Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          dzXXW+dUDTsAFK6evqS/Qbp0WDpSFU4BUrBrI9WuuFI=
Subject key identifier:   11:C0:57:B6:92:E4:BE:58:BA:15:FA:44:87:44:66:B0:DF:A4:59:2C
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       53CB509C28819C016007D178D5917E831598AE34
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        179.108.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cb:50:9c:28:81:9c:01:60:07:d1:78:d5:91:7e:83:15:98:ae:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:d9:c2:27:d9:9c:38:e1:63:b1:85:10:a8:
                    4e:ab:64:3a:f0:1a:68:b1:95:30:91:47:b6:35:f5:
                    7d:22:10:5c:10:f1:29:16:17:d3:24:e5:25:88:dd:
                    14:63:3d:ca:09:d6:b6:53:d0:00:26:b7:4f:cd:f2:
                    0e:3d:d1:29:4b:89:42:5f:ef:50:2f:29:01:26:51:
                    d8:da:b0:55:68:f9:9e:b6:6a:b5:c3:45:c2:65:7e:
                    da:52:90:66:e8:9f:0a:14:30:d9:88:0d:fd:be:bd:
                    15:01:f2:cd:d0:4f:57:72:37:3a:c7:0b:e1:e1:26:
                    8c:b9:3c:ef:01:27:3c:b8:b2:5a:6d:60:1d:24:a3:
                    8a:df:ee:db:5e:e4:e1:22:9c:c3:0c:5c:ff:c8:6e:
                    36:f8:9b:7b:6d:90:24:d5:0c:80:98:ee:08:26:52:
                    98:ac:39:f9:38:66:23:98:dd:47:d0:9c:65:8b:15:
                    58:a8:6c:8b:22:66:2b:70:3b:bb:a3:41:ec:75:89:
                    f3:fd:9f:bf:57:5e:ba:48:61:60:52:f5:73:3a:71:
                    87:1b:db:d5:9e:53:77:8b:68:d7:85:1d:55:54:38:
                    7c:b9:d3:80:85:c2:83:97:c7:86:2a:7d:1a:24:4b:
                    b5:fc:53:31:02:37:9b:dd:24:40:06:07:0f:6f:d4:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:57:B6:92:E4:BE:58:BA:15:FA:44:87:44:66:B0:DF:A4:59:2C
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:20:2a:9a:de:ca:f5:5f:8d:93:0e:ba:24:13:7b:48:d2:80:
         59:b2:2e:b6:61:7e:1f:c9:7a:f3:47:53:b2:94:1d:86:a6:f0:
         5a:bc:89:2b:b3:d3:e8:35:44:15:73:bc:be:f7:b7:fc:82:68:
         20:17:b7:33:26:33:ed:08:72:e2:13:ba:f2:6b:c3:0a:83:5e:
         5a:fc:67:97:3e:58:37:67:ed:a4:9b:d2:1b:6b:a0:74:93:f1:
         b6:42:60:01:f5:15:a4:5f:24:28:f8:5a:0e:7b:ce:60:9e:8f:
         87:d8:09:4b:10:48:8c:4d:60:ab:4b:48:36:12:18:22:ad:7b:
         31:9e:da:ce:db:3d:66:e4:cb:61:6c:3c:00:79:b7:15:fa:e6:
         9f:a7:a2:f7:07:78:22:47:06:cc:bc:42:a9:11:52:a3:10:ce:
         1a:28:b5:f6:73:5a:b9:fd:3a:cd:d7:90:29:59:e0:71:65:84:
         73:b0:9d:a8:ef:35:e6:d8:da:eb:7b:5f:6b:6b:bb:95:fe:de:
         59:cd:90:c6:0f:83:be:0e:66:ba:b5:6e:d0:b1:92:a3:15:86:
         f4:c7:07:0e:f1:74:df:e5:32:a9:99:0a:a8:7f:da:c4:4a:96:
         d0:6e:65:bb:58:8b:1d:e6:95:39:c7:36:7e:43:bb:b2:55:df:
         ee:55:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org