Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          MacsmlxNiQ2TNivTB9KPeb6BtthEhooOJwde0RC3P0E=
Subject key identifier:   92:A3:C7:8E:A6:29:8F:18:64:E8:40:6B:C0:39:2F:E3:CC:1F:7D:74
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       43A5A8FEAD9B987D4C3876EFDF4D503B841D17A7
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        179.108.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a5:a8:fe:ad:9b:98:7d:4c:38:76:ef:df:4d:50:3b:84:1d:17:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject: CN=3082010A0282010100AF2D28EE8245C7A6CF1CEC2A6E92B35B1F98A776EE0A68FFBEC94DD6D3A062378AD71CDF198266D95CF9C0A408FCB9B5BD489C44BE76975D0B867077FAC42175BDBCB5516D7E8B8E79A14726D446896E3DAE5BA1C889B5A720E2E729FDDCE9ECAD1503F6F3CE55F72B8D12ADD4F600E17C44AB3E161E025EECB5D214EA72007E864004A7B582FC2A1C48525FCF0196531B87F97AF190603C27154AAED431EF36D01EA3F7DEE1365F0370EEF2D0B57FB5F487324D013CA7E69DCFF6A11141944CAECA87C0E9616E99202FB67C2DF8367FFAB991CBCAD69F374050AE87761F454EC45092B027546706DECE8A0E041A77EDC41E80BCAE81A4D2EE6D13AD183109850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:28:ee:82:45:c7:a6:cf:1c:ec:2a:6e:92:
                    b3:5b:1f:98:a7:76:ee:0a:68:ff:be:c9:4d:d6:d3:
                    a0:62:37:8a:d7:1c:df:19:82:66:d9:5c:f9:c0:a4:
                    08:fc:b9:b5:bd:48:9c:44:be:76:97:5d:0b:86:70:
                    77:fa:c4:21:75:bd:bc:b5:51:6d:7e:8b:8e:79:a1:
                    47:26:d4:46:89:6e:3d:ae:5b:a1:c8:89:b5:a7:20:
                    e2:e7:29:fd:dc:e9:ec:ad:15:03:f6:f3:ce:55:f7:
                    2b:8d:12:ad:d4:f6:00:e1:7c:44:ab:3e:16:1e:02:
                    5e:ec:b5:d2:14:ea:72:00:7e:86:40:04:a7:b5:82:
                    fc:2a:1c:48:52:5f:cf:01:96:53:1b:87:f9:7a:f1:
                    90:60:3c:27:15:4a:ae:d4:31:ef:36:d0:1e:a3:f7:
                    de:e1:36:5f:03:70:ee:f2:d0:b5:7f:b5:f4:87:32:
                    4d:01:3c:a7:e6:9d:cf:f6:a1:11:41:94:4c:ae:ca:
                    87:c0:e9:61:6e:99:20:2f:b6:7c:2d:f8:36:7f:fa:
                    b9:91:cb:ca:d6:9f:37:40:50:ae:87:76:1f:45:4e:
                    c4:50:92:b0:27:54:67:06:de:ce:8a:0e:04:1a:77:
                    ed:c4:1e:80:bc:ae:81:a4:d2:ee:6d:13:ad:18:31:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:C7:8E:A6:29:8F:18:64:E8:40:6B:C0:39:2F:E3:CC:1F:7D:74
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:e3:b8:5e:75:06:42:83:8a:c9:4c:e5:47:c8:43:2e:f9:
         fc:00:d7:1a:f1:e6:8e:65:d5:52:8d:94:9c:3f:83:10:4f:88:
         db:78:04:4e:41:57:a7:8d:ec:26:61:d8:9f:9d:4d:d3:1a:43:
         ca:1c:cf:8b:53:a6:0e:7f:5d:3d:d6:36:69:ac:c4:a7:f2:ff:
         00:ce:46:1b:4c:13:59:d7:90:57:bb:e9:c2:1b:f6:90:b6:f9:
         64:67:5d:3c:a7:71:72:87:55:b9:ed:f5:63:d0:dc:3a:94:17:
         48:b7:95:c5:87:63:23:aa:32:f6:0d:f3:67:00:f8:ce:48:e8:
         7f:6f:f9:d9:32:96:53:b8:08:0b:11:39:e1:4d:36:07:a1:8d:
         45:32:e7:17:de:6c:4e:b1:f1:37:6d:87:b7:86:0f:bc:f2:8e:
         2f:f3:53:8b:ac:2d:51:3b:53:0f:c9:6d:44:11:55:71:2c:f6:
         a1:05:57:0c:e0:f7:f8:15:35:0c:8c:45:81:7d:f9:f3:b1:03:
         a4:80:f3:6d:39:ad:a0:45:3a:a4:4c:1d:77:5e:a0:58:11:fd:
         29:24:3c:83:ec:9e:4d:ea:97:6a:78:c3:cb:98:ca:7e:88:bd:
         fa:2b:f8:11:58:41:ec:8a:7c:55:b6:fe:45:67:1e:df:78:cc:
         3b:04:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org