Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3136382e3139372e32302e302f32322d3234203d3e203533303036.roa
File:                     3136382e3139372e32302e302f32322d3234203d3e203533303036.roa (raw, json)
Hash identifier:          3FWNa+7o+NBj3LcP0smzRHQ3ueRPed0s9sfzKQM2lmg=
Subject key identifier:   BD:34:EF:8A:2E:E4:CF:9B:2C:3C:5C:4D:A4:6A:66:92:3D:DE:66:79
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       793DEAC29301D9226D80976B139C4DF7BB0483B1
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3136382e3139372e32302e302f32322d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:25:59 +0000
ROA not before:           Sat 11 Dec 2021 18:20:59 +0000
ROA not after:            Sat 10 Dec 2022 18:25:59 +0000
asID:                     53006
IP address blocks:        168.197.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:ea:c2:93:01:d9:22:6d:80:97:6b:13:9c:4d:f7:bb:04:83:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:20:59 2021 GMT
            Not After : Dec 10 18:25:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:9a:65:d7:00:29:75:d9:fa:f8:55:2e:84:
                    02:b6:09:09:f2:a0:59:d6:70:ef:86:96:2b:63:6b:
                    ed:b0:c6:6d:78:cf:04:80:07:73:42:d2:86:77:71:
                    b3:b9:45:dc:50:ca:5f:56:27:bf:f1:d0:aa:bc:87:
                    b2:7e:7e:64:3c:a4:2b:96:fa:91:0c:94:cb:bb:b8:
                    86:00:4e:7a:65:0b:56:cd:4c:d0:a0:4c:2a:4c:10:
                    6c:ba:09:2a:51:a0:59:14:a5:df:d1:eb:b6:ce:be:
                    b5:4a:4f:f7:f5:dc:37:1a:05:5d:6f:e1:17:97:d2:
                    e3:d5:a0:1d:62:e9:5c:8e:0d:89:2d:28:a9:41:10:
                    21:17:6f:c2:26:38:62:b0:20:f9:bd:3f:42:6f:7d:
                    48:5e:0d:46:61:c4:f4:89:41:d2:ed:72:fe:74:62:
                    a3:be:da:28:b0:60:59:53:b5:1d:d8:ee:ea:b0:63:
                    b2:38:98:75:1c:46:bd:20:f6:6d:03:c4:ee:b1:b0:
                    fc:93:8a:d3:28:52:e1:bd:35:29:dd:19:4c:24:e5:
                    87:10:65:33:3a:31:37:de:81:eb:9a:58:1e:1d:69:
                    b8:2b:b2:22:71:20:ae:f4:fb:9b:e3:02:b7:53:10:
                    ea:16:88:8d:d5:94:00:6e:c1:5c:3e:d2:68:87:54:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:EF:8A:2E:E4:CF:9B:2C:3C:5C:4D:A4:6A:66:92:3D:DE:66:79
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3136382e3139372e32302e302f32322d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:be:d0:82:6d:6d:0c:97:73:6a:49:81:96:c2:47:94:30:
         f3:3c:6f:12:41:ea:ff:36:e6:6a:6c:9e:20:ce:ab:d1:c3:60:
         9c:07:4c:6c:a7:f8:5c:69:b6:12:a2:27:1b:dd:3a:d2:76:0a:
         fa:79:73:28:14:75:59:16:3d:76:8d:76:55:88:04:1e:a7:96:
         2c:4d:fa:42:d4:13:11:00:23:67:85:8f:5b:35:d2:e3:9e:69:
         ce:80:08:44:a4:2d:76:c6:49:9c:51:c5:4f:12:19:c3:a1:ed:
         22:63:2b:ec:ad:e9:a0:86:6a:2a:a5:8e:17:7c:76:85:72:0d:
         c3:97:6c:ea:c3:8c:2d:59:6f:91:ff:56:86:01:96:a0:6d:a8:
         19:56:5e:c8:54:ea:c8:9d:6c:7f:85:be:81:f6:11:d7:0f:b7:
         20:df:c6:9e:9e:a2:43:43:1b:e7:4d:76:64:2e:e3:2b:c6:d8:
         43:46:5c:3b:b8:79:0f:d6:16:03:e5:5b:ed:91:72:63:32:be:
         a7:ab:f0:37:a7:2d:9d:2e:3b:2c:81:90:7a:de:8c:e1:7f:7e:
         47:b8:69:0d:52:61:3e:11:21:5c:11:3f:17:2e:e7:46:35:70:
         13:fa:e0:d7:be:a4:a8:16:08:87:a0:b5:82:d5:5d:91:99:ad:
         5c:6f:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org