Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203533303036.roa
File:                     3137302e38342e33322e302f32322d3234203d3e203533303036.roa (raw, json)
Hash identifier:          Zxrh689DHfUqR9fOA/uZwCZpzQhDgx/r32ZkvEhn8hE=
Subject key identifier:   7D:3C:97:87:3F:A6:86:1F:63:A6:B1:02:70:14:C8:DE:65:3E:88:49
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       5010666FD46CBB88423FA31C6916E0D69937DD0E
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:21:59 +0000
ROA not before:           Sat 11 Dec 2021 18:16:59 +0000
ROA not after:            Sat 10 Dec 2022 18:21:59 +0000
asID:                     53006
IP address blocks:        170.84.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:10:66:6f:d4:6c:bb:88:42:3f:a3:1c:69:16:e0:d6:99:37:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:16:59 2021 GMT
            Not After : Dec 10 18:21:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:30:ed:5f:bb:7d:c2:7d:f9:0f:3f:a7:f1:
                    43:79:52:ad:67:ae:31:6c:09:13:22:78:2f:67:fa:
                    2f:1a:8a:95:84:f1:76:70:ee:6d:e5:ab:8e:a8:ed:
                    16:34:57:8a:2c:de:38:05:c2:1a:fe:96:ff:28:e6:
                    55:76:c7:64:a7:06:37:1b:04:c3:9f:2e:10:10:be:
                    a2:85:b2:bc:eb:fa:ce:a2:34:1b:3f:9f:83:d2:b8:
                    84:de:d0:a7:2f:3c:ef:da:67:d3:3c:bf:47:47:c6:
                    33:73:23:29:fa:55:72:b6:c6:b5:b2:bb:02:40:b4:
                    25:05:9c:e8:30:20:8f:35:55:ac:a6:19:d3:8f:96:
                    e4:0f:d1:b8:01:97:d0:eb:bb:a9:4b:a4:f7:fd:bc:
                    20:71:4f:47:c7:73:9a:01:87:d2:4a:66:df:b0:9e:
                    6a:32:f1:72:07:81:86:1f:96:2c:e5:d4:62:41:12:
                    ba:98:bd:90:6d:74:85:82:77:31:78:59:15:bd:43:
                    36:02:a9:29:79:aa:98:8a:63:e5:98:3c:fc:33:d0:
                    ce:21:ed:28:72:f8:85:b2:a5:e4:38:a9:de:4f:dd:
                    1d:82:3f:4d:1e:85:21:b8:0c:9c:35:63:f5:6c:c7:
                    b9:90:05:55:12:de:f9:90:6b:6e:b6:5a:00:6c:c0:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:97:87:3F:A6:86:1F:63:A6:B1:02:70:14:C8:DE:65:3E:88:49
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137302e38342e33322e302f32322d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:89:c3:ab:e5:69:7f:5c:d4:f1:a9:82:c6:36:d8:59:7b:
         e2:31:78:2d:5d:97:6e:0a:78:c2:48:a7:04:c1:7a:dd:d2:df:
         b4:85:90:78:ba:b0:a3:62:0d:a9:93:c3:9a:18:1c:d3:a7:88:
         fd:d2:63:67:2d:f6:35:9d:0a:19:92:4d:e9:bc:b1:a9:4b:c2:
         10:bc:99:1b:ad:6b:e1:8b:07:99:31:9b:80:78:eb:7d:3f:3b:
         25:ad:ac:de:10:4b:65:59:cb:6e:94:f2:4d:54:d2:93:c8:d7:
         89:c8:1f:b1:cf:cc:3d:7e:3b:b4:72:5a:15:e6:03:4e:09:4e:
         6b:8a:52:0f:42:45:f8:f8:50:e5:30:2c:0b:9c:35:0f:8b:c9:
         7c:59:5a:7e:b4:a8:67:2f:f9:84:86:22:bc:bf:ef:7e:b8:60:
         08:56:e5:e8:ef:0c:c1:a9:ec:1f:dc:f1:91:c2:02:6b:7e:85:
         a2:7d:0f:4a:83:b2:3f:02:bf:db:f5:bc:87:1e:dc:6b:22:63:
         b6:07:67:d8:09:f7:dc:1c:84:7b:a2:07:48:83:74:73:10:1e:
         f4:df:21:30:83:0f:ff:80:00:9a:cc:55:94:4e:1f:d8:bd:c9:
         46:36:b9:61:25:a0:65:38:01:c6:a8:4a:94:42:89:b6:4c:8e:
         86:61:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org