Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203136373335.roa
File:                     3137372e36392e302e302f31362d3234203d3e203136373335.roa (raw, json)
Hash identifier:          cATnNbUKs7kvGp+4sP80+YBk7hyEg+5KPiriV1eepKU=
Subject key identifier:   C5:59:BE:99:CB:BB:70:B3:8C:DE:2E:66:5F:74:7F:F9:60:34:F7:C4
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       679803F5EB0BE22D01C9D679E56FFE420F5E202B
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:20:38 +0000
ROA not before:           Sat 11 Dec 2021 18:15:38 +0000
ROA not after:            Sat 10 Dec 2022 18:20:38 +0000
asID:                     16735
IP address blocks:        177.69.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:98:03:f5:eb:0b:e2:2d:01:c9:d6:79:e5:6f:fe:42:0f:5e:20:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:15:38 2021 GMT
            Not After : Dec 10 18:20:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:d5:ef:ef:8b:e1:c5:0d:a1:d7:8d:fa:ea:
                    ad:aa:a5:83:81:a3:a8:86:29:50:42:40:99:cf:78:
                    8e:c7:2a:8c:87:ab:a2:af:74:ef:b5:fe:e1:7b:87:
                    bc:70:7b:6f:d3:2f:fb:97:95:cd:e1:53:67:1c:76:
                    e5:ca:df:35:73:2f:33:31:1d:d5:13:5c:a9:cc:f2:
                    3f:ab:bd:21:45:f6:44:af:f4:e6:e3:06:a5:c8:5b:
                    20:f5:0f:de:ec:dd:76:1b:93:3c:a6:10:5e:51:96:
                    63:0c:75:84:5d:4c:c1:02:63:29:7e:b4:b1:ee:bf:
                    a6:21:d5:a5:0a:21:ec:05:5d:5f:96:9c:4c:f3:b9:
                    bb:bb:d0:ff:18:57:85:dc:d3:92:76:7c:49:23:f6:
                    ad:c4:24:9c:b3:fe:9d:7b:f9:90:00:b3:77:b5:e2:
                    f5:72:0b:2f:b1:c3:be:39:e6:79:ef:5c:b1:ef:73:
                    5e:10:4b:02:4c:6a:8e:71:4c:86:74:8a:c5:85:45:
                    4f:4d:f1:50:a1:18:67:39:64:be:a4:f3:88:00:90:
                    cc:59:09:d4:08:5c:3d:7d:3e:18:e1:83:7a:f7:96:
                    aa:63:b0:cc:b3:57:20:0c:25:80:10:c8:a4:59:b1:
                    0d:61:79:12:74:db:b8:7f:4b:0b:d4:c4:eb:53:bd:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:59:BE:99:CB:BB:70:B3:8C:DE:2E:66:5F:74:7F:F9:60:34:F7:C4
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137372e36392e302e302f31362d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:60:ba:61:ad:52:e4:60:15:e9:a7:31:fd:2a:24:69:52:
         17:60:c8:a0:26:d3:73:18:b1:f8:d5:01:21:87:3f:f5:ce:97:
         5c:6d:23:65:81:6b:f2:c7:98:dc:6a:78:23:71:f7:f3:62:f2:
         61:4f:78:b9:96:fb:39:e3:1c:48:99:56:80:aa:09:0f:73:dc:
         40:dd:e6:91:f9:fa:8c:cb:9f:f6:b8:31:7c:50:d9:01:e6:ba:
         1e:8e:01:01:44:68:42:1b:7b:07:e5:3a:27:0d:46:52:e3:2f:
         64:d4:96:61:40:df:54:a2:37:17:38:80:39:c5:57:fa:4a:8a:
         0f:c5:c3:f3:67:04:e2:6d:76:83:46:1d:45:f2:4f:32:02:27:
         ab:6c:26:90:c0:3a:3e:16:fe:ce:48:39:df:91:39:a6:6f:d0:
         b1:5b:a5:69:1f:ee:59:7a:9c:87:2d:25:08:6e:e4:4b:6f:b3:
         31:11:25:40:3b:df:f3:a5:1f:8e:70:34:96:2e:7c:5b:be:9c:
         94:49:65:bb:45:d4:bb:68:cf:8d:60:5b:fe:c8:20:87:99:41:
         ca:bb:7d:21:9b:1f:81:25:6e:5c:27:20:27:af:2d:09:50:39:
         f2:cf:ec:1b:bc:67:1c:06:53:56:25:f1:46:ef:61:44:33:af:
         e9:bc:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org