Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          JY+fr8YATT8Hs9OWdvWmWYDIAPEYHzfP2xIyJFnEoCQ=
Subject key identifier:   28:C8:D5:90:CB:46:1E:DA:38:AF:2F:E6:1C:C2:F8:61:C7:A7:91:96
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3F8CC7384A08DDEDC9AD2EF513831EFB8FA69626
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        179.108.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8c:c7:38:4a:08:dd:ed:c9:ad:2e:f5:13:83:1e:fb:8f:a6:96:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject: CN=3082010A0282010100A96725D5A1AFB795BCBD6A90EB83C81D93E6D017A99AD646AB48A06D391C188C8C5F92ED2629C18D013E94CC654AD0BBFB206E9E509E002AB2C8CA5AE1DFAED9456AD5CCA2E409264377CFB1EF2B0B56BF5C87728A3C53285DC534BC90BCAF05142F8E2A6BB0FC276B3B4A141D4863C415DB79C0AF3C3C0055989850D19F7E351541A135196F1A4C716288D517F32F14E58C2CA25A71675E56336D6E158852D3D37925200D9ABA716D2CFE6A06CFE7F90495E38D8F482FBBE3B19228B7D56B119295BA9A8C69B5F245827331457003389F1613ACA978A862BAA907E090DAEE8DEE837566BC0769CD4CA7C158948B5BA10C5E563E53F5F715A0E27F3FBDA3A9350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:25:d5:a1:af:b7:95:bc:bd:6a:90:eb:83:
                    c8:1d:93:e6:d0:17:a9:9a:d6:46:ab:48:a0:6d:39:
                    1c:18:8c:8c:5f:92:ed:26:29:c1:8d:01:3e:94:cc:
                    65:4a:d0:bb:fb:20:6e:9e:50:9e:00:2a:b2:c8:ca:
                    5a:e1:df:ae:d9:45:6a:d5:cc:a2:e4:09:26:43:77:
                    cf:b1:ef:2b:0b:56:bf:5c:87:72:8a:3c:53:28:5d:
                    c5:34:bc:90:bc:af:05:14:2f:8e:2a:6b:b0:fc:27:
                    6b:3b:4a:14:1d:48:63:c4:15:db:79:c0:af:3c:3c:
                    00:55:98:98:50:d1:9f:7e:35:15:41:a1:35:19:6f:
                    1a:4c:71:62:88:d5:17:f3:2f:14:e5:8c:2c:a2:5a:
                    71:67:5e:56:33:6d:6e:15:88:52:d3:d3:79:25:20:
                    0d:9a:ba:71:6d:2c:fe:6a:06:cf:e7:f9:04:95:e3:
                    8d:8f:48:2f:bb:e3:b1:92:28:b7:d5:6b:11:92:95:
                    ba:9a:8c:69:b5:f2:45:82:73:31:45:70:03:38:9f:
                    16:13:ac:a9:78:a8:62:ba:a9:07:e0:90:da:ee:8d:
                    ee:83:75:66:bc:07:69:cd:4c:a7:c1:58:94:8b:5b:
                    a1:0c:5e:56:3e:53:f5:f7:15:a0:e2:7f:3f:bd:a3:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:D5:90:CB:46:1E:DA:38:AF:2F:E6:1C:C2:F8:61:C7:A7:91:96
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:86:55:1e:57:9b:09:72:70:4d:ed:74:8e:94:1f:32:f2:46:
         cc:6f:e4:99:87:7a:ba:f2:21:3a:c9:23:cd:b5:d5:63:dc:26:
         96:1a:39:94:14:be:50:88:bb:c5:ea:47:fc:22:28:aa:8b:89:
         a5:d7:e0:64:d4:83:3f:47:3a:b8:2d:98:ee:83:ff:f6:d3:f7:
         f0:a9:21:a1:51:00:d8:70:36:20:71:15:51:f2:90:73:53:35:
         b4:aa:13:29:f4:6b:5d:f9:46:73:03:88:fe:c5:52:fc:00:5e:
         bb:97:80:2d:04:45:c1:b2:bd:8c:f7:1d:c5:06:6a:8c:a1:a5:
         c3:09:af:13:32:74:69:6c:22:89:05:eb:a5:ed:69:63:d9:60:
         8b:d8:f3:1a:ff:fd:7c:61:c6:66:68:3f:12:0e:32:b8:d8:b7:
         21:29:b1:26:7e:64:81:bf:45:5d:ac:f0:8a:8a:1f:4b:29:6f:
         f6:9c:b0:c2:6a:b7:05:91:d9:10:12:0c:a1:8f:0c:f0:f5:8a:
         a7:59:d8:ec:93:2b:0a:d3:59:b8:05:2a:b1:ef:e3:ad:77:3f:
         e1:8e:d5:c1:a4:b8:64:4b:22:b6:f1:d8:6b:2b:6c:80:05:ac:
         fe:ba:b2:82:eb:c7:0c:96:be:7d:78:10:35:a3:5b:b0:fd:0b:
         87:93:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org