Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32302d3230203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          Wz+v7doavESj7TKO5v7CIq/GnQhIs7l1i5IE45b9Gjk=
Subject key identifier:   96:64:86:57:48:7C:9F:8C:7D:F3:66:64:4C:E4:42:6A:62:70:61:7A
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       0C0A411B4907617157085B479EA660E0BF81915A
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32302d3230203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        186.194.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:41:1b:49:07:61:71:57:08:5b:47:9e:a6:60:e0:bf:81:91:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:b2:73:9f:ae:a9:57:7e:b4:67:66:b8:d5:
                    2f:a9:95:9d:3a:6e:47:f3:ec:73:de:aa:29:c5:5e:
                    87:48:12:29:3c:69:fb:93:97:38:e3:05:e5:f0:9a:
                    bc:32:bf:b4:76:4c:26:c4:06:29:ed:bd:61:77:aa:
                    a8:28:31:3c:06:27:5a:2f:3a:1d:fe:a7:45:3a:40:
                    77:00:33:ff:48:44:8f:3c:56:9f:ac:70:76:c4:60:
                    9c:a9:0e:72:b6:14:f2:18:38:84:ea:d9:c2:20:05:
                    49:75:8a:25:ed:0c:45:b4:0c:6a:f1:84:b5:b2:76:
                    76:3e:95:d0:40:40:2d:1d:33:65:71:40:98:e9:bd:
                    40:ed:7e:71:16:5a:14:57:59:29:d2:3b:8e:bd:b2:
                    91:52:c0:e9:ff:1a:c7:5e:e3:ba:ca:f3:ab:b4:1a:
                    87:46:2b:05:85:df:37:8e:07:b2:c2:0d:04:6d:26:
                    0b:02:e7:d7:55:c0:aa:d6:ca:b3:2d:fa:5e:72:9f:
                    96:48:51:f7:6d:a5:e4:33:99:5a:a3:dd:31:09:50:
                    83:ac:36:08:bb:19:c1:38:95:a9:4f:b6:ef:a0:16:
                    3c:5c:4e:61:6f:62:d3:5c:27:86:7f:79:bf:5b:d7:
                    cc:61:c3:2d:30:50:d7:42:4a:d6:c0:71:de:d9:9e:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:86:57:48:7C:9F:8C:7D:F3:66:64:4C:E4:42:6A:62:70:61:7A
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:08:3a:9b:a8:17:d0:a2:36:5f:16:e5:a3:0b:c8:4c:43:02:
         3b:cd:d5:2e:fb:b6:18:19:95:b4:87:c3:8d:1d:06:bf:a1:99:
         46:5c:48:81:55:76:dc:69:af:c1:51:1a:5f:80:5d:91:cb:ab:
         ba:26:e4:f7:78:50:e5:59:39:6b:07:5b:6e:b7:75:89:39:01:
         de:9f:f7:dd:46:16:d1:64:77:0c:65:58:e1:29:a5:df:16:e1:
         cc:68:97:bb:d5:11:74:48:f5:0c:62:d6:a9:d8:09:0e:33:66:
         6d:35:9d:f5:75:39:eb:00:5a:d8:6d:66:f5:19:f4:1f:9d:91:
         2d:6f:83:67:0b:3d:eb:71:a1:00:25:1f:08:f5:2f:3b:05:3c:
         fd:3c:18:72:67:22:9c:f2:74:52:1f:5e:74:2b:ad:8e:80:a5:
         74:90:3c:c8:76:42:33:3d:bf:52:0a:1b:93:da:88:c3:83:01:
         2a:83:83:e4:08:69:f0:cf:79:38:f4:00:23:e6:99:2d:2d:97:
         2b:bb:d7:93:76:7a:d5:a2:4d:d1:09:48:0b:c8:b5:76:b6:43:
         a4:26:dc:0f:da:2b:5d:72:18:8e:40:77:43:7d:77:14:a5:b1:
         f1:0d:50:8d:9a:05:7f:3b:0c:e0:d8:bd:11:c7:3b:b5:61:07:
         e7:93:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org