Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          caJNUmG9rE8EKgp23Fg3hujQ+2fKrefGCNa3hyXlcco=
Subject key identifier:   38:7B:28:3E:36:A8:44:42:89:62:14:F6:8C:4F:15:0F:21:5D:41:67
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       372B492D4E97AD688A9F98E11B4BF28801C69AD3
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:14 +0000
ROA not before:           Sat 16 Oct 2021 16:11:14 +0000
ROA not after:            Sat 15 Oct 2022 16:16:14 +0000
asID:                     262691
IP address blocks:        187.94.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:49:2d:4e:97:ad:68:8a:9f:98:e1:1b:4b:f2:88:01:c6:9a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:14 2021 GMT
            Not After : Oct 15 16:16:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:27:44:95:26:93:10:77:90:e8:0b:57:78:
                    47:5e:ed:6f:7e:ad:16:c7:05:3b:8e:8c:a4:d3:be:
                    dd:31:44:91:96:64:16:36:61:fe:62:b7:21:5a:bc:
                    01:69:2f:9c:1e:6a:96:65:fe:e3:37:48:7e:88:c6:
                    2d:ea:87:82:6d:1c:c2:fc:0d:bf:a4:13:99:27:c6:
                    8f:cb:75:1f:fb:d0:64:5c:a7:64:7c:de:49:e3:15:
                    16:25:a3:9b:99:26:cc:9d:d2:f2:1f:26:de:34:26:
                    80:14:3e:bd:ac:44:84:6b:1d:cc:ff:64:26:08:af:
                    7d:e6:f2:70:e1:fc:13:bc:8c:7c:ee:93:6a:a9:7b:
                    6c:e6:a0:9b:05:8f:de:0b:83:f7:bf:82:71:c3:86:
                    e1:29:2d:f6:49:16:18:bb:33:7b:f9:8f:ac:90:e2:
                    fb:60:f6:68:5d:d7:d9:bf:90:6c:b6:39:1a:cc:7f:
                    8d:3e:3c:0a:25:2b:fb:55:60:57:7b:f1:5f:e0:f8:
                    1c:2f:2c:ef:cf:36:fe:d2:ca:3d:d8:a4:f4:69:90:
                    2f:ad:e7:d9:bf:5e:2e:06:94:12:8d:b5:2e:41:92:
                    93:6b:de:4b:49:5f:78:7b:0b:ee:c0:07:c1:a9:43:
                    87:20:b5:32:f0:02:32:e2:5b:47:bf:f2:3d:a2:4c:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:28:3E:36:A8:44:42:89:62:14:F6:8C:4F:15:0F:21:5D:41:67
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:62:3c:a7:8b:75:00:8b:6d:c6:e9:f4:60:77:c1:f9:4b:
         19:c4:66:fc:82:c9:4a:40:0b:60:a2:bf:c3:87:56:37:de:50:
         90:f5:d5:76:78:ac:cb:9a:9d:95:8b:69:c7:e0:2c:1a:dc:df:
         17:72:bc:42:a7:7b:6f:51:80:ec:89:ed:64:38:52:03:44:90:
         84:9b:90:5f:89:5e:04:34:9d:e7:65:d1:39:06:66:46:26:7d:
         97:6d:a4:0d:7a:a7:ed:44:7a:07:a5:17:18:f0:21:88:80:42:
         43:6d:e3:ff:9d:32:ea:7d:09:c5:c5:fd:c4:45:d8:27:df:8b:
         be:53:2d:a9:8d:3f:7e:ba:87:73:7f:0a:9b:61:ed:c9:c8:0c:
         bd:5b:77:1f:03:23:60:40:5e:d2:54:ab:1d:62:3a:3e:b1:a1:
         88:da:d7:39:13:05:a8:5b:6f:84:6b:25:7e:5d:2f:76:50:e3:
         1a:26:ba:e3:48:92:71:dd:ae:f2:cc:03:99:3f:13:47:30:b5:
         c1:c5:61:02:51:f0:06:70:d3:41:c9:e5:a0:4f:9e:4d:3f:44:
         eb:87:37:36:be:06:b8:2c:2e:18:be:6f:3e:d8:7a:aa:ee:54:
         da:b4:11:f7:81:d5:9c:dd:44:b1:99:aa:6a:be:2e:b1:f3:70:
         0e:e3:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org