Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          DCyTCyC+APh+2dXu4JPtmD0HyUOgkbn3GaCDM7s2Oe0=
Subject key identifier:   98:68:39:AD:20:CA:7A:72:F3:57:07:DE:6F:F0:21:89:0E:8B:CF:39
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       28DA5A8467EBEB8F412F84464C68028305280D89
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        179.108.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:5a:84:67:eb:eb:8f:41:2f:84:46:4c:68:02:83:05:28:0d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:72:bc:32:7f:73:10:c2:72:35:f5:0b:2a:
                    2e:a3:61:6b:3b:9b:85:93:fe:ab:42:43:1b:00:ec:
                    4d:48:e4:55:3e:46:65:e0:85:e6:b7:e2:18:35:40:
                    d7:c9:9d:61:7a:f2:5e:e0:fb:e1:11:e6:f5:63:b8:
                    1f:10:6f:c1:1d:a5:4f:51:9f:ca:71:c8:7e:58:53:
                    04:ac:e9:71:6e:c4:f3:fd:5a:1b:bb:e7:17:68:e3:
                    1f:69:86:d2:01:e9:14:57:5c:b1:43:1c:93:62:48:
                    36:71:5b:82:81:80:0d:04:79:5d:53:19:6a:22:c4:
                    d5:b1:38:9e:4b:f1:78:ca:f7:57:cd:a9:16:60:bd:
                    96:d2:bc:1b:10:9a:2f:67:4d:71:46:ae:f1:3b:ed:
                    14:d0:38:3a:b5:da:fd:5a:37:43:3e:99:04:f5:0a:
                    76:37:dc:62:f2:db:2a:17:81:e5:f8:a2:dc:77:15:
                    c3:3b:a8:25:fd:eb:39:ca:fb:61:51:29:2e:9d:20:
                    50:d8:73:b4:40:f6:c2:a3:e4:de:fc:f1:c2:07:44:
                    d6:10:91:9c:d7:dc:93:ad:50:5d:c9:90:aa:75:26:
                    38:8f:8a:9f:18:c1:66:7d:85:ca:ca:93:a9:72:5b:
                    3f:5c:80:b3:56:42:46:1a:d7:a8:dd:b6:98:9a:8d:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:39:AD:20:CA:7A:72:F3:57:07:DE:6F:F0:21:89:0E:8B:CF:39
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:b1:ca:d4:15:9b:c8:fb:d7:bc:96:cb:29:2f:8d:52:93:e8:
         0f:fe:5c:e7:e3:84:21:f0:81:0a:a8:b4:14:c1:c4:43:96:55:
         8c:28:5e:da:44:92:4c:10:d3:90:93:46:dc:74:63:5a:8b:60:
         cf:5e:7f:52:6d:d6:e3:c5:8e:f3:22:cd:10:a9:28:bf:78:96:
         96:40:f6:df:00:c3:10:c4:7d:66:e2:d7:b1:f2:c6:f1:af:5e:
         24:98:c1:01:e4:c1:2b:7a:56:0b:05:3a:45:7a:16:00:73:b3:
         60:00:04:c3:2d:0f:e0:bf:52:51:67:4c:44:bf:90:c5:67:d3:
         1f:ea:74:76:95:2e:9d:07:07:5b:8c:5d:f5:ee:4b:cf:0e:14:
         cc:d5:2e:33:cf:b3:cb:9e:c5:7a:18:62:b8:fa:c5:06:1e:dc:
         08:13:72:6e:fc:d6:e7:bf:02:07:64:b7:63:7f:99:ba:a5:7f:
         84:1e:13:c1:1c:53:28:22:02:38:d8:c4:b4:39:de:fd:f1:4b:
         67:1d:17:ad:ba:3f:d8:cf:51:44:00:2d:0a:e4:3c:57:0b:4e:
         09:4b:a0:23:a8:ce:54:6e:9c:1a:4e:04:1c:9e:5c:81:5c:a1:
         e0:36:29:00:53:67:a3:47:4b:d5:f3:e5:6c:cb:60:82:d7:b5:
         92:44:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org