Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          HvcWfNJpgsxlmpnSz8VqwJuNCNC5VdgrOszuMKc4sos=
Subject key identifier:   27:29:50:42:6A:CB:58:C3:91:3D:3E:35:88:24:1B:33:91:CF:07:4B
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       33C7971822CF3C999A56C6B6877527240FA5D1A5
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        179.108.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:97:18:22:cf:3c:99:9a:56:c6:b6:87:75:27:24:0f:a5:d1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:40:a5:6a:3e:81:04:3a:3a:56:d2:5c:d2:
                    58:7c:ea:d0:ff:c0:ec:d6:d2:0f:94:d5:5a:64:56:
                    13:8b:68:fd:67:7a:62:d2:1f:2d:28:94:e6:ef:24:
                    da:39:da:b4:47:ab:75:0f:56:e6:5f:86:42:67:68:
                    34:22:1a:43:58:d5:df:a1:b5:b3:bf:3c:1d:b6:13:
                    54:d6:1c:28:5b:8b:1b:2c:da:18:e2:29:fa:d3:93:
                    61:0e:5e:23:73:82:48:39:87:c3:e4:50:ea:de:cb:
                    ba:d8:15:cf:07:66:7b:62:79:74:2c:5b:25:eb:f5:
                    dd:34:82:18:48:a4:b1:d1:8d:6b:83:52:5e:89:34:
                    e0:53:ba:ae:f8:c9:22:0e:66:da:b7:0b:28:7a:ff:
                    2f:b7:36:4b:5c:4d:97:da:fc:12:9b:b3:4b:8a:77:
                    40:20:16:df:8b:44:74:a5:73:62:ef:57:8d:9f:a6:
                    54:6b:32:f0:53:46:11:26:5c:c4:7a:ca:e1:ac:b9:
                    d3:8e:37:6b:18:31:b3:24:56:5b:c3:9c:d4:84:90:
                    5a:2e:6c:b3:9b:4c:b2:29:38:55:18:b0:fb:6e:8f:
                    45:8c:87:7b:51:cd:d2:de:fd:d4:26:ed:76:a5:6b:
                    1d:db:74:80:39:0a:aa:e4:4c:28:32:38:c1:dc:0c:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:50:42:6A:CB:58:C3:91:3D:3E:35:88:24:1B:33:91:CF:07:4B
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:79:95:77:eb:02:36:ca:cc:0b:2e:ae:e9:51:10:ff:bd:
         81:c2:d9:8b:82:8b:ee:48:49:96:57:0a:be:f8:e8:ee:74:2c:
         37:54:dc:90:99:17:23:8a:52:69:56:6d:36:31:4d:6e:41:cc:
         7c:37:92:98:8c:3a:89:b6:46:1a:e7:16:a4:1e:86:4b:fe:28:
         a6:76:43:58:0a:2d:e1:f1:d3:5c:63:bb:73:6a:0c:a5:b8:4e:
         86:02:6f:06:5b:7d:b2:64:b3:d4:0d:24:2a:b2:56:bf:e1:73:
         b3:ac:7e:e5:b2:72:8a:db:b1:0b:a7:fa:9b:1e:77:5a:af:88:
         52:c3:1f:3e:af:d5:39:f7:96:5d:16:19:d4:9d:cd:b1:15:b6:
         8c:8c:8d:9c:8f:42:30:33:1f:b7:40:a2:8b:79:ce:3e:d7:bb:
         cf:0c:6f:b2:ac:a2:11:2e:3f:4b:67:f6:2f:4e:d1:5e:26:32:
         d2:6d:ed:ba:c6:40:22:15:94:1c:9a:3e:26:48:2a:0a:33:24:
         4e:4e:d0:a0:62:b7:b0:52:c0:9a:85:d0:6e:7f:c7:c9:1b:f6:
         fb:cc:cc:fa:49:84:b1:3d:7a:30:77:0d:ac:f1:73:59:4a:45:
         bb:ce:3d:d3:d1:de:ab:d7:cd:4e:88:aa:d9:00:3d:06:53:f9:
         a4:72:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org