Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203136373335.roa
File:                     3137302e38342e33322e302f32322d3234203d3e203136373335.roa (raw, json)
Hash identifier:          nItRPfM7bD04WPtCtrP82PAAttATYNGOlDjRjXJK8gU=
Subject key identifier:   86:EF:86:57:B7:20:7A:85:94:54:03:AD:1E:E6:2E:F1:C8:54:64:3B
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       692C1AC7A6A6AA6DD735FC29FF5E6B7FE793493D
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:21:50 +0000
ROA not before:           Sat 11 Dec 2021 18:16:50 +0000
ROA not after:            Sat 10 Dec 2022 18:21:50 +0000
asID:                     16735
IP address blocks:        170.84.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2c:1a:c7:a6:a6:aa:6d:d7:35:fc:29:ff:5e:6b:7f:e7:93:49:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:16:50 2021 GMT
            Not After : Dec 10 18:21:50 2022 GMT
        Subject: CN=3082010A0282010100CB3329F3CDD48D1AF09B15B70284FD4CEC13F28493277FD0F6CB9BE6F489B031EC672F7673BF5A3DB2B899A4F0D00E43E0252315D0A27BF5F9C50515B5989A607A351D695CCEC8FFC1112D4A16AE3CB097F39DF68D42279A770F197B00EBD1262176E1F1B59F2AD2C064F8FC976BB94F300BD82BED3DE281D072708CD5CFA094D940A11A196A33549769FD6FFE61EB36C04AF4C83F6F761B587E7A3E9CB6B3EB2982ED64F329A39DB5BFB1D23399D53EAE29AAE7035D9281A3D7C7C10E149C42BBD7315C4A30633396159CB3AACBDA8AE54D1A2D6E1038D64F2506B9440210AE65D886EA196D564CE3047533F8AFC6FC8725A36F610349DC48640646BA40C34B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:29:f3:cd:d4:8d:1a:f0:9b:15:b7:02:84:
                    fd:4c:ec:13:f2:84:93:27:7f:d0:f6:cb:9b:e6:f4:
                    89:b0:31:ec:67:2f:76:73:bf:5a:3d:b2:b8:99:a4:
                    f0:d0:0e:43:e0:25:23:15:d0:a2:7b:f5:f9:c5:05:
                    15:b5:98:9a:60:7a:35:1d:69:5c:ce:c8:ff:c1:11:
                    2d:4a:16:ae:3c:b0:97:f3:9d:f6:8d:42:27:9a:77:
                    0f:19:7b:00:eb:d1:26:21:76:e1:f1:b5:9f:2a:d2:
                    c0:64:f8:fc:97:6b:b9:4f:30:0b:d8:2b:ed:3d:e2:
                    81:d0:72:70:8c:d5:cf:a0:94:d9:40:a1:1a:19:6a:
                    33:54:97:69:fd:6f:fe:61:eb:36:c0:4a:f4:c8:3f:
                    6f:76:1b:58:7e:7a:3e:9c:b6:b3:eb:29:82:ed:64:
                    f3:29:a3:9d:b5:bf:b1:d2:33:99:d5:3e:ae:29:aa:
                    e7:03:5d:92:81:a3:d7:c7:c1:0e:14:9c:42:bb:d7:
                    31:5c:4a:30:63:33:96:15:9c:b3:aa:cb:da:8a:e5:
                    4d:1a:2d:6e:10:38:d6:4f:25:06:b9:44:02:10:ae:
                    65:d8:86:ea:19:6d:56:4c:e3:04:75:33:f8:af:c6:
                    fc:87:25:a3:6f:61:03:49:dc:48:64:06:46:ba:40:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:86:57:B7:20:7A:85:94:54:03:AD:1E:E6:2E:F1:C8:54:64:3B
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:42:b2:0e:e2:a0:8c:91:0c:a4:5a:b0:e3:79:40:ad:3e:
         f6:77:76:70:af:9f:1a:dd:2b:f2:68:a9:76:e6:d0:4e:c3:a2:
         f8:4f:7d:50:86:50:3f:b8:7a:9f:62:8c:7d:a4:0e:8b:ac:0e:
         34:95:ee:05:a2:e9:30:bb:0f:68:47:58:b3:ae:5a:74:04:04:
         b3:c0:47:1c:11:71:1f:12:9d:f6:8d:9b:72:a3:91:89:0c:7c:
         e4:88:e4:0d:8f:95:bb:a1:f0:66:2c:1b:0b:90:87:12:de:29:
         b3:19:76:a8:a3:f5:53:7d:e9:9d:68:38:b1:d5:d0:4b:84:87:
         2e:96:76:18:68:78:b5:32:7a:46:04:2a:96:ef:47:b1:ff:cd:
         e1:f2:29:2a:31:52:58:68:99:a8:0e:c0:68:d9:40:88:8a:91:
         d7:37:22:43:66:4e:ba:0c:70:96:5c:a1:a9:0c:7a:7c:3b:91:
         61:f9:f2:22:cd:1a:42:34:8a:fa:9f:74:6f:bf:93:0b:ae:f2:
         3d:2d:8b:53:7b:42:c7:58:f8:5b:dd:59:c0:c5:ea:21:d4:26:
         48:55:f1:83:f7:2c:dc:cf:aa:e4:b1:ed:73:54:c9:75:86:ce:
         cc:5e:54:23:ac:4e:8a:a0:b0:85:30:8a:5d:b0:2d:05:8d:6c:
         65:d8:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org