Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          yaJ/GoaPffff3wBOcU4fX5PvkbFBH1VBgJPaWqLLE74=
Subject key identifier:   87:84:ED:4D:D2:B4:28:B6:0B:A2:70:CC:2C:B6:BF:4C:F9:87:16:E0
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       394B7E13477DE0CEAE5B0DD5C3611C674FAFFE19
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:18 +0000
ROA not before:           Sat 16 Oct 2021 16:11:18 +0000
ROA not after:            Sat 15 Oct 2022 16:16:18 +0000
asID:                     262691
IP address blocks:        186.194.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4b:7e:13:47:7d:e0:ce:ae:5b:0d:d5:c3:61:1c:67:4f:af:fe:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:18 2021 GMT
            Not After : Oct 15 16:16:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:d4:4a:64:a7:15:30:a3:17:56:26:69:85:
                    2b:bb:03:6e:ac:d5:a3:64:d3:10:08:ba:6f:d7:68:
                    a6:7b:1e:89:ed:80:05:59:f1:cd:ae:b9:91:6f:77:
                    cf:42:ab:66:03:0d:a8:84:cc:74:13:9d:af:96:1d:
                    80:25:2b:0c:0e:65:3b:c3:43:9f:3f:08:01:38:f0:
                    50:a0:98:35:8d:14:64:42:25:a4:0e:b0:af:82:d9:
                    83:6b:23:44:67:79:be:89:5f:b5:28:f7:17:f6:54:
                    6b:ec:d9:b4:ec:e6:23:14:44:34:4a:60:38:fc:0e:
                    50:18:20:35:9e:8a:85:d8:0a:9d:93:7e:a3:69:64:
                    7b:7e:b5:e6:5d:10:98:dd:d7:7f:1e:f5:6b:57:64:
                    4a:d0:93:61:db:88:21:b9:1d:15:04:b7:79:c3:5d:
                    7a:7d:a5:3b:9a:81:72:63:e3:34:19:fe:54:1f:8e:
                    61:54:d3:21:01:de:d4:8b:24:0c:f9:0b:a0:de:47:
                    61:d3:5a:24:a4:2e:27:2c:26:33:4c:c8:9a:2e:38:
                    d1:e1:13:98:25:a1:5f:10:66:32:a2:e4:9e:b4:ce:
                    4b:49:49:99:3c:7e:e5:be:6f:1a:0f:01:03:45:fa:
                    dd:44:43:e1:84:36:07:7a:cc:aa:b7:06:c6:b8:18:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:ED:4D:D2:B4:28:B6:0B:A2:70:CC:2C:B6:BF:4C:F9:87:16:E0
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:61:f1:39:d8:64:4b:ef:d0:d1:be:fd:37:e8:d4:2a:6f:56:
         91:29:81:55:36:90:a9:66:be:ea:b6:99:9d:cd:c5:c6:c1:93:
         a4:4e:e9:a0:45:93:79:27:6f:a7:21:f0:31:29:9d:b0:73:ca:
         00:b0:0b:91:81:98:4e:43:4f:5e:aa:51:b7:9a:cc:7f:f7:78:
         30:db:18:40:53:85:81:48:9d:89:ea:eb:00:67:da:a2:06:c0:
         51:2a:bd:26:80:d0:91:3a:90:0c:50:bb:ef:58:22:78:3e:f4:
         ba:82:48:41:c4:2e:85:88:32:3a:23:bc:08:ea:50:a1:94:17:
         0a:a7:c4:14:be:0a:86:b1:83:a3:e4:2d:bc:bc:41:71:38:ea:
         77:eb:8f:18:64:f3:2f:ad:31:fd:cf:b3:59:f0:7a:0b:8a:7a:
         40:e3:70:2c:93:a1:d7:e8:e4:7e:25:5d:5e:d6:2b:0f:65:55:
         a3:6a:d5:01:a7:bb:d7:c3:5a:18:2d:6a:93:81:a2:6a:ea:ce:
         2a:c0:8a:48:38:2c:7b:1d:6f:73:b1:a2:6a:e8:7c:12:01:a7:
         ed:76:c1:45:93:65:49:b6:61:b3:16:1e:bd:ea:11:31:ae:f5:
         81:18:a0:73:f0:6e:75:3e:00:c2:33:96:d4:45:2b:3c:e5:ff:
         5d:ba:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org