Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          5bbTrZpjFN26d1AVdVD8+exghfZln/ZO9KLlTdjWcPs=
Subject key identifier:   32:0E:87:9B:29:F7:8B:85:2D:19:06:75:57:BA:B8:76:CD:14:F1:1F
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       71B97BFA62C6623500F98DE90F2F39B87A81DDBA
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        186.194.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b9:7b:fa:62:c6:62:35:00:f9:8d:e9:0f:2f:39:b8:7a:81:dd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:0f:66:3b:e5:e1:b3:40:4e:0d:07:af:18:
                    e6:4b:28:a6:6f:6c:b2:72:27:9a:fe:1e:70:45:bc:
                    a1:9f:cb:bd:cb:e3:b1:e3:42:7a:fd:3b:4a:21:a3:
                    b4:f0:06:57:fc:89:ab:cf:74:9a:4a:09:5d:d5:94:
                    5d:31:39:a2:10:33:b1:f4:99:94:e8:f7:07:9d:38:
                    17:e8:53:ba:d7:6b:8e:dd:82:9c:e9:fe:d0:85:f5:
                    c0:9b:97:67:54:b7:77:8d:ed:7b:84:c9:da:05:b6:
                    e9:31:03:7f:90:d6:ed:e3:28:7f:3c:91:89:e0:e4:
                    2a:9d:76:7e:35:da:12:25:67:30:47:d3:dc:80:6e:
                    90:83:11:ea:a3:60:f0:07:ed:a5:19:aa:e6:b9:c7:
                    c2:bb:4d:1a:7f:05:3e:de:82:b3:b6:5f:37:a6:ef:
                    10:4c:5d:a6:30:8e:41:65:69:52:b0:91:1c:c0:b2:
                    e4:3f:f9:34:be:fd:7e:01:4b:f4:99:50:5d:99:24:
                    bd:fb:55:a0:33:30:35:78:b4:ce:87:2d:f3:8a:e9:
                    6c:0a:11:a0:b7:ab:2e:bc:b6:0b:1d:54:6b:3d:dd:
                    f9:d4:18:70:ee:4a:09:66:83:fc:24:39:a5:e8:cf:
                    85:45:57:0a:48:03:ec:c3:fb:a0:79:8c:5d:32:d2:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0E:87:9B:29:F7:8B:85:2D:19:06:75:57:BA:B8:76:CD:14:F1:1F
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:2d:68:54:9d:5a:9c:6b:bc:68:dd:9f:a5:ea:a3:69:52:11:
         6d:28:ff:25:39:31:14:2c:77:da:28:6c:e0:51:b7:56:80:0d:
         98:4f:9b:0b:9e:8f:83:85:fa:34:07:a8:af:d9:a1:f0:dd:9b:
         c1:16:18:a8:7b:21:ac:e3:e3:55:c2:a4:af:82:41:4b:e6:d2:
         8a:d9:de:c3:63:81:8a:f1:e2:d6:26:24:98:f7:48:20:1a:07:
         54:8d:53:51:44:76:f1:4e:5d:ce:17:9d:fb:61:77:95:d7:3e:
         e9:36:bb:26:cd:00:72:ab:6b:64:99:58:f6:be:eb:e2:2c:2c:
         53:5c:32:ba:33:12:57:f3:3f:92:1a:9e:01:bc:f0:be:2b:f8:
         35:2b:11:5e:e0:3a:70:8c:78:db:d2:78:09:7c:7f:32:91:f9:
         da:9c:35:55:bd:0b:6c:1b:79:be:78:7f:67:f9:7a:3d:5c:70:
         65:65:f1:c7:dc:7e:a0:48:02:ff:f9:94:df:71:f9:3a:41:ed:
         28:59:70:9a:26:b4:a2:93:83:67:a6:ff:8d:ba:94:ab:43:cc:
         84:5d:4c:1d:03:d3:c3:a9:ac:e4:2b:9b:28:d2:63:51:a6:91:
         bd:8c:fc:44:b2:7a:ab:3a:8a:48:f2:64:df:19:77:c4:9c:aa:
         ef:4b:62:ab
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUcbl7+mLGYjUA+Y3pDy85uHqB3bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTRaFw0yMjEwMTUxNjE2MTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFBQzBGNjYzQkU1RTFCMzQw
NEUwRDA3QUYxOEU2NEIyOEE2NkY2Q0IyNzIyNzlBRkUxRTcwNDVCQ0ExOUZDQkJE
Q0JFM0IxRTM0MjdBRkQzQjRBMjFBM0I0RjAwNjU3RkM4OUFCQ0Y3NDlBNEEwOTVE
RDU5NDVEMzEzOUEyMTAzM0IxRjQ5OTk0RThGNzA3OUQzODE3RTg1M0JBRDc2QjhF
REQ4MjlDRTlGRUQwODVGNUMwOUI5NzY3NTRCNzc3OERFRDdCODRDOURBMDVCNkU5
MzEwMzdGOTBENkVERTMyODdGM0M5MTg5RTBFNDJBOUQ3NjdFMzVEQTEyMjU2NzMw
NDdEM0RDODA2RTkwODMxMUVBQTM2MEYwMDdFREE1MTlBQUU2QjlDN0MyQkI0RDFB
N0YwNTNFREU4MkIzQjY1RjM3QTZFRjEwNEM1REE2MzA4RTQxNjU2OTUyQjA5MTFD
QzBCMkU0M0ZGOTM0QkVGRDdFMDE0QkY0OTk1MDVEOTkyNEJERkI1NUEwMzMzMDM1
NzhCNENFODcyREYzOEFFOTZDMEExMUEwQjdBQjJFQkNCNjBCMUQ1NDZCM0REREY5
RDQxODcwRUU0QTA5NjY4M0ZDMjQzOUE1RThDRjg1NDU1NzBBNDgwM0VDQzNGQkEw
Nzk4QzVEMzJEMjk2RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwawPZjvl4bNATg0HrxjmSyimb2yyciea/h5wRbyhn8u9y+Ox40J6
/TtKIaO08AZX/Imrz3SaSgld1ZRdMTmiEDOx9JmU6PcHnTgX6FO612uO3YKc6f7Q
hfXAm5dnVLd3je17hMnaBbbpMQN/kNbt4yh/PJGJ4OQqnXZ+NdoSJWcwR9PcgG6Q
gxHqo2DwB+2lGarmucfCu00afwU+3oKztl83pu8QTF2mMI5BZWlSsJEcwLLkP/k0
vv1+AUv0mVBdmSS9+1WgMzA1eLTOhy3ziulsChGgt6suvLYLHVRrPd351Bhw7koJ
ZoP8JDml6M+FRVcKSAPsw/ugeYxdMtKW0QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FDIOh5sp94uFLRkGdVe6uHbNFPEfMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzgzNjJlMzEzOTM0MmUzMjMw
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG6wtAwDQYJKoZIhvcNAQELBQADggEBALstaFSdWpxrvGjdn6Xqo2lSEW0o/yU5
MRQsd9oobOBRt1aADZhPmwuej4OF+jQHqK/ZofDdm8EWGKh7Iazj41XCpK+CQUvm
0orZ3sNjgYrx4tYmJJj3SCAaB1SNU1FEdvFOXc4Xnfthd5XXPuk2uybNAHKra2SZ
WPa+6+IsLFNcMrozElfzP5IangG88L4r+DUrEV7gOnCMeNvSeAl8fzKR+dqcNVW9
C2wbeb54f2f5ej1ccGVl8cfcfqBIAv/5lN9x+TpB7ShZcJomtKKTg2em/426lKtD
zIRdTB0D08OprOQrmyjSY1Gmkb2M/ESyeqs6ikjyZN8Zd8Scqu9LYqs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org