Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          UGSbVqF1tawS6NQg6+X0YqFfIjeRpJxcDzJQZucGNdE=
Subject key identifier:   39:AD:5F:42:B1:1C:2A:37:B7:14:6D:6C:46:6F:E7:60:E7:D2:6F:11
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       49773BEFE27C5F1B8A8C22077BA7AAA6272E3127
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        187.94.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:77:3b:ef:e2:7c:5f:1b:8a:8c:22:07:7b:a7:aa:a6:27:2e:31:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:ed:c4:13:8d:d7:7b:f1:d6:76:dd:8e:7b:
                    d8:8f:e6:78:1c:46:bf:3b:2d:61:5f:c7:03:68:5c:
                    41:56:0c:12:5c:44:31:2b:b8:fa:44:08:97:55:56:
                    24:91:2d:c6:cc:89:8a:47:62:0e:21:51:35:47:86:
                    19:be:a2:61:2c:6f:60:04:8b:2e:3a:b7:f2:d9:f5:
                    56:fc:de:a2:2d:14:05:b4:c8:8a:bd:8a:c9:83:6f:
                    53:23:37:77:4d:11:84:8e:7f:6f:80:e3:d7:9d:42:
                    3c:15:6b:38:ab:56:c3:1a:ed:4f:af:d0:29:67:ac:
                    bc:b4:74:bb:95:3e:10:b4:8c:43:f5:40:c2:ee:9b:
                    a7:1a:6a:97:31:be:ab:7e:3a:49:e8:db:b5:d9:ec:
                    c2:cb:4f:6e:30:9a:56:8f:35:58:cc:0c:66:1f:fa:
                    52:88:b9:de:26:ec:b1:ac:cb:32:c3:97:33:5b:79:
                    ef:bb:15:21:72:c9:84:a4:97:45:61:4c:0b:dc:44:
                    ca:ae:db:fc:65:3f:3e:22:0e:73:0b:07:43:cb:00:
                    b6:3f:e3:0a:d5:80:bc:11:1d:21:fb:07:9c:c5:6b:
                    9f:c3:c2:04:1f:30:7b:aa:55:00:8f:b1:50:3d:fb:
                    6a:b5:bb:11:f0:65:6a:56:76:18:f2:14:5b:32:3d:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:5F:42:B1:1C:2A:37:B7:14:6D:6C:46:6F:E7:60:E7:D2:6F:11
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:c5:10:c3:5c:6a:94:71:b3:e9:27:d7:a3:18:16:db:29:
         b0:1b:a7:6c:74:28:fa:3d:80:dd:c7:60:6b:0c:c5:99:29:35:
         91:67:4d:d2:97:b1:6b:ce:b2:6a:f8:a5:ab:cb:72:6c:6e:8d:
         7c:25:e2:72:b6:6d:de:ad:37:10:e8:cb:3b:24:05:59:75:16:
         1b:e8:48:72:91:e5:51:97:78:46:4d:70:25:db:59:82:08:f2:
         33:61:1b:25:6a:be:70:31:02:f1:49:27:6b:a8:be:4d:21:b2:
         97:cf:19:a6:d2:df:cf:b9:86:ce:af:16:44:cf:cb:0a:1a:57:
         b8:ef:d3:3f:cf:23:3a:e8:77:c8:4e:1d:e6:f9:eb:e1:b1:a0:
         43:63:d9:b8:ac:d1:6e:b0:55:67:33:a9:ed:dd:ff:e9:61:a8:
         17:1a:e1:a9:fe:92:4a:20:03:8b:96:51:6b:16:97:2d:39:a5:
         5b:36:b8:2f:4b:5f:02:23:e7:27:fd:34:88:11:a2:03:e8:71:
         92:2a:22:d5:f2:95:3d:65:14:6a:52:69:2c:41:06:cc:eb:78:
         e0:3d:13:d0:9b:1d:9b:35:b7:47:b3:37:4b:45:1c:e7:05:52:
         86:7a:c8:8e:8a:88:29:4d:69:5f:e7:96:ad:2d:cc:b1:d7:84:
         ec:6b:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org