Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          E39srCP1UfewExI/ROR8py7wCGJSFOlaM/g9mLYarv0=
Subject key identifier:   E4:05:40:EF:38:12:29:71:E5:94:A8:CE:31:1E:64:43:64:7D:A6:87
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       23B3A9D3B6216A44D462D556CAF78FA9A4878EDD
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:10 +0000
ROA not before:           Sat 16 Oct 2021 16:11:10 +0000
ROA not after:            Sat 15 Oct 2022 16:16:10 +0000
asID:                     262691
IP address blocks:        187.94.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b3:a9:d3:b6:21:6a:44:d4:62:d5:56:ca:f7:8f:a9:a4:87:8e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:10 2021 GMT
            Not After : Oct 15 16:16:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:4a:5d:d1:90:8e:b1:b8:71:75:1e:f4:db:
                    3f:37:19:53:dd:bf:5b:6b:cc:a0:d6:bb:ac:f3:92:
                    be:6d:c7:93:54:9f:51:d0:65:e7:fa:2d:13:a5:8e:
                    27:61:64:87:41:37:8b:86:a3:57:a7:8c:f6:ba:7c:
                    7b:50:73:9e:20:43:dd:db:58:30:bb:3d:69:b2:cd:
                    e0:d8:75:5e:58:c5:0c:22:39:12:75:fd:f0:23:d7:
                    5e:03:fc:3a:72:9e:e5:8d:70:68:6d:73:75:67:3d:
                    c0:36:97:e1:44:2b:50:43:2c:89:22:19:24:9e:f4:
                    f3:b2:66:7a:c5:bb:84:96:1d:42:de:2f:10:9a:6c:
                    3c:5d:d8:cf:3b:a9:22:9a:5c:db:2b:ac:d3:73:68:
                    2f:4c:c8:59:9c:7f:f7:84:a9:77:cc:84:e8:19:f8:
                    5b:d0:cd:a0:30:d1:92:f0:f0:18:fb:8c:76:59:1b:
                    b4:10:cc:23:a1:4f:ff:af:e0:25:bf:f7:22:b7:13:
                    76:9b:11:eb:4f:c8:5e:44:45:a9:40:49:0e:d3:25:
                    d4:47:75:52:69:8a:21:47:4d:90:9a:44:f3:3c:11:
                    f7:48:2d:98:cf:8b:95:f0:7d:1b:fa:0a:f2:78:ee:
                    b7:d6:5a:0a:53:b2:61:29:a9:6c:d2:0b:79:da:52:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:40:EF:38:12:29:71:E5:94:A8:CE:31:1E:64:43:64:7D:A6:87
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:6c:48:cd:3a:57:79:f2:16:6b:25:0f:0b:e8:31:24:3c:
         55:21:e0:f2:ca:16:a3:4e:99:c9:41:b6:50:57:46:c1:54:62:
         ae:4f:a4:2a:bf:f0:de:eb:b2:72:e5:28:ce:78:27:2f:aa:40:
         4f:19:b4:c7:75:fd:54:fc:0f:6f:cd:ee:9e:e1:c7:c8:20:95:
         0c:ea:6a:c8:4a:92:3b:70:5d:24:f8:07:c1:20:89:27:20:0a:
         32:38:66:2d:3b:ec:5f:f6:4d:5e:1f:7f:d2:ea:1a:cc:cd:db:
         ad:b0:d4:45:09:78:bf:c9:22:3e:12:96:43:30:2e:29:d3:a2:
         8a:2a:01:55:7f:90:64:5f:53:e1:97:e4:76:49:18:ca:3f:52:
         0a:89:a3:0e:46:42:e3:eb:37:9a:b6:a1:9d:73:57:d3:5c:af:
         30:0e:05:48:c6:96:bb:40:d3:55:67:67:96:59:18:fa:94:8f:
         88:3e:26:47:02:72:f1:33:7b:d3:fe:37:a5:08:e9:50:e6:80:
         b3:8a:6d:b1:75:c0:b6:99:dd:a8:c8:d8:20:a6:b7:1b:0c:f4:
         be:f1:64:b6:0b:93:17:64:49:6d:60:26:29:29:58:41:0e:a7:
         88:e2:62:ee:8d:b6:18:98:4d:cb:b7:00:07:ee:8d:ad:e2:a0:
         5f:fd:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org