Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130342e302e302f31362d3234203d3e203533303036.roa
File:                     3137392e3130342e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          YnidI5i0IIC72WcZI0252BtftNxvKxXYUM3jD6DiNjY=
Subject key identifier:   9A:33:1B:B4:F5:32:4A:15:C0:90:93:25:40:74:D9:37:9F:4C:87:72
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       3E0DF2E1DFAFF23E60F9F192C7D4D59703CBFBE3
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130342e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:24:49 +0000
ROA not before:           Sat 11 Dec 2021 18:19:49 +0000
ROA not after:            Sat 10 Dec 2022 18:24:49 +0000
asID:                     53006
IP address blocks:        179.104.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:f2:e1:df:af:f2:3e:60:f9:f1:92:c7:d4:d5:97:03:cb:fb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:19:49 2021 GMT
            Not After : Dec 10 18:24:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:86:4e:c1:dc:d7:f1:95:c5:22:dc:1f:8b:fc:
                    45:99:6c:39:7d:b5:b6:c3:30:39:dd:34:a5:ca:f7:
                    7d:9d:fa:e9:df:16:e3:ca:16:96:24:e6:db:c7:b0:
                    1b:f6:92:61:cf:7a:b0:ac:ab:3c:ac:aa:2b:b8:ff:
                    92:3b:32:9c:00:d6:2b:c6:c7:fb:2d:9c:6d:0e:ab:
                    5a:da:d7:55:82:33:ec:f9:32:08:de:38:39:db:c2:
                    e9:1b:ca:63:15:90:5f:c5:af:0f:d6:25:3f:e5:2c:
                    53:46:da:99:f2:4a:16:81:4a:54:eb:b5:cd:ef:7d:
                    63:43:85:d6:9e:a0:a1:cb:e3:2a:29:57:1c:bd:ce:
                    c5:9f:d1:fb:45:d6:0f:94:b7:03:62:69:d1:f6:f6:
                    91:a0:d4:1a:97:dc:d5:d5:ed:1f:5b:7f:20:6b:c9:
                    80:a8:ef:66:36:5c:81:cf:24:45:ee:5a:96:c2:92:
                    34:bb:d1:3d:af:c8:d9:9e:5f:fc:d6:2d:97:18:a8:
                    ba:88:9b:d5:f4:d2:fe:8b:b6:b6:ad:c8:a4:2f:a3:
                    7a:4d:e8:64:18:9f:d4:eb:9a:c0:d9:78:0c:c1:62:
                    c0:0e:79:cb:ab:ad:11:c7:89:f6:25:e5:ef:6e:8b:
                    14:fa:56:f8:e0:83:b4:87:cc:a0:a1:59:14:5e:6c:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:33:1B:B4:F5:32:4A:15:C0:90:93:25:40:74:D9:37:9F:4C:87:72
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130342e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:ef:08:e3:ab:d5:ab:a4:42:06:2e:bd:87:14:97:79:b6:
         fa:18:a7:9b:d0:1d:90:b0:7f:a8:54:15:f0:ce:19:0c:6c:98:
         e8:5d:c8:40:a6:da:17:8e:25:1e:86:72:fc:94:fd:8b:a2:5f:
         02:24:5c:10:e1:64:f8:ef:bc:3a:b9:be:c3:40:2b:6a:26:82:
         a3:94:e4:3d:fc:06:b2:44:4c:6b:4b:ec:03:b9:ff:fb:bc:16:
         85:8d:17:b9:87:bc:d3:63:f3:1d:93:7b:50:45:30:a0:b3:10:
         bb:77:19:0f:f6:8d:c8:bf:5f:4e:da:3e:13:3c:c1:00:20:16:
         3c:de:49:bc:5f:6c:e4:33:a1:ff:62:ed:54:df:84:2d:f8:6f:
         9b:e7:d7:6e:83:af:f2:f3:90:38:0f:ae:ad:ca:dc:1c:d2:b5:
         6d:6b:24:01:d3:d8:01:71:a6:ac:76:6b:55:b5:34:97:11:af:
         78:6d:32:22:8f:20:4d:92:b2:e2:9b:d0:01:44:a9:f3:8c:5f:
         2a:92:03:eb:ea:e4:50:b9:51:c3:cb:8d:14:2f:1b:fb:aa:ba:
         8c:e8:f1:69:7f:e5:57:39:cd:e4:2a:63:97:d3:f6:11:73:14:
         e0:03:0d:96:9d:36:8e:4b:9d:26:3b:0c:30:88:ff:70:5b:bc:
         24:8c:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org