Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          WV0GLzacFDjTLP1uhhCpnnw2QaxIJe30PM+lVB0PKq0=
Subject key identifier:   CB:E9:73:66:53:F3:63:02:C9:8D:05:E1:4A:95:EB:4A:E6:AE:79:65
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       5B041B576BD1019CF10FD2CCA8B0AEE7E8323F29
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:09 +0000
ROA not before:           Sat 16 Oct 2021 16:11:09 +0000
ROA not after:            Sat 15 Oct 2022 16:16:09 +0000
asID:                     262691
IP address blocks:        187.94.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:04:1b:57:6b:d1:01:9c:f1:0f:d2:cc:a8:b0:ae:e7:e8:32:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:09 2021 GMT
            Not After : Oct 15 16:16:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:4d:56:4e:c1:b1:ac:35:5d:dd:76:9a:97:
                    d6:c4:8e:52:90:25:e8:2c:9c:1d:4b:42:43:3b:47:
                    8c:c1:a1:d3:06:10:4d:2b:06:19:73:dc:05:0e:11:
                    40:45:21:8d:5b:53:51:e9:7a:8a:a6:c2:51:8b:1d:
                    85:b6:13:4f:a3:19:e2:42:2d:a9:fb:46:70:4c:e1:
                    f9:f3:65:d1:97:32:4a:55:14:3b:fa:b0:ff:5d:5a:
                    eb:ab:9f:ca:f4:4a:2e:c5:bf:be:59:a5:26:89:a4:
                    36:12:0a:df:45:ee:7a:80:e4:c3:32:5d:e1:e3:05:
                    3e:2d:32:d9:53:a2:c2:d1:51:45:53:7a:b1:5b:c4:
                    06:12:cb:25:0b:55:30:d0:e5:8e:1a:b7:c6:05:b5:
                    fe:dd:65:ba:84:9a:dd:a5:91:96:65:55:4e:c0:37:
                    43:a6:c9:fd:29:e5:87:f4:d0:b7:5e:4f:d3:5c:f9:
                    42:3e:c6:90:bf:86:6a:0b:65:48:14:b9:bd:6c:ce:
                    3d:fc:82:4b:28:20:92:e5:73:42:9d:41:bf:72:1a:
                    ff:0f:73:52:ea:47:7e:bf:db:92:ca:a2:f4:12:70:
                    d2:37:38:26:8c:cf:bf:04:d8:8e:c8:a0:82:e8:23:
                    dc:a5:a9:b4:4f:e5:60:a8:6c:43:f4:78:80:26:0e:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E9:73:66:53:F3:63:02:C9:8D:05:E1:4A:95:EB:4A:E6:AE:79:65
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:b5:5d:4d:d1:43:d9:44:9c:64:be:3c:7e:4a:a8:93:45:
         7f:64:37:14:42:54:0c:c9:b4:e4:1e:e3:fc:c9:91:b3:4d:93:
         1a:24:a5:17:a5:a0:1c:98:e5:8c:f8:6f:e9:dc:d4:0a:ea:e4:
         01:41:35:db:82:53:6d:79:ec:1a:64:56:f7:6f:10:3e:7d:99:
         e7:c9:bd:70:43:42:bf:64:98:53:9a:10:16:29:6b:bb:29:c5:
         08:c0:13:08:71:28:25:04:17:38:c5:01:83:e8:15:b4:a2:39:
         b9:b6:73:1b:18:9a:4a:37:ba:81:66:ba:2f:e3:0f:cd:de:08:
         cb:72:16:0f:ba:23:d1:95:60:62:72:37:85:78:fd:c3:88:18:
         26:9c:96:91:5b:e1:3c:1b:04:65:05:05:97:b4:c4:81:49:3c:
         1d:ce:5e:b5:83:d9:a4:47:d3:ef:c7:59:2b:71:27:c0:4f:ac:
         f6:f5:f9:b5:75:29:fd:2b:bc:2d:7f:4e:80:1d:93:4f:9f:bf:
         38:aa:1d:64:de:0a:94:50:f3:07:75:06:5a:ad:14:6e:19:dd:
         72:f1:cc:ec:b8:93:2d:2e:ba:64:b4:d5:a3:c8:e6:e1:ac:8f:
         0c:89:4f:08:98:b9:51:b6:24:e4:ee:60:5b:1b:62:34:ea:fc:
         a0:7c:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org