Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          bJkHscvb6uF1nsRV5l3goBzxLI/qTco/A8AyTHEJGdI=
Subject key identifier:   07:A1:31:03:6F:D1:9C:4A:4E:9E:92:97:D5:30:85:BC:4B:33:66:10
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       54AA352DE9325B98C61F5106CD216579A2E56490
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        179.108.232.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:aa:35:2d:e9:32:5b:98:c6:1f:51:06:cd:21:65:79:a2:e5:64:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:1f:ea:46:ab:8a:96:a8:02:98:d5:03:1c:
                    e4:3a:15:e9:99:1e:08:1d:4e:29:b1:92:53:32:de:
                    4c:6c:84:23:d8:b3:33:97:9e:9b:ef:d5:e8:4d:cd:
                    d3:37:3f:f6:2d:c0:19:38:bb:f1:cb:69:a9:60:a5:
                    91:dc:ed:9f:18:83:15:a2:31:d4:c0:27:aa:e7:87:
                    13:14:68:5c:75:2b:02:19:ca:f3:f7:1b:68:b6:96:
                    a4:17:e2:3c:5a:1c:d0:ce:4e:c4:48:e7:95:06:fe:
                    f8:1e:54:be:dc:bd:20:d7:10:50:7b:08:2b:1b:22:
                    60:72:5c:13:5c:37:9e:d3:06:c2:7d:ce:a0:8f:0f:
                    e6:0b:22:29:6c:4b:c9:46:d7:24:5d:d2:43:6a:b2:
                    a4:77:af:5b:c4:8a:97:f6:6a:4a:1c:15:b2:87:04:
                    c8:9e:de:37:78:1b:5e:e0:10:fa:44:82:4d:45:c5:
                    c7:1d:29:68:8c:e1:ca:79:89:21:bb:00:e9:03:98:
                    02:62:f4:4a:63:10:1a:c2:39:a8:4d:81:09:be:32:
                    08:26:ef:4a:65:f2:c8:39:ca:c8:e9:5e:57:e2:dc:
                    08:c2:60:50:6d:4e:16:c0:c8:5a:fa:8a:bb:1f:ed:
                    ac:9f:89:06:3c:3c:88:0e:0e:c1:de:64:3c:c0:c6:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:31:03:6F:D1:9C:4A:4E:9E:92:97:D5:30:85:BC:4B:33:66:10
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:d0:f6:15:09:1b:54:db:4f:cb:b2:fd:0e:e6:dd:79:9d:a3:
         0b:53:58:5e:c9:fe:52:62:52:1d:bf:65:d2:c0:43:ac:40:5e:
         59:40:3b:c1:87:38:8e:49:08:74:9b:1e:24:e6:d9:ef:5c:0f:
         eb:62:a0:3f:85:45:05:3c:54:bc:15:55:9e:cd:e4:dc:93:fa:
         76:1e:f5:e8:85:b7:bd:5d:7b:df:ca:d2:7c:42:64:62:c1:ab:
         06:03:df:92:03:ed:78:04:45:12:6d:11:ba:ba:86:12:99:86:
         07:88:ee:8e:ee:c7:6e:bd:16:6b:93:87:4d:02:02:34:99:08:
         f5:07:4b:45:7b:fc:00:23:c0:49:36:d5:fd:f6:9e:4c:c7:a4:
         d4:91:2e:cb:8d:14:63:8b:39:dd:68:03:0a:d7:f7:fa:58:f4:
         b3:86:65:c9:06:f0:ff:a6:27:0b:20:e6:c5:c0:98:be:25:26:
         be:fc:c8:26:e2:d1:2a:1a:ef:3f:37:4e:9e:09:56:58:14:2f:
         1d:56:d7:b0:d7:f6:4f:bd:7c:37:6d:a1:6a:d2:d0:1d:0a:b6:
         89:68:ef:46:84:60:5b:0f:a3:28:c7:94:a1:d3:c8:53:2f:4d:
         55:00:5e:00:81:3a:6c:b0:dd:94:49:9d:3a:58:c4:1f:be:ef:
         4e:92:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org