Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          giOKsxatthWk6V1iY/u5hAFWirKU169CZnNihCWOTEg=
Subject key identifier:   64:3D:FE:55:48:8F:CC:74:C0:C4:0A:9E:D7:2A:F4:F7:A5:B1:94:C8
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       556642E9A6A04A9145F8693A92195CD815D5E316
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        186.194.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:42:e9:a6:a0:4a:91:45:f8:69:3a:92:19:5c:d8:15:d5:e3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:37:cc:a5:5e:4a:81:cc:4d:58:87:a5:e5:
                    db:6a:79:82:84:29:03:98:1a:e7:39:38:67:f7:a7:
                    93:6e:29:d6:bd:d3:88:51:93:ad:a9:72:0d:59:5c:
                    6c:87:93:db:84:dd:11:17:65:a5:be:ba:77:63:89:
                    34:5f:73:55:80:cc:8f:69:c9:fb:41:f1:34:fb:46:
                    8b:3d:da:a0:d9:1b:c7:9b:82:cd:eb:96:ff:d4:3b:
                    4c:9f:95:02:c9:35:4c:1c:30:a3:68:a6:e1:a1:3b:
                    81:69:73:c9:c9:27:45:43:fb:b8:47:2c:67:e5:01:
                    2a:4f:3e:99:dc:82:15:7e:7a:a9:da:00:c9:7b:76:
                    a2:98:a0:44:0c:8a:b6:b1:36:fd:4e:4c:f3:f2:7f:
                    de:2f:1e:00:c1:88:03:41:23:ce:5c:64:95:24:7e:
                    f7:00:50:15:4a:aa:8d:f6:e6:de:bb:17:bc:8c:1d:
                    71:44:7b:02:0f:87:74:ea:dd:e7:8e:81:20:56:c6:
                    4b:4c:b6:a3:53:34:3f:50:47:6b:f7:7e:da:bc:a3:
                    1b:08:1a:9b:fc:7b:af:74:f1:f4:56:e8:f5:aa:b0:
                    3c:56:2a:2c:f1:16:93:c2:dc:5b:95:88:2b:dd:c9:
                    83:81:cb:cb:a2:5f:75:e5:9a:18:b4:0d:9e:e0:17:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:FE:55:48:8F:CC:74:C0:C4:0A:9E:D7:2A:F4:F7:A5:B1:94:C8
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:55:77:f7:16:45:c8:6b:9c:77:8a:e4:47:00:ee:22:93:
         31:ea:f1:16:18:8d:db:b8:eb:94:18:16:09:d8:5d:c7:66:4c:
         71:6d:f2:53:c6:22:82:9e:f4:9f:e5:ea:0d:9f:c1:c7:63:b3:
         5f:87:a1:87:43:36:95:7c:22:c7:fc:67:fa:9b:3b:a6:db:5c:
         fc:e9:69:28:c9:f4:e7:07:21:44:b2:33:a5:fd:bc:ed:20:06:
         bd:97:a6:6f:6f:9a:7f:29:c8:b8:68:b3:6d:d5:7f:71:70:f3:
         98:a1:e7:ff:a4:ad:0b:cf:4d:df:87:33:f1:b8:e7:8f:be:4c:
         c7:8c:1e:e3:b1:30:5b:22:c8:f0:fa:6d:4e:4d:94:b0:ed:28:
         cb:d7:08:d5:fd:d5:2f:57:74:9f:3b:e2:48:49:d9:44:ef:80:
         67:4f:ff:da:5f:bf:00:58:84:d2:20:ac:63:f2:57:94:0f:0b:
         26:84:d5:bb:fc:1d:6b:81:20:88:58:21:dc:af:d3:ee:3b:3b:
         91:d1:ce:e4:ac:a7:ee:10:eb:b8:1d:68:04:57:c4:7c:4d:34:
         fa:ae:a1:df:a7:13:fe:fb:37:df:b0:de:21:1b:3e:3b:04:64:
         27:8d:fc:20:5a:3f:d8:f5:f8:d8:0c:22:83:d7:a3:59:2c:8d:
         5b:e1:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org