Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          PHXGUNjrlz8zKjgwNPI2iigegqWD2cMtl7pcrDzir88=
Subject key identifier:   15:53:BA:C2:40:A7:12:E6:49:0B:9D:42:28:B1:19:B7:15:41:06:64
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       1D44575D5E3BBE23390D72704C62C8D6C7DE01CF
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        186.194.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:44:57:5d:5e:3b:be:23:39:0d:72:70:4c:62:c8:d6:c7:de:01:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject: CN=3082010A0282010100E5EDA8DCD278933FBAA3579EC25DF9F358B651627EBE92B8594B1673CCAE91BE01DFD5F47AA06D906031D66EBFC95B07B8A35BC8473A2D2EA039EB25362F8709383CF8FE9927723FFA661B76C4852F292A695932354E4B93C49472ECC3D21E929980C37BF4B7D2D47197CC97832DB658FD6D085D453CC8B717716C3E156DE2FAF6C4FA7DFDB36B4E63A7DA147946EF4EDEC52D58D90AF5A707A05AFE24A90DC688B16EB9313AA1D4180E2D4EA596EF2DF9A19072A55C8B9BCB4606F3ECB83C4770622B0E5971EBF2DD0E2ABC2DE59C4296C4AB42C350ECC2FC4BE6723FA1835AEA627497965D7B2BB507D034FC7432075AA8684656FFE2C1924C43356E01CC230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:a8:dc:d2:78:93:3f:ba:a3:57:9e:c2:5d:
                    f9:f3:58:b6:51:62:7e:be:92:b8:59:4b:16:73:cc:
                    ae:91:be:01:df:d5:f4:7a:a0:6d:90:60:31:d6:6e:
                    bf:c9:5b:07:b8:a3:5b:c8:47:3a:2d:2e:a0:39:eb:
                    25:36:2f:87:09:38:3c:f8:fe:99:27:72:3f:fa:66:
                    1b:76:c4:85:2f:29:2a:69:59:32:35:4e:4b:93:c4:
                    94:72:ec:c3:d2:1e:92:99:80:c3:7b:f4:b7:d2:d4:
                    71:97:cc:97:83:2d:b6:58:fd:6d:08:5d:45:3c:c8:
                    b7:17:71:6c:3e:15:6d:e2:fa:f6:c4:fa:7d:fd:b3:
                    6b:4e:63:a7:da:14:79:46:ef:4e:de:c5:2d:58:d9:
                    0a:f5:a7:07:a0:5a:fe:24:a9:0d:c6:88:b1:6e:b9:
                    31:3a:a1:d4:18:0e:2d:4e:a5:96:ef:2d:f9:a1:90:
                    72:a5:5c:8b:9b:cb:46:06:f3:ec:b8:3c:47:70:62:
                    2b:0e:59:71:eb:f2:dd:0e:2a:bc:2d:e5:9c:42:96:
                    c4:ab:42:c3:50:ec:c2:fc:4b:e6:72:3f:a1:83:5a:
                    ea:62:74:97:96:5d:7b:2b:b5:07:d0:34:fc:74:32:
                    07:5a:a8:68:46:56:ff:e2:c1:92:4c:43:35:6e:01:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:BA:C2:40:A7:12:E6:49:0B:9D:42:28:B1:19:B7:15:41:06:64
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:e7:c8:8d:b3:bf:67:fd:dd:b7:15:9b:8c:a0:46:93:da:
         2e:d9:73:91:b6:27:66:63:1b:21:3c:9c:02:45:41:a5:24:ad:
         ab:7c:25:f9:25:5b:63:a6:73:bf:dc:f7:ad:6c:1a:06:e4:58:
         20:e9:05:97:cd:b7:89:75:70:78:3b:f8:a1:e4:4f:7c:34:06:
         5d:eb:85:1c:e5:46:c0:01:1f:ab:65:e9:87:5a:f4:85:fc:26:
         c1:ba:d8:44:85:b2:f9:cc:74:b1:f8:3c:7b:65:c8:e3:ff:8c:
         89:c5:6a:8c:44:35:4e:70:86:2c:18:e3:4b:57:31:ca:e4:cd:
         08:e7:2f:60:e8:55:9f:ae:6d:14:6a:66:78:05:99:34:47:0e:
         8f:fd:4e:ba:f2:ee:d1:5d:6a:78:9a:f9:89:af:97:c8:9a:40:
         b6:82:10:19:dd:6b:85:d0:f3:48:ec:99:9a:b6:74:da:a2:84:
         91:23:44:e1:7d:e1:4f:fc:56:68:e3:03:90:1f:04:3f:00:8a:
         c1:ff:5b:87:16:6c:b4:b5:f2:b6:31:8d:83:54:b6:b0:18:31:
         ab:5d:8c:e7:c2:b0:a3:db:66:b7:b8:4c:b9:89:0c:45:95:06:
         74:ff:5b:fb:18:19:91:50:84:fd:23:4c:aa:2f:f6:af:3a:76:
         ba:e7:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org