Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          glZa6d26TBIJj6mzcbIpBeci88NlORM1kD7n1BnBWUE=
Subject key identifier:   FF:7C:02:AA:0D:3A:7C:37:DF:ED:79:AA:2C:14:7D:C5:DA:40:9C:75
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       19BBF77DC4F99784E696C1AF98ED2358500B7D2E
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        186.194.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bb:f7:7d:c4:f9:97:84:e6:96:c1:af:98:ed:23:58:50:0b:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject: CN=3082010A0282010100C882CD6D21A8ED663829471517C0A820A1D391079E7EA3398D7D324B0579F897EB7F37BE986E54991ECB2109881A2DE5FAB5B344AAEC92FAE32E90BF94A035FFBCCE7BF7288F7E3D6938047C6F72AE8BD8E69F84CFEEB0DDD24F52EE1FEBBCE80EC2AD68AA013632A0CA0C699C63E7910033BDEDDDCC07684902791E589FF2DA8D1A8058C38D2548C65A38F77484FBA5475840F89A830A010D836EEA67BA91DE2D10CC2DCA6F81E660A1DA2B3D231E6E5CD395A391A4E3D81C0A45A871DAE0ABDAE16DDC21E097FB9FF713DAC7E80E6291E53318AB8E2972155C4E58CBF25DAFC1A2B2FDAE1BE61DD28431B0B6BDCBB74F3089BB5F8B5EE51DD3513FA2C97AFB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:cd:6d:21:a8:ed:66:38:29:47:15:17:c0:
                    a8:20:a1:d3:91:07:9e:7e:a3:39:8d:7d:32:4b:05:
                    79:f8:97:eb:7f:37:be:98:6e:54:99:1e:cb:21:09:
                    88:1a:2d:e5:fa:b5:b3:44:aa:ec:92:fa:e3:2e:90:
                    bf:94:a0:35:ff:bc:ce:7b:f7:28:8f:7e:3d:69:38:
                    04:7c:6f:72:ae:8b:d8:e6:9f:84:cf:ee:b0:dd:d2:
                    4f:52:ee:1f:eb:bc:e8:0e:c2:ad:68:aa:01:36:32:
                    a0:ca:0c:69:9c:63:e7:91:00:33:bd:ed:dd:cc:07:
                    68:49:02:79:1e:58:9f:f2:da:8d:1a:80:58:c3:8d:
                    25:48:c6:5a:38:f7:74:84:fb:a5:47:58:40:f8:9a:
                    83:0a:01:0d:83:6e:ea:67:ba:91:de:2d:10:cc:2d:
                    ca:6f:81:e6:60:a1:da:2b:3d:23:1e:6e:5c:d3:95:
                    a3:91:a4:e3:d8:1c:0a:45:a8:71:da:e0:ab:da:e1:
                    6d:dc:21:e0:97:fb:9f:f7:13:da:c7:e8:0e:62:91:
                    e5:33:18:ab:8e:29:72:15:5c:4e:58:cb:f2:5d:af:
                    c1:a2:b2:fd:ae:1b:e6:1d:d2:84:31:b0:b6:bd:cb:
                    b7:4f:30:89:bb:5f:8b:5e:e5:1d:d3:51:3f:a2:c9:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7C:02:AA:0D:3A:7C:37:DF:ED:79:AA:2C:14:7D:C5:DA:40:9C:75
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:74:96:5c:b9:04:24:2e:8d:d4:5a:e7:cd:83:a7:2d:2b:34:
         a9:ae:fa:57:81:05:e5:fa:6b:03:6c:7a:62:b2:2f:9f:59:03:
         e9:ac:ba:bc:4e:3f:98:63:93:7c:05:bd:25:a0:5e:7e:da:f6:
         85:b4:0e:92:c1:cc:e2:02:55:f9:09:19:6a:31:34:66:e1:87:
         7c:7b:f7:9f:32:43:cd:82:8f:d0:9f:6b:10:83:b1:a3:b5:90:
         16:5f:c4:9f:50:83:5c:32:96:3d:5c:8a:eb:b9:88:15:d2:64:
         5f:c5:0b:a3:5c:72:14:aa:e7:f5:d6:4b:9a:a1:22:35:b4:cf:
         4b:4f:2e:f5:08:9b:eb:cd:ae:cf:4e:a7:47:09:45:b5:08:5b:
         69:ba:ee:2a:98:c5:ae:f3:90:de:87:9d:17:9b:ec:db:09:6f:
         9c:70:ec:11:89:bc:a1:fc:d2:f3:b6:c6:83:63:26:16:d1:c6:
         b7:56:b0:d1:b7:9a:96:cb:29:f2:16:b2:ad:ce:88:cf:d9:73:
         c9:4b:54:6b:5f:0a:59:01:f9:6d:ad:ce:d0:d3:29:71:50:ed:
         85:25:97:af:1c:eb:f8:4f:31:6c:e5:68:d7:ef:f9:d9:7d:da:
         72:2b:53:66:66:a9:a7:12:94:25:f1:e4:66:f0:1a:52:2f:d1:
         bc:b6:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org