Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          ANEHYEcNvr9cY/hKfRaoRVXWeQzGB5jOr2sC5Nz2ooI=
Subject key identifier:   DE:33:26:FB:92:D5:DC:7A:54:A5:FA:0B:43:38:47:7E:DE:5F:48:B1
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       0FADC05F201E1A611F33E45FFE17F23693A1D6E0
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        187.94.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ad:c0:5f:20:1e:1a:61:1f:33:e4:5f:fe:17:f2:36:93:a1:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:57:82:e1:36:35:2b:5a:36:1f:9d:3b:f7:
                    55:e5:4e:5c:ff:ec:ec:dc:18:5c:d4:c8:86:a7:53:
                    8c:d2:85:c3:15:9b:c1:41:d8:f4:62:96:01:7c:23:
                    f1:51:0f:ba:7c:eb:5a:20:7e:cd:57:97:00:d8:bb:
                    0d:e6:f2:2c:50:f2:b0:86:9e:18:6a:74:a2:76:1d:
                    c1:49:4a:32:f6:5f:3b:bf:6c:5f:a2:9f:83:92:33:
                    9f:6a:6d:fb:3e:34:06:f5:19:10:18:a2:4c:ed:08:
                    40:67:17:e5:4c:e7:7d:2a:04:4c:fa:d2:fa:13:53:
                    09:7e:25:a3:67:51:a5:bb:a3:f6:87:ff:6b:2b:64:
                    18:40:ef:b5:32:3d:61:4f:3c:98:05:c0:01:08:e9:
                    b1:eb:79:9b:98:70:0a:bf:ff:c0:9a:4f:ff:6a:61:
                    7b:33:00:40:72:64:ba:73:c3:07:ad:d6:ce:4b:f5:
                    0d:3c:f6:aa:0d:de:7d:d1:33:19:c6:96:74:52:4e:
                    b1:1b:a0:49:87:95:43:88:6c:f3:b2:45:ce:e3:21:
                    2b:67:80:98:39:c6:33:25:a2:63:e3:5e:c6:2a:ed:
                    be:5b:90:f5:0f:9c:4f:bc:ac:63:ba:28:48:eb:e6:
                    40:92:aa:90:70:2f:63:08:16:c8:51:bd:e5:31:b8:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:26:FB:92:D5:DC:7A:54:A5:FA:0B:43:38:47:7E:DE:5F:48:B1
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:b9:92:ed:6a:dc:3a:0d:46:b4:5e:9c:a9:2e:39:24:d7:
         f1:8f:1a:91:33:01:36:c9:47:8c:c9:26:73:74:98:85:a3:8e:
         2e:8b:e2:1a:1c:7e:fe:11:1d:26:10:48:96:e7:26:cd:76:71:
         68:58:b3:f8:d6:38:e8:51:ac:09:d4:89:12:92:88:df:fc:6a:
         69:1c:1e:71:1a:7f:8f:52:07:b6:95:9a:20:83:b8:82:6e:7f:
         82:2b:9b:ad:ea:56:76:f1:b4:a6:e4:b8:2c:30:e1:00:51:b2:
         1c:37:16:3e:23:82:ea:88:99:8f:66:d2:17:b4:5c:81:cc:74:
         03:b2:e6:ab:98:bc:8a:a3:57:b2:2f:46:f6:71:d9:83:bc:48:
         cb:56:a1:5a:5b:ab:9b:e2:f0:6c:69:f1:3c:3a:00:d6:66:75:
         46:59:5c:fd:51:fa:74:09:39:ba:4c:7b:40:0f:d3:ee:1e:1f:
         60:4b:1f:3e:51:5d:2f:fe:9f:a0:59:f3:44:6c:46:f0:98:1d:
         01:af:4a:55:e9:21:60:91:4b:02:4f:cd:e6:d1:f3:3f:65:8c:
         50:47:6a:73:c5:1a:a0:d7:43:1e:6e:d4:e7:3b:35:66:80:1f:
         da:bd:7a:67:97:69:14:78:a4:41:2d:1a:84:ee:52:e2:3d:56:
         c1:90:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org