Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          MRDTyJJJdwGhf/rd3/xbt6/wqUQkhrqRJ/Vh96teg3U=
Subject key identifier:   B8:E5:78:74:34:5E:5A:21:2A:A7:5E:3C:27:03:E5:C3:FE:1C:E7:10
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3D06A428D6D8C403C88E91D640BD30AE41B263A8
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        187.94.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:a4:28:d6:d8:c4:03:c8:8e:91:d6:40:bd:30:ae:41:b2:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:93:b4:f1:de:ab:89:c0:fd:0b:17:eb:34:
                    2c:7c:10:12:01:62:9f:01:aa:34:95:eb:a1:39:19:
                    0d:41:d7:94:31:ee:32:0e:23:3e:41:c5:3a:98:e2:
                    f1:17:8b:64:7a:2d:32:0f:25:43:2c:07:72:47:56:
                    96:70:70:86:84:c2:b8:52:2d:28:50:ec:6c:c7:2f:
                    e1:fd:6d:56:6c:71:e3:7a:30:60:01:25:a3:23:2f:
                    47:d2:11:ec:c7:1c:d7:a8:44:10:a6:78:74:e1:79:
                    a0:63:b5:82:07:f3:ae:ed:d9:a6:32:f2:90:d3:0d:
                    22:d3:d7:07:87:89:56:71:fd:27:d5:fb:26:69:0f:
                    e7:ef:7b:fd:90:7c:94:24:46:de:5e:10:b9:8d:eb:
                    b4:3a:4e:d0:c2:ef:a3:2a:7d:65:79:e8:63:84:8f:
                    e0:40:bf:2f:07:64:49:56:b8:99:4c:10:ec:ac:da:
                    ff:71:a3:99:51:b9:18:be:fb:2b:c9:2c:28:08:90:
                    89:8d:56:0e:d2:28:da:eb:93:1b:57:9b:0e:5c:6e:
                    4f:8c:e7:20:ad:39:ea:9b:fc:ab:39:89:38:b4:6b:
                    c6:73:3a:5f:e6:72:93:69:43:68:a3:28:cd:57:10:
                    8c:1f:52:f9:4f:bc:ea:e1:e8:ba:16:62:48:13:26:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:78:74:34:5E:5A:21:2A:A7:5E:3C:27:03:E5:C3:FE:1C:E7:10
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:be:8c:e0:a3:24:43:68:ca:53:45:04:74:e8:6d:b6:91:93:
         81:66:e7:dd:c2:6d:71:b6:d2:70:33:4a:c7:d7:23:0c:19:9a:
         e2:11:f5:c3:8d:ac:70:7a:02:d7:99:ca:b7:7b:9e:02:44:f0:
         4f:dd:de:69:04:09:b1:4a:5a:f6:e2:49:ac:6c:fe:94:e5:55:
         b0:a8:6b:2f:70:ef:d8:27:04:d4:e1:65:b4:d2:37:05:8e:51:
         ab:06:33:5d:32:09:b3:7c:8f:12:9f:8b:d3:20:c6:1a:8d:41:
         f7:8e:1e:56:8e:f8:37:9c:83:c7:d7:9d:01:9e:c8:7d:a5:fd:
         e8:e9:3e:7e:03:8c:24:be:9f:0a:54:d4:ab:b0:8e:75:4d:43:
         3c:68:1f:bf:46:d3:6a:6f:0d:04:76:ad:2f:e6:b2:2b:39:96:
         8c:c4:01:49:26:c3:8a:5b:56:df:59:b4:e6:77:5f:2f:7b:7a:
         ae:d0:62:f2:c5:6c:4d:92:46:ac:92:72:8d:ba:10:86:8e:73:
         bb:22:8c:20:81:04:d5:43:01:a6:e3:0b:d2:1b:53:33:f8:a1:
         9d:01:c2:1b:4d:79:13:85:9e:18:64:6f:d7:88:03:61:b0:2a:
         93:7c:61:e5:65:d0:6d:2f:ec:f8:d9:80:bd:37:ce:31:c8:0b:
         df:75:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org