Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          ekzSODn3t0aT+MJpCe3eNLgQDHZLmWtpdBbyudKZJ0I=
Subject key identifier:   20:42:77:E2:91:8A:E8:8E:3B:0B:21:19:05:6A:4B:EB:15:D9:75:1E
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       19D4EAA0AD185B07AD4E4B1EC3F706BAF931C003
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        187.94.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d4:ea:a0:ad:18:5b:07:ad:4e:4b:1e:c3:f7:06:ba:f9:31:c0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:42:23:24:65:4a:bd:a1:c9:e0:c6:10:dc:
                    59:67:ec:73:da:fc:a5:81:74:8c:d9:e3:cc:86:67:
                    ac:6f:24:4b:7b:42:6d:13:2b:96:1c:e2:46:e9:19:
                    a2:d9:ad:18:f2:4a:85:2b:83:bd:d8:6b:0d:2a:91:
                    49:e8:a7:34:26:4a:55:d3:16:4e:91:9f:26:60:f9:
                    62:6f:0b:57:66:33:e7:bc:4e:00:a1:26:c7:20:89:
                    43:93:35:7a:90:36:89:6a:4d:23:9c:66:81:be:59:
                    df:cc:69:dd:86:f2:05:c2:66:d0:80:13:12:0f:7c:
                    1b:03:75:c0:a6:0a:e8:6a:d9:66:cf:35:11:12:d4:
                    48:1c:2b:12:ce:85:ae:0f:26:e3:b0:ee:b3:07:51:
                    ba:8c:64:88:90:9b:b5:05:87:8a:71:8e:35:92:a8:
                    47:2d:a1:43:c5:bf:a3:d8:cb:3f:da:ef:08:92:6a:
                    f0:fa:86:37:cc:78:36:22:5f:bf:6e:ad:63:e9:56:
                    f6:a5:a2:41:80:e8:b4:e7:28:a1:fe:f1:54:66:46:
                    5d:ce:fb:25:52:18:bc:fc:0a:71:df:a0:98:7e:11:
                    82:14:25:8e:7a:7b:69:4a:7d:d2:0e:32:b7:8c:46:
                    fb:fb:24:bb:d0:ee:f1:66:2f:e1:70:7a:d3:d6:45:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:77:E2:91:8A:E8:8E:3B:0B:21:19:05:6A:4B:EB:15:D9:75:1E
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:cc:ae:25:88:53:bc:be:1f:b8:b9:68:e0:0f:70:b0:4e:33:
         24:8d:2d:4e:de:6d:3d:d8:90:3d:f1:f8:29:e0:a0:5e:46:af:
         9f:9d:b4:8f:a5:03:2b:86:1d:33:61:53:8e:54:48:de:fc:98:
         10:da:5b:27:90:15:e9:78:83:21:b2:c7:20:f4:64:e2:9e:63:
         a4:24:0c:32:6b:fd:d5:25:4a:9e:2a:c7:82:85:a1:f6:ce:c1:
         0d:89:4e:46:13:f6:b2:55:ad:5c:36:12:9c:a8:cf:61:e8:cb:
         7e:f5:8d:d0:fa:45:15:ba:7b:18:6b:b7:fb:8e:d4:87:d4:eb:
         97:ae:8f:16:14:d3:9e:82:dc:d6:02:a8:85:ce:c5:6f:8c:f3:
         01:91:df:a4:89:60:dd:c8:99:9d:4b:4c:1a:df:a3:92:ac:64:
         cd:13:e5:87:98:f0:44:56:af:3c:d5:4f:01:63:80:13:16:ed:
         90:01:6d:45:7f:9b:54:9c:bf:bf:34:2d:5e:42:0f:21:94:0d:
         2c:14:98:21:60:1d:ba:12:2f:55:47:d8:37:16:90:17:d4:60:
         13:87:20:63:96:f9:a5:81:9e:19:d9:7c:75:ad:b9:36:73:6e:
         51:f5:9f:4e:1b:e5:bf:7f:4c:53:c0:94:b2:27:fd:d2:b9:67:
         06:c3:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org