Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          JTRI7ihOhv26WvgE7ppJqTCA3k7myHDqPQ6CDkz1Hvs=
Subject key identifier:   4C:36:BA:4B:5C:5F:BA:A1:C8:0E:DB:4E:32:BC:7C:2B:5F:26:82:6F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       27B7D18BB114851306235769BD76F9A3310D8243
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        179.108.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b7:d1:8b:b1:14:85:13:06:23:57:69:bd:76:f9:a3:31:0d:82:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:e1:db:f4:eb:a9:3a:2f:12:06:32:f2:7c:
                    77:9e:c1:c0:cd:e1:4d:9c:e6:e3:8a:5a:43:26:68:
                    0f:4d:fa:2d:63:f4:db:31:06:9e:3b:d7:eb:37:a6:
                    72:0a:4b:4d:9a:fe:50:f8:b9:3f:d2:43:0e:ab:2d:
                    10:f2:6d:60:0b:ef:af:bc:87:7c:17:fb:e3:83:04:
                    18:b3:e5:45:5f:2b:ef:e1:8b:53:88:07:93:e5:b1:
                    d3:e7:40:b7:5e:f0:f5:57:0d:d4:e7:d7:85:c4:27:
                    41:32:b4:09:98:d3:69:e1:2b:32:32:01:e1:ac:94:
                    72:16:61:fa:48:c4:c2:44:09:2b:ad:88:fa:a2:40:
                    ea:62:1b:42:a3:e1:61:2a:76:49:4c:1d:f7:db:24:
                    2b:e8:b3:c5:c6:e6:cd:70:29:bf:6e:e3:01:a7:c5:
                    7b:9c:5c:a0:f4:21:ab:cf:ec:dd:cb:a7:90:91:6b:
                    9b:08:2a:45:9a:2a:95:fc:63:37:4e:19:47:5b:27:
                    31:92:d3:98:e8:0f:f0:8f:9d:c9:f1:2f:96:ff:98:
                    46:26:a1:ba:ec:58:a0:43:b9:bb:3f:63:a5:5b:31:
                    23:70:5f:d7:06:69:33:c4:56:31:38:fb:90:fb:be:
                    8a:2c:d1:46:92:7d:08:e8:52:bd:a8:ef:0e:0c:de:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:BA:4B:5C:5F:BA:A1:C8:0E:DB:4E:32:BC:7C:2B:5F:26:82:6F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:8c:72:ad:35:5b:6b:6e:97:56:04:77:0b:a8:73:df:c7:
         23:2f:45:1b:20:25:3f:47:bb:8e:b3:5d:8a:d2:0a:bf:d0:b1:
         52:14:62:fd:e0:b0:9c:49:46:f5:60:17:9a:82:8f:fa:e3:68:
         45:fc:56:82:cb:2a:28:36:54:f6:d7:6a:3f:9c:d0:01:e2:76:
         2e:73:e0:03:03:ca:c9:53:28:a7:17:31:3b:06:fa:8a:a4:51:
         3f:b9:03:48:0a:13:af:b6:54:a4:43:b5:a1:58:95:1c:82:f5:
         7e:4e:d8:f7:f3:85:c6:12:18:88:4c:c8:e9:b7:68:f2:b8:a7:
         d2:c2:df:e5:8d:68:2e:e6:64:f1:b1:46:be:69:36:6b:79:c6:
         e9:3f:bf:37:f6:06:2f:aa:68:21:7e:6f:8e:5b:59:d0:a3:7a:
         46:55:43:91:ca:89:4f:20:a0:a8:6f:89:d1:3d:87:ed:d8:e6:
         31:82:2b:58:8a:24:ab:f0:31:cb:71:9b:bf:51:ff:e6:7a:5a:
         5c:48:bb:5d:d3:82:ce:bf:e2:e9:4d:ff:08:9a:19:af:51:62:
         78:86:e3:f3:78:15:5f:bc:0a:e9:98:b0:e0:e0:de:62:21:03:
         85:86:7c:2a:f3:80:16:67:46:47:38:7b:1d:90:4a:d0:0e:ec:
         5f:88:2e:38
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJ7fRi7EUhRMGI1dpvXb5ozENgkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTRaFw0yMjEwMTUxNjE2MTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIxMkUxREJGNEVCQTkzQTJG
MTIwNjMyRjI3Qzc3OUVDMUMwQ0RFMTREOUNFNkUzOEE1QTQzMjY2ODBGNERGQTJE
NjNGNERCMzEwNjlFM0JEN0VCMzdBNjcyMEE0QjREOUFGRTUwRjhCOTNGRDI0MzBF
QUIyRDEwRjI2RDYwMEJFRkFGQkM4NzdDMTdGQkUzODMwNDE4QjNFNTQ1NUYyQkVG
RTE4QjUzODgwNzkzRTVCMUQzRTc0MEI3NUVGMEY1NTcwREQ0RTdENzg1QzQyNzQx
MzJCNDA5OThEMzY5RTEyQjMyMzIwMUUxQUM5NDcyMTY2MUZBNDhDNEMyNDQwOTJC
QUQ4OEZBQTI0MEVBNjIxQjQyQTNFMTYxMkE3NjQ5NEMxREY3REIyNDJCRThCM0M1
QzZFNkNENzAyOUJGNkVFMzAxQTdDNTdCOUM1Q0EwRjQyMUFCQ0ZFQ0REQ0JBNzkw
OTE2QjlCMDgyQTQ1OUEyQTk1RkM2MzM3NEUxOTQ3NUIyNzMxOTJEMzk4RTgwRkYw
OEY5REM5RjEyRjk2RkY5ODQ2MjZBMUJBRUM1OEEwNDNCOUJCM0Y2M0E1NUIzMTIz
NzA1RkQ3MDY2OTMzQzQ1NjMxMzhGQjkwRkJCRThBMkNEMTQ2OTI3RDA4RTg1MkJE
QThFRjBFMENERTc0OEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwhLh2/TrqTovEgYy8nx3nsHAzeFNnObjilpDJmgPTfotY/TbMQae
O9frN6ZyCktNmv5Q+Lk/0kMOqy0Q8m1gC++vvId8F/vjgwQYs+VFXyvv4YtTiAeT
5bHT50C3XvD1Vw3U59eFxCdBMrQJmNNp4SsyMgHhrJRyFmH6SMTCRAkrrYj6okDq
YhtCo+FhKnZJTB332yQr6LPFxubNcCm/buMBp8V7nFyg9CGrz+zdy6eQkWubCCpF
miqV/GM3ThlHWycxktOY6A/wj53J8S+W/5hGJqG67FigQ7m7P2OlWzEjcF/XBmkz
xFYxOPuQ+76KLNFGkn0I6FK9qO8ODN50iwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEw2uktcX7qhyA7bTjK8fCtfJoJvMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzczOTJlMzEzMDM4MmUzMjMz
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbOgwDQYJKoZIhvcNAQELBQADggEBAI4ujHKtNVtrbpdWBHcLqHPfxyMvRRsg
JT9Hu46zXYrSCr/QsVIUYv3gsJxJRvVgF5qCj/rjaEX8VoLLKig2VPbXaj+c0AHi
di5z4AMDyslTKKcXMTsG+oqkUT+5A0gKE6+2VKRDtaFYlRyC9X5O2PfzhcYSGIhM
yOm3aPK4p9LC3+WNaC7mZPGxRr5pNmt5xuk/vzf2Bi+qaCF+b45bWdCjekZVQ5HK
iU8goKhvidE9h+3Y5jGCK1iKJKvwMctxm79R/+Z6WlxIu13Tgs6/4ulN/wiaGa9R
YniG4/N4FV+8CumYsODg3mIhA4WGfCrzgBZnRkc4ex2QStAO7F+ILjg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org