Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          68XJCYFYv8gqUp9nFbq4fiBUeNt7fZQfEorK3hqLPEg=
Subject key identifier:   80:BD:E9:74:0F:01:2A:1D:CA:B7:93:D7:AF:AC:3D:44:63:21:A8:DB
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       70781D265E27BBCCF4AA5239E8B4C1BEDAD11667
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:08 +0000
ROA not before:           Sat 16 Oct 2021 16:11:08 +0000
ROA not after:            Sat 15 Oct 2022 16:16:08 +0000
asID:                     262691
IP address blocks:        186.194.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:1d:26:5e:27:bb:cc:f4:aa:52:39:e8:b4:c1:be:da:d1:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:08 2021 GMT
            Not After : Oct 15 16:16:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:41:4f:c7:da:e5:94:50:70:e6:30:5d:70:
                    7c:a4:e7:a7:a0:30:88:d3:3e:4c:8f:c6:95:ae:9f:
                    e2:cd:0f:c8:d0:81:20:26:e8:41:3f:35:6e:92:c6:
                    46:fe:b3:9d:1f:ec:0e:63:45:76:87:e4:5d:98:61:
                    30:2c:02:b3:56:2b:55:cc:27:16:af:84:55:9c:94:
                    6a:de:e6:a4:3d:6a:c9:8d:e5:f3:67:89:21:9e:cf:
                    1c:a2:0c:81:f9:f2:a4:ea:55:7e:ba:f1:93:61:37:
                    66:ca:a9:70:8b:45:fc:ca:3e:91:b6:ea:e5:70:7c:
                    5b:f0:0b:46:f5:4b:fb:b9:fa:ca:76:ee:73:03:d2:
                    34:bb:6e:94:9a:9b:9d:27:50:d5:d0:8f:d7:06:7b:
                    b3:8c:68:05:85:42:34:32:32:c8:a0:cf:1f:31:b4:
                    d5:e2:2d:e6:9e:04:3b:fa:15:99:7c:90:a6:7f:74:
                    c2:da:91:29:92:f6:14:b8:0b:8c:41:a5:3e:fb:c1:
                    d7:f2:1d:0c:e0:b6:e5:8e:b0:ab:cb:2c:92:95:be:
                    05:ed:56:2f:03:5b:67:bb:5f:3d:34:8e:3d:b3:88:
                    28:62:1c:0a:dd:07:dc:7e:55:98:3a:cb:a7:24:e6:
                    5a:fb:db:d3:ef:d1:eb:4f:94:7e:7f:7c:7c:6a:a6:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:E9:74:0F:01:2A:1D:CA:B7:93:D7:AF:AC:3D:44:63:21:A8:DB
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:75:e4:e8:15:30:e7:25:d7:4c:20:1c:dc:81:62:38:38:
         7a:89:e0:84:de:45:a0:f1:89:af:97:98:a7:08:87:4a:76:0c:
         9c:38:b4:37:30:df:65:88:2f:75:e8:74:b6:27:34:e1:92:ca:
         bc:f4:5e:5c:de:f8:9e:01:1b:0f:81:20:05:8d:f2:0a:df:c1:
         ff:61:76:d0:92:96:b1:7d:41:7a:68:02:21:d8:c8:6b:f7:22:
         a2:01:dc:54:62:f1:64:48:7d:ec:1b:12:0b:12:8a:01:2f:78:
         78:e6:9b:95:90:f2:a6:61:93:74:fb:da:af:5f:ab:af:b8:7f:
         9d:50:11:59:1b:bb:92:77:2a:5c:17:21:60:ec:dc:dd:09:55:
         4e:b4:2e:ea:3e:c4:24:06:ec:a9:e6:36:5f:72:22:ce:22:18:
         40:19:7f:4c:67:f5:79:80:57:2b:70:37:cd:e5:2a:c2:3d:56:
         2f:c6:e3:f4:f4:54:71:be:77:2d:6e:e2:c6:83:73:a9:f4:02:
         08:bb:2d:59:0f:28:22:b8:3d:30:8a:ea:52:82:9b:07:87:7b:
         d4:44:54:a1:ff:73:1b:90:f6:74:0e:b5:ec:36:28:00:07:ac:
         a8:c8:88:4e:39:b6:c9:ef:8b:f4:28:a4:0f:3b:92:29:53:88:
         67:10:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org