Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          evce0zRa8nqAmFSbwlPjfKx2WFIJFHC5G9GKlfKc0Pw=
Subject key identifier:   87:F6:BC:85:4E:89:28:F3:1F:90:D0:55:A0:EB:6D:A6:E4:BE:9C:E2
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5DAEA1CCB01581FD0D1D93F1369947F6FBFD253C
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        179.108.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ae:a1:cc:b0:15:81:fd:0d:1d:93:f1:36:99:47:f6:fb:fd:25:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:00:72:a9:07:5e:d7:40:29:01:18:b5:4a:
                    80:2e:8b:e4:ab:e8:81:cb:49:96:1f:05:3a:7e:d9:
                    9f:97:2a:d9:67:9f:20:b3:1a:f3:bf:2b:d8:87:f7:
                    66:34:e7:26:a5:0f:85:e9:95:61:5e:ed:86:fc:b9:
                    74:5d:0a:13:03:75:4d:cb:2a:2f:e5:eb:8d:9e:a2:
                    1d:c8:6f:19:38:3c:87:b8:27:e9:dc:2f:51:6c:77:
                    d8:cf:fa:d7:fb:13:b7:ad:08:34:ab:6c:4c:c2:6f:
                    03:21:81:73:ee:ea:1e:3f:fa:1c:da:78:30:da:f2:
                    da:5a:6a:67:e6:a9:b2:19:6f:5d:12:ed:7d:17:73:
                    8c:76:c9:39:f8:0e:de:f1:ba:67:5c:0a:8d:f5:27:
                    12:c4:96:a4:c3:e7:18:80:5b:e8:88:20:22:4a:7a:
                    18:4a:48:04:f3:4c:2b:6b:f2:d7:2b:e8:a2:fb:69:
                    3b:77:ae:1d:c5:de:6e:c6:50:35:c5:5b:cf:49:6f:
                    a6:fb:54:61:e0:a5:e7:88:3c:45:af:b7:5b:39:07:
                    66:eb:37:78:1f:cb:03:c5:db:6f:f8:54:a2:7e:eb:
                    56:50:1b:e7:c2:9b:b7:68:42:53:af:1b:14:36:cb:
                    02:7b:8b:65:51:e6:4a:f4:d6:2b:9d:d9:8d:13:c6:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:BC:85:4E:89:28:F3:1F:90:D0:55:A0:EB:6D:A6:E4:BE:9C:E2
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:93:8e:1f:c1:9f:c6:ef:8b:33:4e:99:bb:17:2b:87:00:67:
         86:84:43:bf:a4:82:c6:8a:f6:df:ea:23:75:a1:39:1a:8f:38:
         88:fa:10:85:11:04:f8:9e:0a:9f:8c:9b:73:a4:57:b6:9a:0a:
         2f:a3:21:db:75:46:cb:8d:2c:59:db:d5:e7:94:ac:5d:a2:bb:
         e0:49:92:72:04:b9:e8:ed:4a:ea:90:4d:b4:f5:f3:41:76:b4:
         1d:e4:51:98:8f:3c:79:4e:b8:a7:1c:9b:af:f4:9e:9b:76:f1:
         fa:e0:3c:7c:bf:99:b8:42:dc:ef:b6:05:58:c8:99:b1:4c:74:
         d8:74:0c:e1:1a:48:db:88:38:a4:67:24:d9:a4:fc:79:45:7a:
         15:d5:62:36:24:71:8d:2a:e3:6a:e5:56:ee:0d:95:b1:3f:2a:
         cb:c0:bb:dd:86:a2:42:d1:82:85:3c:cd:53:ff:13:b9:39:5a:
         fd:c5:4d:e7:fd:b0:5e:b8:12:41:3d:d9:65:62:74:e8:28:77:
         b0:d7:3d:ea:28:61:14:28:b0:46:e2:42:5d:8e:c5:73:92:3d:
         f6:fd:60:ea:cc:5d:1b:b6:f7:16:56:71:7a:42:c9:f8:ec:cb:
         c3:2e:72:d4:e2:80:0a:29:1f:37:e7:e4:4a:52:d2:8b:41:75:
         51:19:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org