Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          DtEUQX03SpfbZOCEMSE192wP9KyfnKqMU3r6Aed3Vak=
Subject key identifier:   55:96:22:94:55:06:6F:85:67:FA:DD:55:10:7A:29:52:38:28:ED:93
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       61BCF679907CE16CA9DFC5972B247FFA70F4559B
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        186.194.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:f6:79:90:7c:e1:6c:a9:df:c5:97:2b:24:7f:fa:70:f4:55:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:b7:bd:b3:62:b4:fd:c7:9b:9d:95:ac:f6:
                    fa:e8:f7:ff:69:d1:d3:b8:02:78:65:58:23:7a:21:
                    ba:bc:fb:39:01:94:f7:b4:97:d0:75:07:69:dd:d4:
                    c7:0c:63:3b:f5:65:75:6a:dc:17:da:be:ee:df:a7:
                    65:cb:ab:e2:c7:ce:d1:b1:a5:00:11:53:f1:77:dc:
                    ec:e9:b0:9b:4a:4b:f9:6b:b3:85:bb:6d:e4:8d:ff:
                    49:d2:09:f5:ba:49:5c:e2:4d:58:5c:20:0f:9a:4d:
                    86:dc:e8:1f:86:f9:d6:95:93:b4:49:96:a6:f9:96:
                    d2:39:ec:f8:d2:2f:05:7d:4d:b0:6e:75:1c:5a:57:
                    4e:69:68:e0:d6:4a:24:fe:11:a1:ec:8a:61:58:75:
                    5f:93:79:69:27:9d:5f:b1:73:72:3b:ad:ad:7b:f3:
                    08:52:f5:d1:16:09:75:f4:1d:a3:b9:fe:fd:94:8e:
                    21:6b:58:6b:43:0b:29:2f:5f:1d:c1:9a:e2:e1:8b:
                    74:6c:82:78:18:3f:67:d8:8e:ef:c5:76:c3:2b:62:
                    9f:98:ce:66:b4:62:e5:88:77:cc:91:9f:d6:b9:3e:
                    dc:0c:e9:46:32:1d:8e:67:de:4c:b3:bb:d7:b7:06:
                    b0:9f:cd:cf:a2:89:f1:cb:22:4c:fd:0b:90:ae:db:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:96:22:94:55:06:6F:85:67:FA:DD:55:10:7A:29:52:38:28:ED:93
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:6a:2a:63:f6:85:c6:07:bc:98:07:0c:1f:32:48:46:48:
         1a:56:c0:cc:1d:20:7b:1a:81:80:5e:9a:aa:34:72:78:6f:02:
         1a:5a:60:79:60:7d:cc:e3:40:32:02:16:42:18:84:16:4a:5a:
         7e:42:ad:6f:de:68:42:ba:65:e8:4a:74:00:15:01:0a:f9:66:
         71:21:b4:0f:74:e1:fe:4c:7a:27:8c:0d:37:d3:4d:dc:20:1f:
         17:ba:06:c1:c3:ae:08:ec:54:0f:2a:dd:72:08:b8:42:64:46:
         ae:0d:49:cd:b8:05:4a:6b:38:70:a0:22:c1:7d:99:ce:d7:fe:
         23:5c:94:56:92:1f:7a:03:59:9c:70:10:b9:db:3f:54:53:8f:
         cd:fd:45:3a:e8:c4:b4:a5:fd:8f:fc:b2:03:47:5f:26:ba:40:
         8f:6f:9e:0f:7a:7d:fb:e6:3e:a1:a9:8a:26:6a:aa:97:1a:f6:
         88:0c:8c:d0:37:cd:18:27:d2:c1:e4:9c:e8:e8:ab:25:e3:f5:
         88:8c:54:34:c9:57:b6:1e:97:c0:4f:4b:98:17:0c:6d:40:bd:
         bb:06:8b:c0:b9:42:2b:5a:91:5a:33:de:c0:8d:27:1b:59:c6:
         d7:a8:c6:b4:ab:fc:12:d0:63:53:4a:4f:01:34:81:1f:13:ab:
         51:78:1e:32
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUYbz2eZB84Wyp38WXKyR/+nD0VZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMTBaFw0yMjEwMTUxNjE2MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ1M0I3QkRCMzYyQjRGREM3
OUI5RDk1QUNGNkZBRThGN0ZGNjlEMUQzQjgwMjc4NjU1ODIzN0EyMUJBQkNGQjM5
MDE5NEY3QjQ5N0QwNzUwNzY5RERENEM3MEM2MzNCRjU2NTc1NkFEQzE3REFCRUVF
REZBNzY1Q0JBQkUyQzdDRUQxQjFBNTAwMTE1M0YxNzdEQ0VDRTlCMDlCNEE0QkY5
NkJCMzg1QkI2REU0OERGRjQ5RDIwOUY1QkE0OTVDRTI0RDU4NUMyMDBGOUE0RDg2
RENFODFGODZGOUQ2OTU5M0I0NDk5NkE2Rjk5NkQyMzlFQ0Y4RDIyRjA1N0Q0REIw
NkU3NTFDNUE1NzRFNjk2OEUwRDY0QTI0RkUxMUExRUM4QTYxNTg3NTVGOTM3OTY5
Mjc5RDVGQjE3MzcyM0JBREFEN0JGMzA4NTJGNUQxMTYwOTc1RjQxREEzQjlGRUZE
OTQ4RTIxNkI1ODZCNDMwQjI5MkY1RjFEQzE5QUUyRTE4Qjc0NkM4Mjc4MTgzRjY3
RDg4RUVGQzU3NkMzMkI2MjlGOThDRTY2QjQ2MkU1ODg3N0NDOTE5RkQ2QjkzRURD
MENFOTQ2MzIxRDhFNjdERTRDQjNCQkQ3QjcwNkIwOUZDRENGQTI4OUYxQ0IyMjRD
RkQwQjkwQUVEQkM1ODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxFO3vbNitP3Hm52VrPb66Pf/adHTuAJ4ZVgjeiG6vPs5AZT3tJfQ
dQdp3dTHDGM79WV1atwX2r7u36dly6vix87RsaUAEVPxd9zs6bCbSkv5a7OFu23k
jf9J0gn1uklc4k1YXCAPmk2G3OgfhvnWlZO0SZam+ZbSOez40i8FfU2wbnUcWldO
aWjg1kok/hGh7IphWHVfk3lpJ51fsXNyO62te/MIUvXRFgl19B2juf79lI4ha1hr
QwspL18dwZri4Yt0bIJ4GD9n2I7vxXbDK2KfmM5mtGLliHfMkZ/WuT7cDOlGMh2O
Z95Ms7vXtwawn83PoonxyyJM/QuQrtvFiQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFWWIpRVBm+FZ/rdVRB6KVI4KO2TMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzgzNjJlMzEzOTM0MmUzMjMx
MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAO6wtgwDQYJKoZIhvcNAQELBQADggEBAFjOaipj9oXGB7yYBwwfMkhGSBpWwMwd
IHsagYBemqo0cnhvAhpaYHlgfczjQDICFkIYhBZKWn5CrW/eaEK6ZehKdAAVAQr5
ZnEhtA904f5MeieMDTfTTdwgHxe6BsHDrgjsVA8q3XIIuEJkRq4NSc24BUprOHCg
IsF9mc7X/iNclFaSH3oDWZxwELnbP1RTj839RTroxLSl/Y/8sgNHXya6QI9vng96
ffvmPqGpiiZqqpca9ogMjNA3zRgn0sHknOjoqyXj9YiMVDTJV7Yel8BPS5gXDG1A
vbsGi8C5QitakVoz3sCNJxtZxteoxrSr/BLQY1NKTwE0gR8Tq1F4HjI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org