Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          09AlvaO0OghamBmVuDjziV0nYgwTS2ExasdNlGotGlQ=
Subject key identifier:   6D:13:00:95:E1:28:4A:29:99:1E:92:11:17:F3:84:84:86:FA:3F:3C
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       05EF8A6D5276643E6A6B2D727E3D607B5FE15EA9
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        179.108.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ef:8a:6d:52:76:64:3e:6a:6b:2d:72:7e:3d:60:7b:5f:e1:5e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject: CN=3082010A0282010100B34D3BC6D5114B808CB5B1F1F7542132EC3ACCE84BAA94022120D52CE72538057E17528327185921DA0CB85F3B3E822389A2D0F620AFFB8FA3BDA95D7785D5AFE9112DF07D89A56797EE667FA21B6D16B21F4E114CC57DB61057492D06F55AD6DCE6813D1F77B50B629F75A9BBFD7AAFF0C26B6DE538FD9A84247B5D414EFD084C86D0081C7D4D44CA7AFEDF763EBCE8DD5162293DB7A18EC429FF5B70716232A0E00B189BA1BB28B2DDE1854F663C08338466348C1B8562725C66ECE5CE079D1E0FCB5DCFD3364769B935F55394E094AA0F332FF8FC2E98425D0201D2E9A242E4B088F24E6BF806FE827FF0CA5084557D70A0EFFDCE5A6E3058B6FB341C3AA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:3b:c6:d5:11:4b:80:8c:b5:b1:f1:f7:54:
                    21:32:ec:3a:cc:e8:4b:aa:94:02:21:20:d5:2c:e7:
                    25:38:05:7e:17:52:83:27:18:59:21:da:0c:b8:5f:
                    3b:3e:82:23:89:a2:d0:f6:20:af:fb:8f:a3:bd:a9:
                    5d:77:85:d5:af:e9:11:2d:f0:7d:89:a5:67:97:ee:
                    66:7f:a2:1b:6d:16:b2:1f:4e:11:4c:c5:7d:b6:10:
                    57:49:2d:06:f5:5a:d6:dc:e6:81:3d:1f:77:b5:0b:
                    62:9f:75:a9:bb:fd:7a:af:f0:c2:6b:6d:e5:38:fd:
                    9a:84:24:7b:5d:41:4e:fd:08:4c:86:d0:08:1c:7d:
                    4d:44:ca:7a:fe:df:76:3e:bc:e8:dd:51:62:29:3d:
                    b7:a1:8e:c4:29:ff:5b:70:71:62:32:a0:e0:0b:18:
                    9b:a1:bb:28:b2:dd:e1:85:4f:66:3c:08:33:84:66:
                    34:8c:1b:85:62:72:5c:66:ec:e5:ce:07:9d:1e:0f:
                    cb:5d:cf:d3:36:47:69:b9:35:f5:53:94:e0:94:aa:
                    0f:33:2f:f8:fc:2e:98:42:5d:02:01:d2:e9:a2:42:
                    e4:b0:88:f2:4e:6b:f8:06:fe:82:7f:f0:ca:50:84:
                    55:7d:70:a0:ef:fd:ce:5a:6e:30:58:b6:fb:34:1c:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:13:00:95:E1:28:4A:29:99:1E:92:11:17:F3:84:84:86:FA:3F:3C
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:83:18:3b:6d:5a:00:21:79:87:a7:41:2f:c0:56:15:97:
         72:e4:cf:1a:33:2e:a5:e5:9e:7d:4c:46:9b:0a:0a:8c:24:d5:
         e2:d0:9a:73:1f:52:1c:87:2b:1f:f8:77:4c:c3:58:47:d2:d0:
         e5:60:69:f9:3c:14:44:f3:a0:a1:de:3b:c0:58:54:88:68:fb:
         71:52:8e:1a:2f:78:46:6b:7f:78:50:89:91:fd:aa:95:a6:3e:
         67:f9:10:d8:67:79:70:e7:67:3c:11:1c:81:ed:0b:21:61:d0:
         ee:03:1f:32:82:93:05:30:4d:d9:32:b4:8d:2c:fe:42:6f:15:
         8b:42:47:5a:b2:0f:cf:15:ae:9d:ba:5e:8e:3d:bf:d4:92:c4:
         8f:6b:2a:6f:76:31:58:1b:5f:0e:12:f4:40:47:48:92:e9:ca:
         b0:d4:3b:12:fd:7f:a2:b0:13:d0:e9:82:c1:1b:0e:af:59:e4:
         48:2f:23:2c:69:ac:31:47:2a:5d:07:27:fa:4a:8c:e7:31:83:
         3a:03:28:92:55:7c:42:42:16:ca:c4:96:c3:84:19:93:0b:9c:
         fa:60:3b:b5:17:26:c6:a4:02:59:c7:c7:19:8c:50:bc:8e:31:
         06:97:f8:be:42:f0:98:58:8d:50:a5:71:a7:b5:05:5b:08:b0:
         5b:d2:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org