9b:52:13:b0:3a:c2:
         55:d4:38:2f:5f:b1:1a:1c:c0:e3:b2:8a:f9:9f:4d:27:5f:01:
         4a:8d:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org