Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32342d3234203d3e20323632363931.roa
File:                     3138372e39342e3230342e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          jDMiXRMi+8FLanSkvruWxHhLwrpvuC9Laff23Liotf0=
Subject key identifier:   A7:C0:BD:B0:E8:CC:A2:28:39:E9:50:6C:32:51:CE:DA:ED:01:F2:33
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       1C4787296D0083A6813D9581FB65F8D47E941E8B
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32342d3234203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:47:50 +0000
ROA not before:           Sat 02 Jul 2022 00:42:50 +0000
ROA not after:            Sat 01 Jul 2023 00:47:50 +0000
asID:                     262691
IP address blocks:        187.94.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:87:29:6d:00:83:a6:81:3d:95:81:fb:65:f8:d4:7e:94:1e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:42:50 2022 GMT
            Not After : Jul  1 00:47:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:65:52:95:d8:59:6e:37:c1:20:7e:be:21:15:
                    d9:e8:5a:b1:a2:2e:08:05:7f:49:a8:11:6d:95:7b:
                    66:1a:9e:bb:48:1f:8f:35:95:d7:35:b4:79:e1:0b:
                    ca:2d:01:0d:0e:c4:f7:e8:86:bc:93:a3:d4:3c:65:
                    82:2e:35:a4:77:4c:5c:f5:62:0b:e2:0d:3d:3b:1a:
                    c5:e5:0c:bf:b6:1c:2d:64:95:47:f7:4e:6b:ee:3f:
                    d6:f5:b6:b1:9b:b4:33:38:1b:e2:67:4a:93:f3:fa:
                    09:93:33:47:ce:b4:af:35:9d:d9:a7:05:f9:21:4a:
                    e8:99:66:89:b2:de:32:50:86:d3:76:c2:1d:b9:1f:
                    64:1d:a1:18:10:71:05:16:86:aa:43:f8:f4:6d:fe:
                    0b:3a:0d:df:2a:ec:be:b4:04:01:04:09:40:b7:6d:
                    f5:6a:48:f3:87:b3:77:29:22:19:90:3a:0a:7e:02:
                    c1:f5:a6:8d:97:64:81:96:0b:bd:c8:4c:6a:0e:c0:
                    e3:55:d7:ce:e0:47:f2:5c:7b:bb:87:37:77:85:cc:
                    5e:16:77:24:76:5a:f5:87:19:41:02:35:1c:b3:1a:
                    bc:b0:11:7d:31:3f:a4:9b:ea:e5:dd:96:05:e9:56:
                    45:da:e5:b4:92:54:19:b6:dd:86:11:1e:2b:08:b2:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C0:BD:B0:E8:CC:A2:28:39:E9:50:6C:32:51:CE:DA:ED:01:F2:33
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230342e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:c3:ad:bb:ff:51:9e:43:23:6a:e9:5f:c4:05:2e:c6:83:
         93:0e:64:c6:fa:17:cc:ce:08:38:ea:d6:86:e6:0d:7e:fe:60:
         67:04:fe:00:8e:f8:ca:81:12:7c:c1:33:d6:03:2f:99:ae:86:
         a7:c9:e4:24:f5:59:c7:a0:3c:c7:2b:6b:bb:18:ee:79:53:0b:
         5f:2d:ab:3b:7a:4f:be:4f:2b:7f:e7:57:47:61:0a:5c:a4:8e:
         99:73:4b:a7:ab:11:b2:0a:88:94:cb:97:6e:45:be:0d:69:9f:
         a4:2c:21:7d:35:b3:3b:7b:bd:55:8e:0f:8c:b1:7c:63:51:9a:
         86:f3:4e:5c:49:7e:55:be:8a:ac:89:40:96:47:88:e0:ed:98:
         47:d5:79:1b:7f:9c:46:2c:ea:2a:82:c0:d5:34:79:ed:cc:cc:
         f1:17:22:be:87:52:53:3f:77:1e:39:44:05:86:05:15:07:01:
         0c:fc:82:a1:eb:d8:c5:1c:0b:d4:22:a4:8f:4b:c4:71:3e:d0:
         e1:b2:86:a5:01:81:30:95:1c:3a:60:68:9a:7b:59:cb:ed:1c:
         20:5f:ea:06:fa:ff:01:f6:ff:5b:e8:87:74:4d:35:83:c5:67:
         c8:2f:b8:cf:c0:7c:d6:23:fb:91:86:7a:22:5e:3b:c8:08:6e:
         a0:be:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org