Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          5K9RDjDnKpbXMx07WjS0dQAK9HBzX5GzkTIasXXnfbA=
Subject key identifier:   45:4D:E4:B5:E3:5C:5F:40:A9:D5:19:34:02:1B:A5:53:DF:49:39:0F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7A987499194EB0EA47E375F57FBD65EEF30AAE7D
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:16 +0000
ROA not before:           Sat 16 Oct 2021 16:11:16 +0000
ROA not after:            Sat 15 Oct 2022 16:16:16 +0000
asID:                     262691
IP address blocks:        179.108.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:98:74:99:19:4e:b0:ea:47:e3:75:f5:7f:bd:65:ee:f3:0a:ae:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:16 2021 GMT
            Not After : Oct 15 16:16:16 2022 GMT
        Subject: CN=3082010A0282010100C32C3698A3F31E3C217E44CA39DC203D9B8AE970EFF6F683FFB99CA4EA40E228CA84E47BB23EA9A86C8708EB8088D370A80F7FD348DEBD1BFAD0836132011EB6DF56E75D3A873953B14B2C2E3EE6DB790242763867B6F65CB7CE6D6A0D807405C53731CDB054628A1CCD76DF2617E5420DF29BBC9A521DB78373CF29071A2319F0151335902B2CAD4282AA12D911358F0BB5B62CACD51094796F114EF42341DDA783FFF9B77847B746FC5CEB25421CE9D8EBB07FC5D4C64C93CCA62EF3B1F48CF4EA30252E1455CAECCBE0594718C8B0354C85E059DC4265B57641EB7C9D09CFB5821EDBF86A17387C437B8044F65FCD5A72C6D5B5AF4AB318A3C5E9B17099830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:36:98:a3:f3:1e:3c:21:7e:44:ca:39:dc:
                    20:3d:9b:8a:e9:70:ef:f6:f6:83:ff:b9:9c:a4:ea:
                    40:e2:28:ca:84:e4:7b:b2:3e:a9:a8:6c:87:08:eb:
                    80:88:d3:70:a8:0f:7f:d3:48:de:bd:1b:fa:d0:83:
                    61:32:01:1e:b6:df:56:e7:5d:3a:87:39:53:b1:4b:
                    2c:2e:3e:e6:db:79:02:42:76:38:67:b6:f6:5c:b7:
                    ce:6d:6a:0d:80:74:05:c5:37:31:cd:b0:54:62:8a:
                    1c:cd:76:df:26:17:e5:42:0d:f2:9b:bc:9a:52:1d:
                    b7:83:73:cf:29:07:1a:23:19:f0:15:13:35:90:2b:
                    2c:ad:42:82:aa:12:d9:11:35:8f:0b:b5:b6:2c:ac:
                    d5:10:94:79:6f:11:4e:f4:23:41:dd:a7:83:ff:f9:
                    b7:78:47:b7:46:fc:5c:eb:25:42:1c:e9:d8:eb:b0:
                    7f:c5:d4:c6:4c:93:cc:a6:2e:f3:b1:f4:8c:f4:ea:
                    30:25:2e:14:55:ca:ec:cb:e0:59:47:18:c8:b0:35:
                    4c:85:e0:59:dc:42:65:b5:76:41:eb:7c:9d:09:cf:
                    b5:82:1e:db:f8:6a:17:38:7c:43:7b:80:44:f6:5f:
                    cd:5a:72:c6:d5:b5:af:4a:b3:18:a3:c5:e9:b1:70:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4D:E4:B5:E3:5C:5F:40:A9:D5:19:34:02:1B:A5:53:DF:49:39:0F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:20:99:96:5e:1b:cb:db:0b:38:b7:f7:c5:ea:4f:a6:7f:d6:
         0e:2a:23:d7:92:68:77:39:51:7e:55:ce:c8:bf:a3:c6:ab:d6:
         50:d5:5f:95:99:ad:3b:52:ea:da:04:9d:6c:d5:97:c4:4d:c4:
         4d:41:98:67:51:f0:36:b5:f6:a2:9f:59:63:31:27:ec:f0:c0:
         48:f4:27:d1:e5:cd:50:7f:5a:37:83:57:9b:55:50:55:c6:77:
         63:e7:39:82:03:a6:2e:6c:ff:cb:db:57:e9:0c:6e:b9:88:c8:
         ba:ac:88:35:29:8e:12:eb:c9:e4:62:a8:f2:05:96:c7:a7:c2:
         28:65:dc:f5:19:66:2d:81:1a:fe:a3:cd:5b:8c:16:7c:b6:3b:
         92:30:62:11:d0:21:1a:20:8d:95:db:2b:22:b8:a0:5e:5f:42:
         7d:dd:85:ee:69:34:c4:7d:dd:16:07:2b:e5:0f:7a:ec:9f:6c:
         9b:8f:87:ac:2e:2a:45:01:7e:8d:33:f1:f9:6c:e7:af:34:25:
         d1:e2:96:12:f6:dc:74:43:fa:86:70:93:42:a0:93:0b:5b:df:
         86:c4:04:a4:59:1f:c7:17:92:1f:f8:f1:88:b0:5e:25:d5:db:
         4a:ec:db:24:23:05:2e:d2:a1:a5:79:08:e8:a0:f9:c6:12:b4:
         af:3c:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org