Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3232302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          rU2vpdkKgONWp+4t7wZIbbXkRVobVv2u9vJROjhIdUk=
Subject key identifier:   18:34:84:35:3E:BF:A8:25:EE:19:BE:59:8D:F4:BA:DD:3F:62:09:98
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       6719FEC3A8D5168510D51DA49A9A79C96CA90E43
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        186.194.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:19:fe:c3:a8:d5:16:85:10:d5:1d:a4:9a:9a:79:c9:6c:a9:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:59:26:53:e5:b8:4f:f6:6f:4a:8b:31:e6:
                    20:88:07:07:74:2f:bf:9e:e5:24:b2:4b:70:ad:ea:
                    3a:8c:13:80:3f:4c:2e:4c:48:f8:98:08:51:c9:86:
                    da:80:22:4b:f4:ab:08:4e:5a:5b:0d:42:8f:ff:25:
                    5e:2f:8b:0b:23:7d:83:94:d5:ea:1c:ce:10:e4:77:
                    aa:7a:47:e0:01:0e:32:98:b3:fa:34:96:3d:c8:fb:
                    96:54:fa:88:a7:bc:b8:0f:7d:16:38:de:49:d1:c2:
                    db:b1:94:62:a3:6d:1e:90:52:eb:64:9b:db:02:07:
                    e1:9a:82:87:13:9d:ce:12:26:b1:08:62:7b:1a:da:
                    9f:c0:de:8b:e1:ac:c7:d0:1b:89:9d:9b:fb:17:69:
                    1f:42:4b:7c:85:e5:84:6c:bf:ba:5c:a9:c9:e3:0b:
                    46:c8:83:05:bd:43:fc:c4:da:d4:2e:77:30:b0:bc:
                    f5:1d:9d:53:fa:98:ae:6c:1f:6d:89:f9:5c:76:97:
                    79:e4:72:7a:28:42:44:90:37:9f:d7:73:8c:4d:b9:
                    80:7e:a6:f3:01:f5:bb:92:bd:cd:ef:ba:3d:a9:3f:
                    89:c0:8d:5c:0c:dc:88:80:66:eb:3e:8e:31:c0:33:
                    8c:26:fc:bf:bd:ec:1d:4b:3f:a6:0e:5d:82:94:02:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:84:35:3E:BF:A8:25:EE:19:BE:59:8D:F4:BA:DD:3F:62:09:98
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:33:ab:b7:2b:c7:44:26:c8:29:83:17:ba:67:64:6a:03:
         61:f3:f7:39:90:c4:e7:68:85:6f:83:27:9d:ff:95:b9:a0:6b:
         1f:09:e8:e4:bd:62:22:11:34:43:f3:63:31:a2:15:e0:7c:06:
         c7:7b:61:50:82:b4:c3:1b:bc:b9:0b:c8:08:c9:3e:f6:2c:1e:
         78:9a:a7:28:32:70:08:92:6f:b5:38:ff:7a:71:93:35:a1:cf:
         ad:ed:b3:ba:0b:a3:4e:3a:28:04:5b:46:3e:f9:0b:7a:10:98:
         f5:24:61:cd:e5:a9:7b:80:47:d8:41:0e:f7:41:f1:9a:88:8a:
         9b:b8:9a:f2:d1:ae:70:46:98:8b:4b:d6:a3:07:0a:b4:ef:28:
         3e:f8:2e:4d:0c:86:91:6a:12:6f:e7:95:8a:dc:b4:72:83:84:
         5c:85:15:19:d7:14:e5:97:3d:35:c6:bb:ca:be:94:6d:a9:54:
         db:a0:51:45:0c:4e:6f:ab:4d:fb:66:41:58:74:7e:c8:e0:5a:
         7c:65:5c:dc:90:b9:6c:87:02:3c:ab:d1:46:db:f0:8d:f9:68:
         d4:c2:b4:ca:72:64:04:dc:df:b0:22:94:eb:d5:d1:67:fe:b3:
         08:98:f8:cb:c1:8d:27:49:9f:b6:41:98:04:fb:25:ab:e5:2c:
         7d:fe:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org