Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          NqxkD9k2Cozv3vY20/2F2mXaETxEQSJb1/Po8GpTkKU=
Subject key identifier:   FF:A7:FB:6C:E5:F8:65:AC:79:9E:D5:60:A6:22:AD:60:31:8A:9A:4A
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2B645186D95DCBF19868FC7B7C8FF00903B49268
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        186.194.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:64:51:86:d9:5d:cb:f1:98:68:fc:7b:7c:8f:f0:09:03:b4:92:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject: CN=3082010A0282010100D28A4F7EB2B069D4849170A228DB8E87551E604464CD42B0F567F689AC9FB40695E824E7E4C06FDFDCFC89CF1EDB849AA8FAE83DB2C44ADE520B2DDD57E8D4FA76AC8026F8E43E0813AE0A7F912D0D92CB5CAEAD83FAA2B3B8E1B7CFCD23EE12A92F1EE33DB8D88EF8DC818D500B8512B08D6AE9D5C3B191FCB665221C07FD88184FBD25D265CDCE9D15EA9F29449E969B01AEBC2B6373D70705F8FE1B83C7663E9F8F62B72476F18D6C94BA616E1CC0AF08BE6D4CCE330FB7B69D3FBCA7194C8F26FB564B980F589FA7BBE94FC27FACDC05AD73748784FF9E44E34A3A7B64D99C3DD6B9BFA237CCC9D3FEAAFD48F55C8891D8C92167176208B1FA795120FDCD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:4f:7e:b2:b0:69:d4:84:91:70:a2:28:db:
                    8e:87:55:1e:60:44:64:cd:42:b0:f5:67:f6:89:ac:
                    9f:b4:06:95:e8:24:e7:e4:c0:6f:df:dc:fc:89:cf:
                    1e:db:84:9a:a8:fa:e8:3d:b2:c4:4a:de:52:0b:2d:
                    dd:57:e8:d4:fa:76:ac:80:26:f8:e4:3e:08:13:ae:
                    0a:7f:91:2d:0d:92:cb:5c:ae:ad:83:fa:a2:b3:b8:
                    e1:b7:cf:cd:23:ee:12:a9:2f:1e:e3:3d:b8:d8:8e:
                    f8:dc:81:8d:50:0b:85:12:b0:8d:6a:e9:d5:c3:b1:
                    91:fc:b6:65:22:1c:07:fd:88:18:4f:bd:25:d2:65:
                    cd:ce:9d:15:ea:9f:29:44:9e:96:9b:01:ae:bc:2b:
                    63:73:d7:07:05:f8:fe:1b:83:c7:66:3e:9f:8f:62:
                    b7:24:76:f1:8d:6c:94:ba:61:6e:1c:c0:af:08:be:
                    6d:4c:ce:33:0f:b7:b6:9d:3f:bc:a7:19:4c:8f:26:
                    fb:56:4b:98:0f:58:9f:a7:bb:e9:4f:c2:7f:ac:dc:
                    05:ad:73:74:87:84:ff:9e:44:e3:4a:3a:7b:64:d9:
                    9c:3d:d6:b9:bf:a2:37:cc:c9:d3:fe:aa:fd:48:f5:
                    5c:88:91:d8:c9:21:67:17:62:08:b1:fa:79:51:20:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:FB:6C:E5:F8:65:AC:79:9E:D5:60:A6:22:AD:60:31:8A:9A:4A
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:c4:21:53:58:17:b6:a8:fe:d2:bd:9c:a6:42:8f:a2:8a:
         a4:14:f3:cd:c6:9b:15:52:d1:22:d6:65:4b:31:81:f9:83:9f:
         f5:d1:e1:3d:d4:8c:7e:28:e7:47:59:4a:7f:0c:cc:32:e2:e2:
         10:54:2f:9c:6e:19:3c:1f:a9:1f:6f:85:2a:4f:4b:7d:d0:67:
         be:9b:65:f4:d9:67:6e:28:8c:d6:3b:9d:10:60:d4:e0:06:db:
         3a:5c:e1:3f:66:77:db:43:40:04:46:59:7d:bf:f4:63:5c:46:
         0e:e2:5b:0e:66:ac:21:18:95:9a:5f:a4:a2:15:8c:70:9d:c9:
         4e:18:7b:d2:3b:22:22:86:3a:f8:54:ac:06:da:c3:61:d5:27:
         22:0f:8f:b9:a0:78:a2:e9:a6:4e:28:93:3b:65:00:3a:9f:ed:
         7d:52:cd:1c:ff:f2:5e:ac:fb:90:84:91:25:9c:6d:77:a3:61:
         e1:b6:99:fb:c9:59:cc:d2:6c:0f:55:63:cf:1d:ab:c4:ab:bc:
         87:54:8a:bc:69:0b:f8:85:94:dd:c7:07:88:24:0c:ec:a9:65:
         f8:16:43:d4:dc:64:3d:fd:b0:ad:ab:cb:90:b3:50:de:d5:95:
         5d:82:eb:be:b4:08:1a:14:71:ce:a9:98:27:bd:24:ca:93:29:
         fc:02:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org