Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          dw1Et4xrh1gpJEcwLqAru26bjzEAfn4bduEe24qZTA8=
Subject key identifier:   EC:A1:55:94:CD:80:69:C5:8A:83:EC:96:97:AC:0E:C5:C0:DE:61:41
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2181A915F841C6B6E05A3060D919378597D612D9
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:18 +0000
ROA not before:           Sat 16 Oct 2021 16:11:18 +0000
ROA not after:            Sat 15 Oct 2022 16:16:18 +0000
asID:                     262691
IP address blocks:        179.108.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:a9:15:f8:41:c6:b6:e0:5a:30:60:d9:19:37:85:97:d6:12:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:18 2021 GMT
            Not After : Oct 15 16:16:18 2022 GMT
        Subject: CN=3082010A0282010100C2B1018C557FAE62D20A4C4DE9DCB1110377EB0287C668636D5EC19D53FAFA7C7A53EC6DADD79058AAAD24AD3EBA691D824DC733BD6CBA70FA3148ECD51E3ADE1B3A495B588B8C290DA2A8ABFAB7644220F2CFE6E63EC2849589DA7E5E71CF39F71D808578688996D51D989141F678B85EB6D2059AC6061D5CCFF7FE94198BBE79E9D5C8EC334FBBF2F66C849EE3C4082D4509B04B67FB6291CDFCAAEF83C6AA9F222CFA237F1E5805D8CC45F5AB98E7D165150116BC5CF1829C865DD6EDDD5D0C1A0CE383A208C4566426EFCB8C34C1DE3831FE6851BC9858D7113831805E20E6618C57C41880F79687012B5867B4300D1AF266D79FB241E58C8163CAD34D5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:01:8c:55:7f:ae:62:d2:0a:4c:4d:e9:dc:
                    b1:11:03:77:eb:02:87:c6:68:63:6d:5e:c1:9d:53:
                    fa:fa:7c:7a:53:ec:6d:ad:d7:90:58:aa:ad:24:ad:
                    3e:ba:69:1d:82:4d:c7:33:bd:6c:ba:70:fa:31:48:
                    ec:d5:1e:3a:de:1b:3a:49:5b:58:8b:8c:29:0d:a2:
                    a8:ab:fa:b7:64:42:20:f2:cf:e6:e6:3e:c2:84:95:
                    89:da:7e:5e:71:cf:39:f7:1d:80:85:78:68:89:96:
                    d5:1d:98:91:41:f6:78:b8:5e:b6:d2:05:9a:c6:06:
                    1d:5c:cf:f7:fe:94:19:8b:be:79:e9:d5:c8:ec:33:
                    4f:bb:f2:f6:6c:84:9e:e3:c4:08:2d:45:09:b0:4b:
                    67:fb:62:91:cd:fc:aa:ef:83:c6:aa:9f:22:2c:fa:
                    23:7f:1e:58:05:d8:cc:45:f5:ab:98:e7:d1:65:15:
                    01:16:bc:5c:f1:82:9c:86:5d:d6:ed:dd:5d:0c:1a:
                    0c:e3:83:a2:08:c4:56:64:26:ef:cb:8c:34:c1:de:
                    38:31:fe:68:51:bc:98:58:d7:11:38:31:80:5e:20:
                    e6:61:8c:57:c4:18:80:f7:96:87:01:2b:58:67:b4:
                    30:0d:1a:f2:66:d7:9f:b2:41:e5:8c:81:63:ca:d3:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:55:94:CD:80:69:C5:8A:83:EC:96:97:AC:0E:C5:C0:DE:61:41
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:b3:bd:ef:d2:19:c0:95:b0:e7:c0:f1:24:0c:de:09:94:
         cb:d8:c5:ca:2a:08:88:d9:8e:c8:03:b7:9f:8c:c9:7d:32:85:
         ba:e9:e0:ac:78:c3:bd:c4:46:e8:50:24:5f:bd:91:25:38:dd:
         b2:37:0e:a8:53:f5:67:aa:0e:0f:3a:00:6a:c6:c3:d6:2d:df:
         9b:54:9c:e7:39:86:06:46:00:85:35:bb:6f:e9:38:9d:56:5a:
         72:98:38:37:82:21:6d:61:65:29:31:2b:bc:2d:84:15:b3:58:
         23:d6:12:24:9c:88:0a:50:80:51:45:3e:5b:c5:7b:d2:09:fc:
         60:57:dd:01:07:ef:96:0f:d3:a8:20:10:1d:b9:b1:d5:2f:84:
         9e:72:c4:4c:5b:f0:92:09:6c:cc:04:6e:42:1d:7b:af:c0:cf:
         c1:83:49:59:5d:99:48:53:3a:e1:fb:ba:17:31:41:c8:96:9c:
         0f:5f:92:bf:60:63:04:26:29:c5:2f:e9:67:f5:f4:80:2d:87:
         9d:f7:b3:a0:0d:b2:21:36:05:49:dd:0b:84:4a:aa:dc:52:31:
         2b:1d:92:7a:91:90:64:cf:da:48:e7:6a:09:59:bc:87:46:df:
         ac:a4:ad:39:fc:60:2c:51:98:c2:e9:0e:90:bf:4a:a3:89:d0:
         19:ea:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org