Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          x3GRs+RxgeMDr+1EsnMebty5JHAPPoVbP4Ojm68YRXA=
Subject key identifier:   77:E0:5D:81:A6:1C:8F:88:62:A9:45:51:83:35:F9:06:ED:C5:A2:51
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       19699ED349FA6B12631B727400340AAF7135C9ED
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        187.94.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:9e:d3:49:fa:6b:12:63:1b:72:74:00:34:0a:af:71:35:c9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:c0:19:9f:82:4d:ae:7f:4d:f2:02:07:0b:
                    85:c5:a2:b5:4e:db:93:ed:b3:17:10:70:bd:b9:b4:
                    f2:9b:d4:1a:2b:6f:e5:67:49:3c:fc:12:cc:45:5c:
                    60:82:03:a0:8c:3b:64:96:e6:ee:41:91:7a:8f:54:
                    c8:51:2a:55:3e:40:16:b8:21:fc:25:33:23:47:29:
                    81:df:bf:44:53:79:e2:c2:54:32:06:94:c5:3a:6c:
                    55:df:6b:5f:c4:88:25:44:9b:13:4e:1c:30:d8:f0:
                    a3:cf:47:05:c8:23:32:e3:c4:33:96:85:47:30:34:
                    a1:b9:c0:9d:c3:fd:0b:9d:ef:e6:48:b1:26:03:5e:
                    cc:45:96:19:53:e8:99:d3:4d:2c:3f:5f:02:99:b5:
                    2d:d3:3b:0f:0b:31:0b:a5:e1:aa:e0:e8:69:68:2a:
                    a0:71:1c:80:6d:13:ff:09:d8:e7:9a:c0:3a:8e:7f:
                    c1:fe:0e:21:a9:1f:56:8f:32:1c:42:ae:2a:6f:c3:
                    df:8d:55:bc:65:a0:00:2a:89:5b:e6:b5:05:3e:9a:
                    49:40:41:9a:ef:2f:12:64:56:b7:22:e2:21:03:93:
                    cf:ec:4b:ce:55:84:e5:fd:ba:a0:88:5b:cc:e6:57:
                    18:fb:99:3e:fd:17:61:93:b6:1d:7e:03:d8:f3:72:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:5D:81:A6:1C:8F:88:62:A9:45:51:83:35:F9:06:ED:C5:A2:51
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:56:36:ba:75:ae:d4:7f:a8:50:61:12:2b:6a:e2:ed:7b:7f:
         35:d5:ff:8b:44:d6:13:45:1b:eb:dd:e8:f6:bb:f9:7b:10:8f:
         d1:69:b8:b9:d8:31:9b:e2:b3:21:86:6d:f3:29:e9:9f:d2:b5:
         aa:d6:84:65:71:98:64:a7:b8:86:02:3c:b6:19:fe:e1:31:88:
         f0:ca:47:54:4b:9b:d5:f7:2e:1f:0c:78:88:13:66:2e:26:a2:
         80:c3:a5:8d:55:74:08:7b:8b:8d:2a:52:fd:3b:71:27:d9:ed:
         dc:c6:45:a8:22:94:71:cd:cf:79:69:2d:0d:9c:32:6b:38:dc:
         2f:6b:44:5d:97:43:4a:cf:b8:cd:8f:2c:0c:c0:f8:07:b6:cd:
         72:da:f2:3d:b4:7c:d8:46:c0:3c:55:2e:e2:22:bd:eb:15:d9:
         0a:6d:1c:bd:3f:66:dd:f1:a9:21:97:09:e2:ab:9a:1d:34:af:
         ed:4a:9f:a9:5e:1e:12:3b:8e:3b:7c:ba:f5:7e:7c:8b:c0:af:
         00:3f:03:ad:cf:2b:96:6c:b5:d0:ec:88:59:9f:08:ab:b5:b3:
         19:99:99:ec:59:7c:49:6f:b8:2b:54:3c:10:19:3b:8c:82:85:
         3e:ad:8c:61:2d:4b:8e:d2:94:f7:05:b8:d9:37:9e:86:b8:21:
         c1:d8:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org