Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          Zi3f4sMjJYj92BsqxUyt3aMpDnkXeRZsKsjwrpFHXNM=
Subject key identifier:   1B:CF:C7:20:C0:13:05:A1:E6:64:B7:52:BC:22:6A:F5:FF:B5:85:06
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       70667256A1323473D6A849071EF7D3B890D95C06
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        187.94.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:66:72:56:a1:32:34:73:d6:a8:49:07:1e:f7:d3:b8:90:d9:5c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:af:6d:88:6e:8c:77:96:16:e4:7b:fd:b8:
                    de:66:1e:f5:f5:d5:25:72:0b:b6:3c:75:aa:80:5b:
                    f1:df:ed:c4:a7:f1:e8:40:bb:ee:ae:ab:b5:07:6d:
                    82:00:a9:14:03:58:f0:76:c8:f4:1e:13:99:bb:bd:
                    91:cc:01:ca:71:1e:69:00:b2:e9:58:29:e2:17:6c:
                    52:4b:3d:84:35:8c:0d:15:99:1b:4e:b1:7b:32:76:
                    d2:a4:23:90:fd:9b:13:25:63:b3:91:bd:1f:fc:9b:
                    42:da:0f:63:ba:60:37:a7:81:18:90:b5:68:9e:07:
                    eb:24:c8:6d:ed:04:f7:ef:89:3f:17:b3:35:73:9d:
                    5e:0b:eb:66:dd:c1:23:09:cb:d9:c1:84:7d:ef:c1:
                    2c:cc:81:17:be:e8:f2:46:c1:30:06:23:a1:ea:48:
                    9d:d4:41:dd:45:75:af:7a:53:7f:9b:b6:6e:43:aa:
                    df:e6:ee:ff:dc:bc:86:ba:03:90:59:55:3d:f4:79:
                    d8:0b:d6:b8:61:1c:00:21:9f:1f:55:11:c4:86:2a:
                    fb:8e:1f:05:f4:8a:9b:28:34:c9:96:46:cf:94:ac:
                    1c:1b:10:ba:48:71:31:0a:06:bc:c2:ab:be:6a:d0:
                    ca:8b:b2:29:08:8e:83:80:fc:13:e6:72:24:90:7a:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:C7:20:C0:13:05:A1:E6:64:B7:52:BC:22:6A:F5:FF:B5:85:06
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:78:90:5e:1e:13:ad:42:c9:d4:75:a4:16:e0:b1:5b:a4:3a:
         ea:63:84:cf:b2:36:62:22:91:6d:cd:9f:a5:64:dd:71:d3:bc:
         57:ac:a1:e9:2b:05:23:c1:47:a8:48:88:74:6a:67:fc:ba:5f:
         f3:51:0c:fd:70:db:52:f5:d4:d0:70:6c:28:5f:e3:6e:1d:c0:
         d3:e0:c5:7a:63:b1:b9:3e:19:84:b3:f6:77:ce:c4:58:9c:49:
         c6:eb:2f:73:76:33:74:32:dd:bd:0b:5a:95:c4:c5:79:a6:43:
         59:17:34:46:91:a2:e3:b6:70:dd:12:46:bb:ce:4c:71:ac:a3:
         0d:57:42:46:9e:1b:e7:88:62:9a:95:57:30:81:a7:bf:8a:54:
         b6:57:e0:fb:d5:03:a7:d3:9b:17:a1:de:a0:b7:5a:b0:a3:b6:
         df:22:bd:36:26:e0:91:a4:8a:25:ee:a8:d2:e0:2f:01:d7:bd:
         50:f7:56:f9:fd:bd:e8:af:cf:c2:a5:5e:86:33:0a:f7:e2:14:
         1d:08:50:5c:96:2f:8e:24:ca:f7:6b:ee:78:02:b3:e7:05:fa:
         a2:da:ca:d5:30:89:4e:66:8d:1a:81:ad:71:f1:cc:be:89:4b:
         4e:d3:13:c5:9b:7f:ca:83:4c:3c:a9:6a:f1:fc:ab:33:28:8c:
         12:4f:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org