Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          AlV1UuEIRS3e1urS22v8g+c5bNul3BC4mehCYTl7WYM=
Subject key identifier:   DD:F1:FE:44:C7:0F:4F:E7:CD:66:87:18:31:08:8F:B8:03:DF:66:5C
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4FB8ECC1DD43FE70DDFA601B876F3C2F6ED26788
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        186.194.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b8:ec:c1:dd:43:fe:70:dd:fa:60:1b:87:6f:3c:2f:6e:d2:67:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject: CN=3082010A0282010100CB32337C9BCEF7BCF988258ADAA506E986E97FB0308DE59A728206596273FD8E21059E5C6423C094B08B963454B462ADF193B24AFF01C858101E502C07045F94C189F51E0B0644C2206E260BE7F32A250C461631DC604E28862B9277EB4265B001697007A41BD1FF93B19D32AD9622DF043C79C3F24DC349326B1440B8754DDDDDA74581DD830A3DB9A3A978EDBFA279ECAF17D29DA2EC8A4510FACFA70C9C0D21893471E527F069B937BE05615EFCDDD3E6121A2DF7A5F0D573E99DE2F028B48C298CB6CB7833BC77E7A4B092559FB29694FF0F52903EA53E1C7F4AFC39BC6AB077DECAA075540276E062EFA99B8F6090220742E06198AA846D3DBA1B479FE90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:33:7c:9b:ce:f7:bc:f9:88:25:8a:da:a5:
                    06:e9:86:e9:7f:b0:30:8d:e5:9a:72:82:06:59:62:
                    73:fd:8e:21:05:9e:5c:64:23:c0:94:b0:8b:96:34:
                    54:b4:62:ad:f1:93:b2:4a:ff:01:c8:58:10:1e:50:
                    2c:07:04:5f:94:c1:89:f5:1e:0b:06:44:c2:20:6e:
                    26:0b:e7:f3:2a:25:0c:46:16:31:dc:60:4e:28:86:
                    2b:92:77:eb:42:65:b0:01:69:70:07:a4:1b:d1:ff:
                    93:b1:9d:32:ad:96:22:df:04:3c:79:c3:f2:4d:c3:
                    49:32:6b:14:40:b8:75:4d:dd:dd:a7:45:81:dd:83:
                    0a:3d:b9:a3:a9:78:ed:bf:a2:79:ec:af:17:d2:9d:
                    a2:ec:8a:45:10:fa:cf:a7:0c:9c:0d:21:89:34:71:
                    e5:27:f0:69:b9:37:be:05:61:5e:fc:dd:d3:e6:12:
                    1a:2d:f7:a5:f0:d5:73:e9:9d:e2:f0:28:b4:8c:29:
                    8c:b6:cb:78:33:bc:77:e7:a4:b0:92:55:9f:b2:96:
                    94:ff:0f:52:90:3e:a5:3e:1c:7f:4a:fc:39:bc:6a:
                    b0:77:de:ca:a0:75:54:02:76:e0:62:ef:a9:9b:8f:
                    60:90:22:07:42:e0:61:98:aa:84:6d:3d:ba:1b:47:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F1:FE:44:C7:0F:4F:E7:CD:66:87:18:31:08:8F:B8:03:DF:66:5C
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:65:6e:17:46:78:c7:cd:fa:03:51:83:08:43:f8:7a:7b:72:
         24:7b:39:54:69:47:fc:ac:ba:63:4a:08:38:75:71:b0:23:3e:
         aa:1a:b9:cb:10:af:90:49:c6:8e:ea:e8:76:bd:b1:60:cf:15:
         3d:9f:00:1f:84:7a:93:2d:f5:52:c5:62:64:cf:2a:34:ec:c4:
         55:0a:e1:e3:58:2d:65:16:40:cd:ba:fd:c9:05:dc:a1:68:c9:
         12:c1:e6:80:df:fa:a3:c3:3e:51:34:ef:bc:c6:a9:a0:73:64:
         7e:78:d2:4d:31:40:b0:9f:33:7f:39:ca:31:c0:01:96:2d:83:
         ba:18:c2:ac:f9:a5:01:9c:ea:ad:97:9e:5c:79:2f:16:30:3c:
         7f:cf:8e:5f:4c:25:07:29:bf:35:3a:49:2e:dd:6a:35:23:b8:
         4a:6f:32:0d:6a:4f:b3:b4:0c:66:ae:53:8f:95:35:81:2a:7f:
         9e:c2:1f:1d:8c:6b:02:a5:69:55:63:3e:f2:13:9e:3a:2c:9c:
         f7:c3:9b:66:9c:2b:a1:de:ec:e6:a8:46:23:d9:2a:24:4c:3c:
         8a:7e:2f:91:da:40:e7:3d:55:97:f9:fd:62:95:f1:cc:09:19:
         f2:75:82:93:de:ea:8e:c4:72:85:9e:ed:b9:7f:c0:29:ff:6b:
         6c:da:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org