Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3233322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          w8Mp3dkJBlnlUOl2gKkV41jokbrJCVvIlfXxyL6amnY=
Subject key identifier:   D2:98:75:A3:1A:71:D4:42:C4:B0:33:DC:A0:13:F2:F7:F6:84:60:47
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2C90570B157FEF0D7C5B3097EA318147F3AC43C3
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        179.108.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:90:57:0b:15:7f:ef:0d:7c:5b:30:97:ea:31:81:47:f3:ac:43:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:76:c2:26:c4:8b:f9:b3:b9:5d:b5:56:a8:
                    5f:63:c0:df:58:b6:00:14:cd:b5:74:a0:ad:1f:94:
                    ff:fe:8d:87:18:84:20:8c:fd:4f:6d:6e:e1:b5:85:
                    da:db:01:d9:25:22:f8:eb:98:ff:3b:e8:be:4f:2e:
                    7c:c6:16:87:4f:97:61:c8:38:0f:41:ff:0f:89:a5:
                    1b:b6:10:92:cf:cd:61:eb:f0:fc:2d:56:28:3d:23:
                    d8:b9:59:08:5c:b8:a0:f4:ac:fd:34:43:48:a3:8c:
                    68:22:95:8f:70:a6:fe:62:91:46:c7:00:eb:98:fe:
                    96:f0:50:0f:bc:9a:3b:9b:18:0f:59:1d:fd:2a:f6:
                    8a:49:f7:ba:21:47:98:f3:e1:92:78:d4:77:d8:90:
                    2a:ad:73:0f:b2:bf:1b:a4:d8:06:0e:b6:62:65:73:
                    48:fc:ef:c7:b3:64:51:b7:c2:1b:53:a3:36:ed:c2:
                    73:4d:b3:1c:8a:e8:b2:66:2c:f0:9f:b3:93:8f:73:
                    7b:c3:ca:73:67:54:f2:a2:d6:73:c0:7b:66:83:dd:
                    b0:fd:70:ea:51:a5:84:c1:ab:8b:0d:4e:28:a0:e5:
                    90:eb:8b:e1:03:46:55:c3:e3:a7:6d:bd:dd:24:a4:
                    f4:49:e0:30:95:4a:b0:7a:45:b2:10:73:a8:21:df:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:98:75:A3:1A:71:D4:42:C4:B0:33:DC:A0:13:F2:F7:F6:84:60:47
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:5f:93:cd:e4:c1:ce:dc:d8:5e:f9:68:e0:32:f7:eb:99:
         60:f1:fd:42:5b:6f:08:d9:2e:09:c3:e7:6b:ef:2a:74:59:30:
         e4:d9:62:7a:69:13:fd:0f:4b:e5:a2:78:61:10:f2:ed:80:78:
         4b:8a:37:db:ed:82:7e:0b:9e:2e:4a:37:fc:1e:21:13:ec:c1:
         71:b4:a4:a3:55:ca:87:77:ba:16:f2:fb:af:33:3a:cb:96:c6:
         79:80:a2:47:2f:21:5d:74:e4:8d:3b:a6:3c:32:24:f2:9e:94:
         bb:bf:30:83:e2:6e:04:69:51:f7:57:1a:71:73:ff:96:93:1e:
         a5:16:90:c4:9a:5a:15:07:19:3a:94:5e:0b:c9:58:41:e2:0d:
         ec:e2:d4:aa:8e:8a:e4:77:35:3d:43:99:8a:e4:1f:a0:00:a2:
         df:75:fe:0a:d4:f7:ff:f4:23:33:55:17:e2:d7:90:0a:7b:ca:
         1a:50:36:b4:3b:89:92:56:10:b6:3d:31:e5:ac:d9:a0:b4:42:
         ea:eb:25:e1:c0:14:84:b2:81:a2:4c:f4:42:dc:bf:c6:b9:02:
         3c:75:17:ec:1b:b1:f6:74:8f:0f:df:dd:d4:20:04:fa:f6:2a:
         70:c8:d7:8c:18:65:54:ee:7a:53:86:a3:a0:4a:5c:7c:ca:ea:
         5c:fe:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org