Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          9KKt3xdop5S/RskaHWULdUkxzCf6XYWw96RVQcZFiBE=
Subject key identifier:   08:EF:B9:85:A8:A8:2F:57:B4:0A:36:5E:FE:63:0F:0A:E6:F0:3E:30
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3CD44458D48CA86BFD95DB326FB8E1A27A9294D7
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        186.194.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d4:44:58:d4:8c:a8:6b:fd:95:db:32:6f:b8:e1:a2:7a:92:94:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:69:4c:88:b8:a2:34:e4:71:bd:a9:42:87:
                    51:e4:00:f8:30:25:d3:18:90:1d:fb:65:ac:15:a0:
                    1a:15:53:0f:ed:1f:0f:96:48:b3:a7:1d:ff:3f:39:
                    8e:13:b7:93:0a:1e:5b:b5:59:60:07:98:8e:67:34:
                    e2:c5:3b:6f:be:e2:9b:1b:df:b7:00:d6:d6:72:44:
                    45:81:4b:03:f9:0a:e5:0e:c3:ff:11:51:85:e4:74:
                    40:ec:f3:e9:b2:2c:19:cb:ff:42:e8:1f:2d:f7:81:
                    6c:b7:b6:62:c5:f9:93:38:d9:58:f9:b0:c1:88:c8:
                    40:bb:c0:71:fa:37:d9:00:2a:7a:2b:9b:56:1f:be:
                    bd:3d:af:29:e1:82:dd:29:01:7a:78:c5:92:0b:df:
                    dc:00:d3:43:51:c3:68:54:cc:44:f5:c8:fb:05:85:
                    35:7d:c1:b3:91:d4:80:6b:d1:bb:9d:74:44:5d:c5:
                    59:c7:3d:86:77:f0:ad:70:e6:8e:14:7d:57:ac:69:
                    58:71:4d:18:57:f7:ac:ad:96:7a:63:58:68:99:ec:
                    48:53:e2:c2:30:6a:6f:2e:29:a4:a5:16:a4:8f:e9:
                    56:4e:cd:8a:30:93:78:49:b6:46:d4:cf:ff:80:eb:
                    da:d7:aa:3f:dc:ae:7b:c3:f5:4a:db:17:61:20:40:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:B9:85:A8:A8:2F:57:B4:0A:36:5E:FE:63:0F:0A:E6:F0:3E:30
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:cb:b4:37:3d:d0:47:57:07:9f:df:33:32:b8:a5:93:be:d1:
         b7:0a:12:e5:1f:67:eb:81:27:c7:84:d3:c5:9d:19:ff:9b:b8:
         72:d8:be:6e:d4:9f:70:8b:42:f6:78:a7:ec:b6:5a:2e:5a:69:
         02:9f:a4:46:47:43:13:4a:24:8c:70:94:10:4d:94:9c:b9:b8:
         39:23:57:f1:e1:2d:1a:fc:e6:ed:85:a4:3c:75:30:e9:51:7c:
         48:f0:91:07:39:73:2e:1d:c4:16:f7:73:27:52:c3:df:eb:69:
         bb:f8:e2:23:7f:ca:cf:68:04:1d:55:40:cb:3b:7c:22:ed:72:
         11:c8:4c:a4:17:b1:b4:95:d6:ea:48:57:9c:c0:9c:e6:9f:d6:
         b8:8f:d2:55:8a:47:a2:1b:d3:1f:c1:25:a2:58:e5:6d:39:c4:
         3b:31:bb:b5:4d:6a:66:71:11:ec:ab:42:ff:d0:9d:bc:57:a5:
         11:b4:42:35:da:b5:f5:46:14:20:64:0a:9f:2c:c2:05:6a:d8:
         d2:67:08:23:02:f4:94:76:6f:03:11:6f:46:87:6a:cd:11:8d:
         a4:2c:53:b3:4f:b3:32:a4:6b:7f:1e:48:36:a1:32:b4:44:e0:
         d2:c4:f3:5d:18:1b:db:41:9d:95:5e:74:86:c7:c2:6d:9b:10:
         8d:45:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org