Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          rwT+xVmjkuD2RL8Exo5MyBrdO8cRMS4uKEDu3Tjo2a8=
Subject key identifier:   23:B4:4F:F9:C0:D5:DE:09:3E:79:CC:2A:67:55:29:58:A9:0A:E1:D6
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       313B37020D60DFB44FEE63297277F5950C7EA104
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:11 +0000
ROA not before:           Sat 16 Oct 2021 16:11:11 +0000
ROA not after:            Sat 15 Oct 2022 16:16:11 +0000
asID:                     262691
IP address blocks:        186.194.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3b:37:02:0d:60:df:b4:4f:ee:63:29:72:77:f5:95:0c:7e:a1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:11 2021 GMT
            Not After : Oct 15 16:16:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:2c:18:70:21:e5:c4:06:67:0f:58:9f:f4:
                    43:17:14:fc:18:8a:99:7c:e7:cd:df:52:e4:c9:ea:
                    36:3d:21:42:b1:f5:d5:df:53:3b:21:27:a5:31:3a:
                    0a:13:b3:a4:d3:e1:1b:2a:ce:bc:f7:b7:8b:50:fb:
                    a7:03:db:10:ec:5a:37:aa:cb:19:e3:e5:54:be:bd:
                    43:5c:4b:cd:2e:39:89:9c:d6:eb:82:fa:ea:37:ef:
                    83:98:e8:2d:b2:2f:94:e3:e1:04:22:cf:7d:dc:50:
                    45:28:1f:dc:bc:f2:df:02:08:04:db:5f:ec:5e:d9:
                    47:cc:99:a9:b2:ed:bc:77:ce:1a:d9:4a:4d:34:7f:
                    47:3f:53:a2:89:ba:89:ba:3c:55:0d:5d:9a:e5:ba:
                    50:c2:c8:1d:65:2b:b5:1f:e9:95:39:dc:e5:39:1e:
                    b2:fa:c8:30:44:ea:49:e2:a4:e5:e4:c7:de:86:3d:
                    aa:7a:91:59:1f:1f:af:d2:ce:73:b5:44:f9:c3:5e:
                    20:e6:6d:61:d1:86:e6:b0:09:1d:c2:42:55:99:ed:
                    98:4d:23:ba:c9:90:9b:3e:69:1a:9b:58:ed:18:10:
                    da:12:4c:d2:8a:53:91:b0:0b:ef:c1:28:ad:61:be:
                    5e:bf:41:cd:a3:02:6d:7d:3a:2b:d7:3c:e7:02:67:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B4:4F:F9:C0:D5:DE:09:3E:79:CC:2A:67:55:29:58:A9:0A:E1:D6
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:58:33:13:c9:af:75:32:d9:5c:76:6f:97:fd:65:79:c1:e4:
         ec:fc:74:18:06:d3:ed:e5:21:e0:87:cd:72:2f:a9:ae:8e:84:
         5d:34:c6:6a:6b:8c:2f:d1:6f:c7:e4:14:53:cb:f7:45:8e:30:
         e7:7b:e1:47:09:f7:6d:89:df:a4:bd:1a:88:7c:ad:12:53:74:
         28:20:d2:b6:5a:0e:ee:19:10:8a:0d:b4:72:c4:2f:22:ed:6b:
         44:f4:51:ba:fc:12:37:74:44:34:d7:f7:b6:ca:99:72:8b:8d:
         f5:68:14:86:af:3f:1b:d8:43:29:23:92:7b:12:7f:fd:8e:24:
         ec:15:2b:1a:90:83:2b:c0:f4:06:48:97:c3:57:c1:84:ba:70:
         7f:60:4f:5b:7d:3f:3f:77:c8:16:a2:e4:ae:c2:2e:89:90:a3:
         ab:5e:de:50:81:15:85:b0:40:e9:0c:cd:17:ad:fd:b9:18:3c:
         dc:fa:ba:f2:70:7a:68:a4:d0:c0:01:0a:fc:d5:8f:49:45:eb:
         34:9a:82:24:11:d8:0e:ed:cb:90:20:41:af:21:27:8c:a3:79:
         d9:40:88:7e:9f:8b:28:1a:9e:9c:b4:a3:16:33:c0:64:b6:3c:
         86:39:24:d3:0d:80:c1:a4:63:ca:c6:8b:ad:31:9b:0d:e0:39:
         e6:8b:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org