Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          R+5MTEwyJcj6lSZ55XckFNTmVT3R+ZiwJmM4Fogxg48=
Subject key identifier:   B0:EC:08:75:9A:3A:58:FA:95:6A:2B:65:93:6E:23:AE:1E:76:42:FC
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       17726DF8C44F854E10BEBAA3E9512D0B8CDFA0F8
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        179.108.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:72:6d:f8:c4:4f:85:4e:10:be:ba:a3:e9:51:2d:0b:8c:df:a0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:03:c1:4e:53:56:36:b2:40:bd:b5:05:a3:
                    5e:5e:75:ab:91:d9:2d:c9:07:f9:cc:f0:3a:b8:1f:
                    44:0f:69:31:06:77:43:71:67:61:20:56:4a:d2:f2:
                    c2:bb:28:86:c7:d2:b7:0e:10:af:aa:b1:40:da:7e:
                    8c:0a:b4:76:a0:b3:85:ca:6c:d1:64:8b:b9:8d:39:
                    16:61:8b:76:a5:d2:bf:73:c4:d0:74:4b:8f:77:1c:
                    c5:9d:9d:d9:53:b9:bf:ce:b0:72:a4:d1:70:3f:81:
                    80:b0:e6:15:2e:54:2d:4d:1d:4e:3a:4a:1a:07:ad:
                    75:7c:0f:76:df:36:a0:2f:34:c0:0e:35:1e:24:fb:
                    f7:53:17:a8:38:8a:6f:55:64:f4:b6:2f:f9:6f:c9:
                    54:ea:ac:45:b4:1e:78:fc:78:e3:21:5e:51:40:67:
                    66:3e:64:77:35:7e:47:cc:9e:cb:e0:73:ec:9e:aa:
                    f2:f2:fd:a2:f9:8e:69:dd:03:57:6b:aa:00:89:2d:
                    c0:6d:6c:b0:67:d9:de:ba:88:6b:e4:02:04:3d:f7:
                    2d:a8:2c:40:00:d2:ba:70:e1:67:0b:b6:1b:d4:1e:
                    2b:0e:1d:dd:30:e5:3b:b6:9e:94:b7:f2:7c:53:f9:
                    30:63:b8:a4:d7:4f:6a:75:b2:1d:97:1a:1c:9d:a9:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:08:75:9A:3A:58:FA:95:6A:2B:65:93:6E:23:AE:1E:76:42:FC
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:31:15:ad:4e:45:53:ff:83:23:e2:9f:7f:42:1c:db:f0:8e:
         b8:53:c0:35:ce:73:4f:e3:e9:7f:61:0b:13:12:52:3e:f1:33:
         2e:dd:3c:23:a0:f5:ea:70:ea:40:66:a3:0e:29:ee:16:89:48:
         8a:68:86:33:17:82:3f:5c:fc:50:da:b0:37:36:d2:51:ee:a5:
         bc:4b:94:2b:53:c6:b8:eb:26:1f:ad:cf:35:a3:d0:8c:56:41:
         14:87:5a:af:94:af:95:d7:f3:4d:27:d3:33:44:d7:9f:97:9b:
         eb:a0:e7:52:a9:7f:95:5a:f4:be:3a:32:10:a7:3a:2a:dd:6e:
         f9:0e:a9:cb:bf:07:d4:44:80:cc:c2:05:e4:c0:62:8c:07:b5:
         3f:73:87:1f:8b:81:57:e9:24:64:24:ae:3b:0e:3a:53:ca:be:
         a5:db:e5:7d:d1:78:a3:3c:8c:6d:b3:22:5f:e6:0c:af:10:a7:
         52:68:b7:d6:57:39:95:98:19:cf:ab:7a:fa:9d:74:55:62:66:
         a9:ec:08:7f:ce:3c:11:e1:6c:fa:48:63:38:15:29:6d:c3:06:
         27:58:23:a2:e2:3e:bd:95:ad:06:d3:61:51:81:02:13:92:cd:
         10:a8:7e:8a:c9:3c:3a:ea:2a:95:39:dd:68:c1:8c:5c:a2:a5:
         83:be:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org