Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230322e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          anPIDv9vsNSf6hMeEJ7xYZPBrA0wS52tz7VsU9EKBDg=
Subject key identifier:   53:DC:5C:4B:98:33:DE:E0:6F:8C:66:CB:BA:15:4D:B3:D9:4E:74:0A
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4FDB24476DC6E898649185B6A7B5464C8B795FE2
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230322e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        187.94.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:24:47:6d:c6:e8:98:64:91:85:b6:a7:b5:46:4c:8b:79:5f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:05:1c:57:29:ff:e1:a0:7f:ef:13:99:e1:
                    a2:87:1c:4b:46:8e:5c:01:64:23:af:47:1c:d1:ab:
                    63:f1:69:e3:06:51:51:fa:20:f0:75:71:88:07:79:
                    55:38:16:03:56:73:52:47:cb:74:0b:52:e2:0c:ad:
                    16:5e:e3:c0:8c:41:05:07:b1:d2:7c:c4:3c:3c:fa:
                    1d:0b:3c:a3:e7:4c:6b:58:e0:68:82:a0:c0:79:e7:
                    9d:6f:2c:67:db:68:53:ac:74:e6:7e:a9:74:6d:88:
                    dc:51:16:fc:42:c4:6c:44:ed:f4:51:2b:99:f6:38:
                    a3:3c:6e:fd:ea:65:63:d2:c5:25:9d:de:35:cc:f0:
                    21:db:eb:02:9e:55:9d:f5:24:aa:da:2b:26:5e:d2:
                    71:b4:6d:ca:e6:52:89:a7:fd:b3:32:21:b1:63:df:
                    b1:e2:ad:03:b3:db:97:ad:26:ed:87:b5:3a:0d:7b:
                    c3:e3:bb:71:ce:0f:84:ce:7f:e2:05:15:c7:3c:62:
                    6b:5f:6b:19:2b:28:5b:87:96:7e:eb:ff:08:a8:a9:
                    ad:31:c7:87:5d:fd:c8:f5:ee:00:0e:c6:33:6a:84:
                    38:78:39:60:0f:e1:03:46:07:f5:6a:71:b7:40:31:
                    6f:b3:33:6d:2c:2b:bf:58:95:b1:51:98:12:1e:a8:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:5C:4B:98:33:DE:E0:6F:8C:66:CB:BA:15:4D:B3:D9:4E:74:0A
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:34:d6:13:aa:2f:54:78:d4:1c:0a:65:04:3c:bd:86:03:
         8d:c8:56:34:4f:a2:d3:7e:f3:99:2b:de:7a:76:67:94:1a:3b:
         46:60:c0:19:9d:95:84:19:df:b2:eb:ec:2d:44:70:7d:dd:18:
         4b:c4:ed:db:f1:01:e5:31:e1:8e:18:9c:5d:e5:7a:ad:ce:52:
         65:49:8a:12:14:ab:8d:f1:16:3f:75:54:f6:90:2c:01:79:96:
         b9:3a:ef:54:52:df:0d:1d:8c:01:30:3a:48:af:84:36:5c:cb:
         4e:af:54:a8:d9:7d:0e:1c:cf:d0:e1:ec:7c:4e:55:1e:3b:a0:
         2d:a9:87:ac:14:eb:a3:34:e4:c7:d2:0f:2a:5d:4f:ef:fc:cf:
         6e:35:99:90:d0:0a:87:fc:53:ec:1d:17:55:11:d8:15:b1:dd:
         ad:c1:18:21:61:68:fb:48:22:49:aa:68:51:79:b7:88:93:5e:
         36:6d:00:8e:af:a7:44:b5:ce:3e:61:30:be:d0:41:1a:5d:8b:
         57:9c:a2:25:ae:18:c0:b6:7d:1e:16:e6:f8:72:0c:20:86:9e:
         09:15:03:c4:80:c7:2f:cc:74:35:d0:94:3d:cd:30:3e:14:07:
         80:b3:30:db:5d:97:c3:60:d6:95:81:35:9d:7f:78:39:1b:30:
         7f:13:dc:18
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUT9skR23G6JhkkYW2p7VGTIt5X+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMTEwMTYxNjExMDlaFw0yMjEwMTUxNjE2MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VEMTA1MUM1NzI5RkZFMUEw
N0ZFRjEzOTlFMUEyODcxQzRCNDY4RTVDMDE2NDIzQUY0NzFDRDFBQjYzRjE2OUUz
MDY1MTUxRkEyMEYwNzU3MTg4MDc3OTU1MzgxNjAzNTY3MzUyNDdDQjc0MEI1MkUy
MENBRDE2NUVFM0MwOEM0MTA1MDdCMUQyN0NDNDNDM0NGQTFEMEIzQ0EzRTc0QzZC
NThFMDY4ODJBMEMwNzlFNzlENkYyQzY3REI2ODUzQUM3NEU2N0VBOTc0NkQ4OERD
NTExNkZDNDJDNDZDNDRFREY0NTEyQjk5RjYzOEEzM0M2RUZERUE2NTYzRDJDNTI1
OURERTM1Q0NGMDIxREJFQjAyOUU1NTlERjUyNEFBREEyQjI2NUVEMjcxQjQ2RENB
RTY1Mjg5QTdGREIzMzIyMUIxNjNERkIxRTJBRDAzQjNEQjk3QUQyNkVEODdCNTNB
MEQ3QkMzRTNCQjcxQ0UwRjg0Q0U3RkUyMDUxNUM3M0M2MjZCNUY2QjE5MkIyODVC
ODc5NjdFRUJGRjA4QThBOUFEMzFDNzg3NURGREM4RjVFRTAwMEVDNjMzNkE4NDM4
NzgzOTYwMEZFMTAzNDYwN0Y1NkE3MUI3NDAzMTZGQjMzMzZEMkMyQkJGNTg5NUIx
NTE5ODEyMUVBODJFMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAztEFHFcp/+Ggf+8TmeGihxxLRo5cAWQjr0cc0atj8WnjBlFR+iDw
dXGIB3lVOBYDVnNSR8t0C1LiDK0WXuPAjEEFB7HSfMQ8PPodCzyj50xrWOBogqDA
eeedbyxn22hTrHTmfql0bYjcURb8QsRsRO30USuZ9jijPG796mVj0sUlnd41zPAh
2+sCnlWd9SSq2ismXtJxtG3K5lKJp/2zMiGxY9+x4q0Ds9uXrSbth7U6DXvD47tx
zg+Ezn/iBRXHPGJrX2sZKyhbh5Z+6/8IqKmtMceHXf3I9e4ADsYzaoQ4eDlgD+ED
Rgf1anG3QDFvszNtLCu/WJWxUZgSHqguHwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFPcXEuYM97gb4xmy7oVTbPZTnQKMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMxMzgzNzJlMzkzNDJlMzIzMDMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzYzOTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u17KMA0GCSqGSIb3DQEBCwUAA4IBAQCNuDTWE6ovVHjUHAplBDy9hgONyFY0T6LT
fvOZK956dmeUGjtGYMAZnZWEGd+y6+wtRHB93RhLxO3b8QHlMeGOGJxd5XqtzlJl
SYoSFKuN8RY/dVT2kCwBeZa5Ou9UUt8NHYwBMDpIr4Q2XMtOr1So2X0OHM/Q4ex8
TlUeO6AtqYesFOujNOTH0g8qXU/v/M9uNZmQ0AqH/FPsHRdVEdgVsd2twRghYWj7
SCJJqmhRebeIk142bQCOr6dEtc4+YTC+0EEaXYtXnKIlrhjAtn0eFub4cgwghp4J
FQPEgMcvzHQ10JQ9zTA+FAeAszDbXZfDYNaVgTWdf3g5GzB/E9wY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org