Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          syZInwzx7zSQu0etTdwMC7iffG3JoxgbnX1NVvCWT2I=
Subject key identifier:   90:B9:23:F8:54:AF:CF:0B:37:E0:63:15:3B:7C:CC:C8:0E:C3:9C:A9
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7E5D5859E30C9CDAB93892E7186A865CAC5FF156
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        179.108.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5d:58:59:e3:0c:9c:da:b9:38:92:e7:18:6a:86:5c:ac:5f:f1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:8f:37:6e:72:bf:c6:dc:06:7d:dd:f1:b9:
                    0e:ca:98:b6:b3:15:aa:f9:92:d5:c0:ce:a1:c3:0f:
                    72:6e:7b:7a:68:3f:d8:8d:de:4a:dd:db:c0:bd:f8:
                    2d:a9:db:22:8d:8d:16:eb:d1:0b:74:a2:05:b8:47:
                    69:6e:65:b0:56:d8:de:50:4b:fa:db:b0:6f:5d:0b:
                    22:ce:3a:96:7c:b5:26:ef:17:fb:15:06:b4:5d:61:
                    e9:5e:d6:49:31:a9:7b:0a:14:ff:8f:67:38:64:f5:
                    6f:ae:aa:a2:c9:78:dd:d4:2b:0e:7b:b9:a1:f0:d8:
                    3b:e7:c9:12:16:d2:5d:f2:c8:4b:05:07:87:a6:11:
                    2d:47:b9:dd:26:b2:a3:a3:44:9f:a1:a6:a3:81:54:
                    04:57:90:ab:5c:a4:71:8d:8d:64:3f:28:fe:8d:69:
                    5a:c2:6c:db:a8:12:27:dd:21:31:10:ce:34:5f:8c:
                    74:80:5b:00:63:f2:22:d9:2b:16:45:62:7d:d0:a6:
                    17:94:5d:bf:d9:5d:7a:cd:ec:8a:d8:59:6c:89:1f:
                    32:b9:9c:d9:d8:89:db:65:dc:74:5d:5e:5d:5a:77:
                    c4:a6:4b:52:42:4e:a4:d6:da:25:78:14:03:fd:51:
                    31:b6:a2:a6:26:27:b6:9e:63:27:0e:ed:dc:ba:6e:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B9:23:F8:54:AF:CF:0B:37:E0:63:15:3B:7C:CC:C8:0E:C3:9C:A9
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:45:34:ea:26:15:3e:0d:83:fd:23:64:f8:89:f8:e6:14:
         1c:1d:db:fd:51:63:4d:35:57:a5:5f:b7:84:97:03:11:af:2e:
         53:ad:71:3f:3e:d4:22:9e:fc:92:bb:42:44:08:3c:d1:1d:1d:
         80:13:1c:e7:68:39:c7:79:76:55:ed:42:96:9e:ec:45:c6:11:
         61:84:bd:6d:6e:0f:41:d3:23:dd:c3:85:98:61:84:07:5f:fd:
         35:23:bb:55:78:59:87:8d:8d:6d:6c:6f:f7:7f:13:62:c5:8b:
         73:ed:32:2e:6e:7a:97:cc:e0:c7:2f:f9:81:50:8d:73:35:06:
         99:35:c1:15:75:d4:6c:81:0d:ff:cb:bb:6e:54:03:e9:3c:39:
         0d:92:82:58:b6:17:ff:f2:a7:e6:4a:e7:0e:af:76:4e:5b:67:
         4c:74:ef:95:b6:9c:bd:e7:ba:95:ec:1f:0b:ec:9d:81:27:04:
         26:fa:ff:98:7c:73:fa:1c:ea:e7:73:56:77:8b:13:5b:f5:3e:
         69:fe:9c:ff:3c:7a:8e:ff:15:74:2c:b0:29:09:12:4e:a4:a0:
         c3:3f:27:b0:0d:26:37:c6:da:39:7e:b1:89:6c:61:01:e6:5a:
         af:5c:c8:e1:9b:0a:03:93:0b:77:8b:b2:ea:92:75:13:2b:7e:
         52:6f:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org