Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          +0HOGr5MrcBVmDb5uqZq78DlKIDY0+qbArFdEE+Jt2Y=
Subject key identifier:   CA:C5:96:ED:A2:20:C9:79:AD:41:C9:36:F0:F1:7F:D9:27:02:27:3E
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4DF2C65EA427B149D2D9F577C39A0225BD9C4A48
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        187.94.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:c6:5e:a4:27:b1:49:d2:d9:f5:77:c3:9a:02:25:bd:9c:4a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:b9:b5:3f:44:a8:31:01:c8:25:36:8b:d1:
                    d3:24:82:e3:a9:c5:50:96:31:83:cf:d4:78:58:43:
                    fd:3b:28:76:aa:fd:9f:79:00:2e:29:da:b0:b8:a5:
                    48:d1:0d:b0:e2:ea:cf:d7:9b:ad:2d:70:c9:16:22:
                    f0:50:56:aa:88:02:6f:e0:e4:70:5e:16:ba:b5:28:
                    1d:a9:7f:5e:f1:e8:4e:ee:21:3d:36:8a:7f:bd:e3:
                    d3:a8:f4:fc:39:bc:3e:c1:bb:f0:82:5c:c0:59:83:
                    f8:57:8f:d7:bc:0d:ec:e9:da:ec:dd:b1:92:ec:8d:
                    fb:8e:b1:81:07:9a:66:92:ad:f4:1c:d1:8f:1f:86:
                    11:e6:09:86:b2:c6:cb:01:14:ff:12:26:ac:9e:6f:
                    6f:d3:9f:bd:30:ea:71:c8:61:d5:2d:44:77:05:01:
                    0e:2d:c9:0c:02:56:1d:86:62:72:b9:71:b1:19:e6:
                    03:b2:d5:b0:74:e4:76:7a:c6:60:57:4b:17:23:61:
                    8a:90:3f:c7:67:5d:3f:d1:36:61:c1:81:e0:c6:b4:
                    d0:1c:69:04:97:2e:51:9b:54:1e:45:9a:d8:38:f1:
                    35:b3:e9:05:93:aa:b3:e3:99:75:47:ed:0c:d8:9a:
                    56:8b:82:7f:4c:e1:3b:49:97:2b:6a:2b:66:ce:0a:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C5:96:ED:A2:20:C9:79:AD:41:C9:36:F0:F1:7F:D9:27:02:27:3E
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:be:4d:fa:e6:6e:1d:c6:2b:c1:4f:c1:bc:d5:80:2f:ca:
         d2:db:f6:80:bf:39:b5:5e:2d:81:98:71:69:9e:d0:12:00:87:
         f2:8a:bb:82:5a:d3:a8:d2:37:04:60:40:ce:63:00:0f:3e:f1:
         5e:4c:f7:8a:47:75:5b:03:ac:b1:b9:a0:c9:3f:b0:04:5a:4c:
         90:87:2c:20:e9:95:0d:ab:e5:7f:7c:aa:98:3b:65:50:5f:48:
         a0:9c:fb:49:3a:8b:bd:88:74:a1:ca:9e:2a:f7:0b:aa:36:f3:
         0d:71:25:1e:72:14:b0:7a:8b:76:2e:09:61:25:ef:b5:d6:9b:
         4b:5b:64:72:f0:34:20:0a:34:d0:fd:95:52:4d:b6:87:c9:d9:
         92:5a:2c:ee:bb:8a:24:87:16:8d:23:e8:53:b0:4f:8f:8f:54:
         b4:6d:58:0a:26:f3:93:ba:55:0c:0d:26:d4:85:e1:bc:95:0f:
         71:ea:0f:23:0a:5d:2f:ea:56:79:6a:89:99:8d:12:31:21:ff:
         ad:d7:a9:e5:bd:00:18:a4:ae:cb:c6:fa:e6:8b:e2:41:a5:f1:
         4f:2b:b2:d4:07:0f:2c:7c:ea:15:2f:7a:10:60:a2:7c:7f:c3:
         b8:31:56:34:74:e9:14:fc:c3:9c:d3:de:e1:5b:e1:6c:b4:c9:
         1c:e6:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org