Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          TQW3qHaryWa56Yjfkunar0Zv+HL0XQLXnk7an4GjM7c=
Subject key identifier:   8B:33:5E:6D:86:C4:1D:A6:1F:DA:31:6B:DA:0C:F3:AA:DC:D4:21:B2
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5DA964FEE1BF3F431F598CE8FE52751807EB9184
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        179.108.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a9:64:fe:e1:bf:3f:43:1f:59:8c:e8:fe:52:75:18:07:eb:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:06:11:ba:a3:ab:8f:59:ba:d8:46:e5:89:
                    6c:4c:d2:56:c6:39:3b:3e:fc:3c:77:51:89:7d:60:
                    74:0b:52:be:ef:d3:96:64:54:c1:c1:9d:37:b8:bc:
                    cd:6e:16:4e:72:0e:17:c3:54:6b:c4:69:68:45:ff:
                    7f:4a:f7:74:16:39:56:3e:30:61:3b:aa:fd:e9:8f:
                    19:a0:a1:3e:6c:ca:b6:a1:8e:67:43:1b:5d:5e:53:
                    37:a6:80:cc:43:65:e4:71:98:ac:b1:12:22:f4:d0:
                    8d:5f:07:00:83:53:55:2f:68:5c:aa:b6:eb:a1:73:
                    c8:51:66:e1:4f:74:5d:d3:89:35:1a:51:1c:03:e8:
                    06:91:e8:3a:ce:6d:45:50:d8:e2:e4:f4:59:76:82:
                    1d:b5:bf:8b:23:3e:51:4c:73:21:68:c5:5d:a1:e8:
                    bb:18:e5:6f:49:12:c7:ac:54:75:d5:36:06:19:81:
                    26:67:63:7a:83:fb:c4:ea:02:90:fe:ed:f6:e4:fd:
                    57:1f:89:96:66:53:9d:ca:5c:cc:2c:ad:01:8f:76:
                    5d:92:51:f0:40:5a:6d:a3:12:a4:8b:f5:a5:d6:ba:
                    ea:e3:af:ad:3a:ff:d2:35:f9:e7:08:dc:ab:1e:94:
                    0e:ca:31:4b:bd:09:f3:4e:d1:4d:95:50:b5:1d:68:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:5E:6D:86:C4:1D:A6:1F:DA:31:6B:DA:0C:F3:AA:DC:D4:21:B2
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:13:96:82:7a:a8:48:fb:a2:21:3d:ff:28:fe:02:bd:5f:ab:
         39:50:27:db:f7:13:32:2c:69:57:d0:67:2e:91:43:f1:9c:b7:
         1c:86:4d:82:17:e8:fa:4a:5f:c6:cc:65:d4:e9:f0:b1:6d:3d:
         6f:a3:f4:04:43:85:7e:aa:32:90:4a:9f:6b:1f:6b:05:6e:c8:
         38:67:c3:68:c2:02:b2:18:fd:d4:9c:1b:0d:6a:b7:bb:f4:6f:
         c1:35:8f:c4:e4:a6:d4:61:57:17:d2:71:14:06:16:14:10:de:
         0b:14:fc:c0:90:41:1e:05:49:6f:59:23:95:1f:97:68:8e:01:
         73:95:75:5d:48:3a:d6:23:e1:df:81:b3:01:17:81:50:a9:55:
         85:49:c1:04:c9:4f:8a:dd:f5:a6:66:cb:a7:c9:3d:c2:6b:91:
         48:d1:a6:57:76:b1:91:e8:1a:32:e0:3e:65:2c:a3:8c:32:8e:
         2c:e7:0f:d5:14:82:92:7e:5a:21:94:67:d1:b7:e5:ea:ab:3f:
         a1:61:40:d8:7c:92:4f:02:da:7f:78:fb:f4:85:5d:fb:16:c3:
         04:57:d9:d6:15:5c:c1:da:24:f6:6a:7a:23:29:61:fa:46:c7:
         5d:97:2b:b8:dc:dd:20:e2:06:b5:7f:3f:f2:50:97:41:ec:b6:
         0a:4b:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org