Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32312d3231203d3e20323632373039.roa (raw, json)
Hash identifier:          jigBCWfDCPpMfUt/YJSrzmdObBXejPhc5pKg5v94fJ8=
Subject key identifier:   77:D2:22:4D:9B:F8:DD:CD:9A:61:B6:D0:48:C3:11:0D:44:85:7E:38
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       3C514C166D6DF301FDF3CA8D34F23678EBA8DFAB
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:29:41 +0000
ROA not before:           Thu 10 Nov 2022 18:24:41 +0000
ROA not after:            Thu 09 Nov 2023 18:29:41 +0000
asID:                     262709
IP address blocks:        187.111.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:4c:16:6d:6d:f3:01:fd:f3:ca:8d:34:f2:36:78:eb:a8:df:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:24:41 2022 GMT
            Not After : Nov  9 18:29:41 2023 GMT
        Subject: CN=77D2224D9BF8DDCD9A61B6D048C3110D44857E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:4a:15:c0:8c:b8:c3:91:4f:89:a9:c1:0b:
                    b0:4e:ea:25:ef:e3:22:18:10:e5:19:8c:8f:8f:72:
                    66:1a:65:1f:20:94:34:5f:2b:f4:11:d5:3e:4f:aa:
                    91:48:86:fd:78:6a:65:f4:7e:c5:9d:0d:9b:24:c8:
                    c8:04:14:23:ab:69:76:e7:87:ca:a3:1f:2a:e5:21:
                    91:15:c0:8e:c4:b3:9a:ff:51:94:05:b6:42:45:7e:
                    1f:a5:02:b5:1d:0d:e4:c0:e6:06:3a:55:a9:5d:75:
                    13:4b:ed:cc:39:38:2a:af:9d:f3:5f:5c:34:cc:77:
                    b5:cb:1f:96:84:9b:ae:d6:eb:e4:98:38:aa:b8:67:
                    77:78:1b:84:ec:ef:b7:a5:17:60:31:48:8d:84:05:
                    2b:f5:3a:40:66:0e:f0:91:c1:b8:1b:5a:04:ac:b2:
                    7b:25:10:26:7b:f1:4c:9a:1d:04:75:57:e3:10:35:
                    3d:dc:e0:4b:71:86:e5:50:a9:cb:f2:a4:e4:ef:bb:
                    22:a1:5d:cf:83:98:44:6f:4b:02:16:5d:0d:54:f5:
                    d5:0e:fb:80:da:e6:2d:09:d0:86:62:b9:38:42:40:
                    1e:38:43:28:08:90:de:45:12:ef:e4:fb:fa:52:c3:
                    c3:ac:67:52:ff:86:91:1f:85:99:49:5c:66:e0:cd:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:22:4D:9B:F8:DD:CD:9A:61:B6:D0:48:C3:11:0D:44:85:7E:38
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:15:fc:3e:fc:e8:65:98:00:ee:70:1e:42:86:f8:b2:f3:32:
         b9:ef:69:3b:58:0a:c6:21:d3:e3:df:cd:2f:04:7b:7a:85:ae:
         1c:a9:e4:e8:01:64:48:60:45:fc:73:cd:82:9c:f4:3a:a4:0e:
         24:47:19:c1:dc:3b:db:fc:40:04:46:32:38:4d:5b:fa:b2:4f:
         b3:51:22:41:f3:9d:37:58:6b:25:89:2a:cd:a9:75:85:84:c0:
         3e:07:d5:d3:5a:68:14:67:74:a8:e8:bd:52:bf:b9:9a:6c:c3:
         d7:2f:65:68:cd:ff:da:db:78:70:89:11:2f:54:a3:8e:bd:37:
         0f:03:79:f0:df:c9:95:19:d2:ac:ea:de:4e:06:d5:99:d7:57:
         23:d1:3a:9c:b9:a6:2a:3c:e5:33:ed:76:83:0f:8f:9d:1f:21:
         29:d9:fa:25:14:9e:0a:e3:c5:3d:fa:f4:39:a0:dc:8e:12:09:
         c4:8c:e2:34:15:a3:93:f3:94:02:5e:c5:60:05:ad:11:54:62:
         d1:8a:a8:0b:e7:23:0f:69:12:38:26:40:6d:d0:0e:8c:09:9d:
         94:b9:b2:04:0e:11:4d:c7:10:28:54:11:ac:41:29:9c:e8:c8:
         e9:dc:96:de:5b:01:48:9f:e6:2b:36:ec:49:27:20:e1:81:b5:
         b1:f8:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org