Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          390i5aL4VEfqq2HzmgTcTAWBoEi4jj9ZpWTcRXnXADc=
Subject key identifier:   A3:2F:61:A4:1C:B4:9A:D8:2A:C4:95:22:06:EE:77:C5:5F:9C:D6:B4
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       589D532279D05BC740B3F4F603C4C5BBAF675BDB
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        179.108.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9d:53:22:79:d0:5b:c7:40:b3:f4:f6:03:c4:c5:bb:af:67:5b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:40:ea:e0:ea:b3:f2:49:15:04:07:f5:28:
                    2d:87:39:7d:99:e0:1f:dd:e6:51:73:60:df:2d:a6:
                    cd:be:97:ae:64:22:d8:93:ec:c2:5a:0a:10:27:9e:
                    92:56:d6:de:bf:7c:4c:a8:09:36:70:f0:91:56:49:
                    27:0f:03:85:f0:38:57:bc:37:11:49:e5:ca:d0:f0:
                    04:7a:dd:7e:2c:c8:36:ec:40:ee:4d:25:fc:e8:73:
                    08:fa:3a:de:7c:3a:ee:57:8e:fc:b9:21:2e:0b:70:
                    d2:bc:59:c5:17:72:24:90:35:04:3d:c5:f5:c0:fc:
                    5c:71:5e:f3:86:5c:8a:f8:f7:ee:de:94:32:3c:b8:
                    bf:c1:66:33:cd:a5:f2:37:0b:be:2d:5a:25:61:34:
                    d5:73:43:51:f3:85:a0:00:b3:87:94:06:9c:17:b0:
                    34:16:03:cf:53:b6:5c:5f:1e:09:0b:46:ee:54:18:
                    6c:72:c6:44:ac:60:15:02:64:c0:36:5c:9b:d3:39:
                    40:26:8e:83:05:d5:50:9f:76:7a:c0:9b:0f:52:5c:
                    6a:cb:3a:51:53:85:5c:56:47:1e:a0:c2:b3:64:7d:
                    14:f0:a2:90:1e:26:16:df:8f:64:b4:cb:f7:4f:47:
                    4e:5f:23:ca:03:de:53:cc:0f:d8:2a:3b:9d:36:04:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2F:61:A4:1C:B4:9A:D8:2A:C4:95:22:06:EE:77:C5:5F:9C:D6:B4
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:c1:f8:77:d3:a5:35:07:79:6a:66:9c:af:ac:90:51:0c:
         10:a5:f1:2c:dc:86:db:b6:14:14:d1:b2:10:9a:12:2f:5b:2d:
         bc:79:05:84:e0:7a:9c:49:bf:20:ab:68:15:b2:a4:da:34:e3:
         8f:b5:e6:af:fb:32:17:71:2f:44:ef:59:ed:05:08:6a:f8:08:
         9e:fd:6b:1d:1a:ba:e8:bb:de:b6:bf:3e:98:9a:be:67:f1:1d:
         c3:17:4f:7f:c4:87:77:06:37:7e:6a:d2:17:d3:f0:41:f5:34:
         60:26:c0:49:f6:5a:75:7b:eb:70:43:7f:c9:e1:2f:46:1a:3d:
         2a:09:df:96:ec:aa:ac:4c:e9:81:ae:da:7e:ed:a6:01:f0:1c:
         48:11:d1:1e:2f:12:ff:0b:56:4d:7e:57:af:69:58:18:e5:d1:
         df:a7:e6:1d:bd:d6:9d:c7:7e:8a:99:1e:ae:dd:47:02:94:85:
         32:ce:2b:96:20:fc:ef:c0:d1:4f:5b:9f:cf:da:1d:25:37:6e:
         24:0d:9d:43:ee:ed:6d:92:33:b3:ef:e3:d0:82:67:f0:bd:3d:
         f9:cb:8a:ca:06:7f:c1:11:77:0e:cb:13:7c:5a:f0:66:d0:75:
         a0:17:b7:66:9c:59:31:44:c5:35:83:03:29:99:93:ad:79:7d:
         8e:a9:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org