Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          k8554itcvy2wYG3Z7rKjrDGUP3iheFwnVlmlgTHlKJw=
Subject key identifier:   BE:64:EA:88:9F:98:F4:AA:D6:FC:5A:CF:84:3C:BA:DC:0A:2E:94:4B
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4463213744AE95D39E0669B73A5906A1DC1A0B7D
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        187.94.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:63:21:37:44:ae:95:d3:9e:06:69:b7:3a:59:06:a1:dc:1a:0b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:00:e8:36:47:9f:2c:2c:18:3b:9a:bd:8d:
                    91:a0:0a:4e:1d:4a:01:8e:3c:2b:27:41:28:b0:d7:
                    5f:30:8f:56:f2:8c:1a:2d:f0:fb:76:e6:1d:8b:d1:
                    ba:8c:e9:ed:1a:e4:be:96:0a:cc:5a:df:a2:e5:42:
                    fe:de:05:8e:62:04:72:98:e4:6c:be:0b:26:2b:66:
                    21:5f:d6:bc:84:c9:a7:54:0e:3e:82:89:41:db:b9:
                    39:9f:68:07:7f:2b:b9:8f:2e:bc:9f:21:4f:ec:14:
                    95:68:63:8f:a5:b6:ef:9e:d0:ad:cb:a7:96:60:d2:
                    36:73:71:8a:b2:2f:8d:31:4c:50:63:2b:54:eb:f3:
                    bd:07:82:db:ac:fe:de:02:bd:c0:28:d9:d1:34:aa:
                    24:e4:9f:01:fa:a1:3e:92:cc:99:bd:b8:e4:0d:bc:
                    50:8f:32:7d:87:4e:21:31:51:ba:db:15:7f:e8:ba:
                    94:18:40:33:b1:57:0a:90:8d:eb:b2:0d:de:9a:50:
                    3f:c6:0c:41:68:11:af:22:ed:2d:36:80:e3:10:16:
                    2d:df:f8:ac:e4:63:e8:56:7c:69:7e:03:5b:09:c7:
                    61:1d:85:eb:db:3c:32:47:a7:19:67:15:69:26:27:
                    6e:83:ba:96:28:8f:3f:a9:dd:f8:19:58:a5:4a:24:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:EA:88:9F:98:F4:AA:D6:FC:5A:CF:84:3C:BA:DC:0A:2E:94:4B
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:1e:1d:ca:3a:ae:a1:10:1b:e1:84:06:ca:9d:c1:3a:4a:
         fe:f8:4f:b1:91:07:80:a8:7b:d3:6d:c3:e5:96:73:61:75:10:
         77:ba:0e:83:cb:1d:1f:ff:d8:a1:cc:26:3a:da:f7:93:fc:1b:
         4a:71:b8:ea:b0:6c:ae:a2:cc:c8:3c:c3:7d:37:c3:42:51:41:
         50:69:03:2e:25:b4:44:49:40:a6:2a:41:e1:f2:4f:42:29:5e:
         78:63:b8:58:df:3f:70:8e:c9:7e:75:b4:88:a2:b3:c8:e0:f8:
         8a:3c:5b:0c:3b:72:89:b2:90:55:89:ee:53:34:dd:84:c6:c4:
         ff:86:e1:2a:1c:8e:98:71:c8:25:86:3f:00:74:bf:63:16:92:
         43:cf:c9:e9:c1:5f:84:e1:c7:5a:d3:fa:da:01:fc:15:26:70:
         4a:26:0c:a7:0f:36:21:bc:49:26:c6:8b:55:63:59:b1:3f:6b:
         ee:57:c7:29:6d:7a:a2:35:52:8d:05:08:af:91:42:cc:7e:4f:
         ee:44:86:63:a5:d7:e7:d6:55:72:63:4f:65:ae:f7:1a:01:ef:
         70:dc:42:eb:b0:28:36:52:8b:7f:5f:33:f7:47:b4:18:bf:c1:
         0f:c8:d3:0f:f4:1e:2c:0a:b4:11:b1:03:40:48:0d:a1:f6:0a:
         14:5e:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org