Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3130362e302e302f31362d3234203d3e203533303036.roa
File:                     3137372e3130362e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          ZZUWSUeuTgU7tNinn9tuUVnS8zclbBclRGrDnkbo05w=
Subject key identifier:   FF:F0:0A:12:56:FD:95:BE:D6:DA:9A:EA:F5:B1:EA:B4:97:86:D1:FF
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       14358E87440B565D679C36BD54197AFBB0BB9C4C
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3130362e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:24:04 +0000
ROA not before:           Sat 11 Dec 2021 18:19:04 +0000
ROA not after:            Sat 10 Dec 2022 18:24:04 +0000
asID:                     53006
IP address blocks:        177.106.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:8e:87:44:0b:56:5d:67:9c:36:bd:54:19:7a:fb:b0:bb:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:19:04 2021 GMT
            Not After : Dec 10 18:24:04 2022 GMT
        Subject: CN=3082010A0282010100B11F2F246DD0A56662D369D6D48095980B5F071733B28E46700E4E8F7C74E05301010BFFCA5F066F18305767E9E9D6935E34ACD3C3CDC38C21B34A2128368FE1D872683213A8C80E4CE86E2071FEF8DD646058BFD87637BBC6A7E118C3593B24738B51255A340211D00E509F2125DD6BCFE66020856D608DF2F9C079DDA91BD085A7AA6F5FDE78BD7C135B6FFE978175377F0E1143F88DD131982609ACCC0E94E3A03F4D0CE5642D8F1C6E2B06300837F41C23D1748581C1849CB32DEDABFCDB7F24504ADA8FC348D0CE2AB00F992CC923D7E2AE8AA7D72FC31CE551F0AFA2CCBF26661ECDBBFDA4342043EC58A6DD3CA5906603E222E173F1CF669B745DB1170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:2f:24:6d:d0:a5:66:62:d3:69:d6:d4:80:
                    95:98:0b:5f:07:17:33:b2:8e:46:70:0e:4e:8f:7c:
                    74:e0:53:01:01:0b:ff:ca:5f:06:6f:18:30:57:67:
                    e9:e9:d6:93:5e:34:ac:d3:c3:cd:c3:8c:21:b3:4a:
                    21:28:36:8f:e1:d8:72:68:32:13:a8:c8:0e:4c:e8:
                    6e:20:71:fe:f8:dd:64:60:58:bf:d8:76:37:bb:c6:
                    a7:e1:18:c3:59:3b:24:73:8b:51:25:5a:34:02:11:
                    d0:0e:50:9f:21:25:dd:6b:cf:e6:60:20:85:6d:60:
                    8d:f2:f9:c0:79:dd:a9:1b:d0:85:a7:aa:6f:5f:de:
                    78:bd:7c:13:5b:6f:fe:97:81:75:37:7f:0e:11:43:
                    f8:8d:d1:31:98:26:09:ac:cc:0e:94:e3:a0:3f:4d:
                    0c:e5:64:2d:8f:1c:6e:2b:06:30:08:37:f4:1c:23:
                    d1:74:85:81:c1:84:9c:b3:2d:ed:ab:fc:db:7f:24:
                    50:4a:da:8f:c3:48:d0:ce:2a:b0:0f:99:2c:c9:23:
                    d7:e2:ae:8a:a7:d7:2f:c3:1c:e5:51:f0:af:a2:cc:
                    bf:26:66:1e:cd:bb:fd:a4:34:20:43:ec:58:a6:dd:
                    3c:a5:90:66:03:e2:22:e1:73:f1:cf:66:9b:74:5d:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:0A:12:56:FD:95:BE:D6:DA:9A:EA:F5:B1:EA:B4:97:86:D1:FF
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e3130362e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:09:e0:b8:60:ea:4d:4d:d8:04:c6:9a:91:97:bf:da:3b:
         41:3a:4b:b4:e3:65:54:89:76:8a:e4:f3:7a:c4:ae:57:64:e1:
         81:76:37:a4:f1:16:b0:71:5a:96:b6:4e:2e:8c:94:d2:49:ab:
         85:9f:cc:fc:27:07:15:13:30:0e:a9:f9:fc:f0:91:bd:2f:bc:
         20:c7:52:7e:70:03:a1:54:74:d6:84:2b:30:2d:f6:62:91:9b:
         5c:be:2e:eb:e1:8d:24:20:ef:f4:3a:93:66:cc:17:34:78:6c:
         7f:b8:36:a0:46:c9:ed:94:92:4a:35:70:ba:24:82:17:46:c4:
         aa:e1:fc:91:1f:26:12:72:04:0a:d6:8b:e2:7f:70:a6:72:60:
         df:4a:94:25:aa:dc:ab:a6:76:46:5f:f4:c2:84:7f:54:43:26:
         1e:2f:7c:11:5f:a0:24:79:4d:16:89:43:cb:65:17:96:41:2f:
         1d:a5:56:f5:fa:fa:02:af:e8:8e:28:21:2d:3d:bd:bf:dc:6e:
         e6:f6:27:46:ef:c6:29:93:69:39:e2:c7:1c:4e:87:a5:23:e5:
         c6:08:42:01:37:cf:c0:22:7f:bf:ec:b1:82:ec:af:f7:3d:87:
         7f:a7:f0:eb:4f:01:f6:e1:f4:69:cc:c4:e3:65:d1:f1:0b:1f:
         3c:34:4b:cd
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUFDWOh0QLVl1nnDa9VBl6+7C7nEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODE5MDRaFw0yMjEyMTAxODI0MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjExRjJGMjQ2REQwQTU2NjYy
RDM2OUQ2RDQ4MDk1OTgwQjVGMDcxNzMzQjI4RTQ2NzAwRTRFOEY3Qzc0RTA1MzAx
MDEwQkZGQ0E1RjA2NkYxODMwNTc2N0U5RTlENjkzNUUzNEFDRDNDM0NEQzM4QzIx
QjM0QTIxMjgzNjhGRTFEODcyNjgzMjEzQThDODBFNENFODZFMjA3MUZFRjhERDY0
NjA1OEJGRDg3NjM3QkJDNkE3RTExOEMzNTkzQjI0NzM4QjUxMjU1QTM0MDIxMUQw
MEU1MDlGMjEyNURENkJDRkU2NjAyMDg1NkQ2MDhERjJGOUMwNzlEREE5MUJEMDg1
QTdBQTZGNUZERTc4QkQ3QzEzNUI2RkZFOTc4MTc1Mzc3RjBFMTE0M0Y4OEREMTMx
OTgyNjA5QUNDQzBFOTRFM0EwM0Y0RDBDRTU2NDJEOEYxQzZFMkIwNjMwMDgzN0Y0
MUMyM0QxNzQ4NTgxQzE4NDlDQjMyREVEQUJGQ0RCN0YyNDUwNEFEQThGQzM0OEQw
Q0UyQUIwMEY5OTJDQzkyM0Q3RTJBRThBQTdENzJGQzMxQ0U1NTFGMEFGQTJDQ0JG
MjY2NjFFQ0RCQkZEQTQzNDIwNDNFQzU4QTZERDNDQTU5MDY2MDNFMjIyRTE3M0Yx
Q0Y2NjlCNzQ1REIxMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsR8vJG3QpWZi02nW1ICVmAtfBxczso5GcA5Oj3x04FMBAQv/yl8G
bxgwV2fp6daTXjSs08PNw4whs0ohKDaP4dhyaDITqMgOTOhuIHH++N1kYFi/2HY3
u8an4RjDWTskc4tRJVo0AhHQDlCfISXda8/mYCCFbWCN8vnAed2pG9CFp6pvX954
vXwTW2/+l4F1N38OEUP4jdExmCYJrMwOlOOgP00M5WQtjxxuKwYwCDf0HCPRdIWB
wYScsy3tq/zbfyRQStqPw0jQziqwD5ksySPX4q6Kp9cvwxzlUfCvosy/JmYezbv9
pDQgQ+xYpt08pZBmA+Ii4XPxz2abdF2xFwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FP/wChJW/ZW+1tqa6vWx6rSXhtH/MB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzczNzJlMzEzMDM2MmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM1MzMzMDMwMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCxajAN
BgkqhkiG9w0BAQsFAAOCAQEAbMAJ4Lhg6k1N2ATGmpGXv9o7QTpLtONlVIl2iuTz
esSuV2ThgXY3pPEWsHFalrZOLoyU0kmrhZ/M/CcHFRMwDqn5/PCRvS+8IMdSfnAD
oVR01oQrMC32YpGbXL4u6+GNJCDv9DqTZswXNHhsf7g2oEbJ7ZSSSjVwuiSCF0bE
quH8kR8mEnIECtaL4n9wpnJg30qUJarcq6Z2Rl/0woR/VEMmHi98EV+gJHlNFolD
y2UXlkEvHaVW9fr6Aq/ojighLT29v9xu5vYnRu/GKZNpOeLHHE6HpSPlxghCATfP
wCJ/v+yxguyv9z2Hf6fw608B9uH0aczE42XR8QsfPDRLzQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:50:21 2025 by rpki-client