Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          UJGrV6MqD1i/aavgiDbv7EP7u/kUHYN0upqjUlVtRzM=
Subject key identifier:   F7:2E:D4:69:CB:5A:65:97:7D:FB:C9:41:EA:DF:4A:C7:D6:D8:9C:80
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       12E27B766DB70EBE63E7A3283AC2C5148685717A
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:15 +0000
ROA not before:           Sat 16 Oct 2021 16:11:15 +0000
ROA not after:            Sat 15 Oct 2022 16:16:15 +0000
asID:                     262691
IP address blocks:        187.94.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e2:7b:76:6d:b7:0e:be:63:e7:a3:28:3a:c2:c5:14:86:85:71:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:15 2021 GMT
            Not After : Oct 15 16:16:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:15:57:00:62:bf:a5:05:4b:33:80:51:17:
                    e8:ad:94:4b:e2:bb:87:a3:d7:da:bd:42:ce:99:96:
                    25:9a:7d:06:16:ef:4a:5b:ee:61:8f:b0:18:b2:f1:
                    2f:48:69:d7:6e:e4:85:76:b7:fa:83:e5:46:94:27:
                    a7:b0:71:3e:37:ab:93:15:2a:2c:68:07:3f:bd:64:
                    9b:c8:16:e5:02:65:cf:1f:ac:c8:d5:e4:ad:4b:ad:
                    68:40:6b:e1:e8:cb:ac:ba:65:db:c1:93:01:92:63:
                    03:43:90:bd:98:f1:01:4a:1e:74:b0:e9:92:f0:4e:
                    69:ea:02:5a:a7:ca:ff:81:29:78:61:a4:81:51:92:
                    4a:b9:28:f3:db:4f:8e:8c:ec:4e:00:b1:8d:c2:ea:
                    56:a0:54:30:6c:eb:65:09:cf:c9:90:04:11:94:69:
                    aa:c8:cc:2e:28:80:6a:2f:3a:57:44:34:3a:68:0d:
                    20:e5:d0:a1:11:fd:c1:e1:b7:34:10:07:a0:bc:4e:
                    d2:85:08:6f:22:c6:0a:43:eb:af:03:b8:b3:7e:83:
                    73:02:cc:48:ab:c5:ea:16:26:8b:70:79:48:08:ed:
                    19:c1:19:7b:82:2e:2c:5e:96:88:aa:d0:47:d8:6e:
                    9c:a5:a1:27:39:f1:36:66:a4:02:c4:5e:a3:b3:fd:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2E:D4:69:CB:5A:65:97:7D:FB:C9:41:EA:DF:4A:C7:D6:D8:9C:80
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:24:0b:f4:3b:6f:0d:97:63:26:6c:ad:0d:7d:59:78:ac:
         a8:7c:4b:dc:17:a2:6c:0b:56:b6:0b:88:be:db:43:ca:f0:3b:
         41:0f:1e:59:1f:10:df:4b:43:5b:14:92:81:2c:85:7a:69:dd:
         e6:2a:3b:0d:70:8d:b6:01:ec:f2:88:28:40:d6:3b:83:7a:a0:
         24:46:0e:63:14:92:9a:f5:04:27:fa:65:9c:ae:d9:52:f7:e6:
         37:fc:ed:7e:c7:0c:6d:27:43:17:06:dc:d1:54:a0:9b:c3:55:
         a5:49:d3:8b:ac:54:76:b7:7c:04:3d:e9:b6:ae:df:2f:4a:58:
         3a:5a:6c:65:f6:07:48:a3:39:61:2e:51:a0:54:ce:93:4d:46:
         5b:dc:4d:b8:f2:8c:4c:28:30:c4:a3:37:b6:59:56:08:19:64:
         f6:67:c0:c6:ba:e6:8d:a9:23:d2:eb:88:78:ac:02:52:60:e5:
         b8:57:c1:14:c1:f8:9b:46:0a:3f:f6:40:e4:93:c9:d9:b7:48:
         df:eb:a7:6c:c6:d9:10:75:61:f7:43:82:c8:30:d3:71:8c:f4:
         b2:da:ce:a3:b4:07:67:23:06:27:08:7b:6c:2c:a0:e2:21:72:
         fa:f7:71:af:f8:c5:cc:70:62:fb:e7:27:64:e7:5b:6a:0c:b5:
         a7:66:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org