Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          5lWIfPIAQs7TsCZ43ZzpISTDM55Ndnf4fuumyqL8Ugg=
Subject key identifier:   4E:7A:E4:A5:C0:9E:64:49:24:2E:72:39:A8:06:98:EB:25:52:2B:D0
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       78E020B75361C729909A1141A373AF9CAEBE80F5
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:18 +0000
ROA not before:           Sat 16 Oct 2021 16:11:18 +0000
ROA not after:            Sat 15 Oct 2022 16:16:18 +0000
asID:                     262691
IP address blocks:        187.94.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:20:b7:53:61:c7:29:90:9a:11:41:a3:73:af:9c:ae:be:80:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:18 2021 GMT
            Not After : Oct 15 16:16:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:3c:a5:b9:76:73:b3:61:ee:47:bb:99:c9:
                    6e:a0:e6:e0:ca:2d:27:70:88:ba:62:5e:36:13:23:
                    92:f0:38:9d:1b:4a:89:ad:c3:24:53:4f:b4:a9:14:
                    89:91:b4:ba:ac:36:19:f0:34:35:8d:e5:3d:a8:71:
                    55:77:7d:fd:a4:77:0f:37:9d:24:4c:51:00:10:e5:
                    28:23:f5:c6:55:37:c7:ed:4b:fe:98:bb:5f:8e:a3:
                    ca:ef:0f:75:87:50:15:a3:09:0a:fb:3c:0d:aa:b1:
                    92:ed:9d:80:5e:d9:25:43:84:d2:6e:ad:7b:97:ea:
                    ff:68:4d:e8:79:79:2b:d1:d0:db:5d:5f:dd:29:42:
                    68:8c:c8:da:12:7c:08:d4:6d:6a:2d:81:16:db:39:
                    81:3b:6d:9d:c0:25:92:b8:3b:d2:1f:81:46:d9:0a:
                    04:2c:d2:56:3b:7b:b9:cb:79:7e:5c:85:37:86:0c:
                    0e:55:b9:6d:e6:9a:7a:90:c1:7f:29:50:d9:27:68:
                    a5:8c:c6:55:9f:70:c8:da:c1:34:55:f1:3f:f5:b4:
                    f4:b8:39:bf:21:91:a9:25:5b:ad:05:05:82:04:6e:
                    8f:9d:da:16:76:8b:c1:c8:3b:38:9e:ab:c2:81:84:
                    96:05:6a:27:3b:ad:0a:dd:e5:80:eb:85:c9:49:43:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7A:E4:A5:C0:9E:64:49:24:2E:72:39:A8:06:98:EB:25:52:2B:D0
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:a4:d1:36:8e:3e:57:4f:0a:c2:ce:2a:23:cf:85:30:6e:a9:
         96:b7:20:3f:9e:27:68:28:f3:e1:c6:ec:af:af:ce:a2:54:09:
         70:94:d0:8a:f0:66:6c:ca:d0:d3:cd:6a:4f:d8:f0:12:79:14:
         af:a3:32:00:34:c0:66:9f:87:96:8f:ff:f8:ba:d7:4c:7b:50:
         63:68:64:6c:fe:14:ff:ec:63:3f:7a:92:a2:5e:2d:43:b4:08:
         e9:46:33:a6:70:55:af:fe:32:75:ff:bd:b6:4d:4c:ac:e2:50:
         17:ad:d3:9e:f9:ee:e0:f4:73:92:ee:b9:b9:e3:09:07:3c:16:
         1b:f4:c4:44:a8:9f:e2:ad:06:e6:59:14:f1:71:69:2d:92:4e:
         2d:24:85:c8:17:f2:a5:95:a8:3c:e6:70:ec:f3:99:3a:45:c0:
         84:e8:21:85:d9:7b:78:59:ef:bc:75:58:6b:cd:57:66:93:a1:
         0f:01:d9:34:79:af:61:62:0b:5a:86:e5:6a:f3:b4:02:78:f2:
         1a:74:e8:57:dd:c4:92:fd:6f:6f:31:56:9a:94:d8:ef:1e:2e:
         e4:dc:8b:e0:cd:3e:a8:de:c3:b9:11:9a:51:8d:8d:9f:d4:83:
         54:d7:39:be:52:f0:39:a4:da:6f:8f:d2:f7:09:10:9f:dc:fb:
         13:2b:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org