Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203533303036.roa
File:                     3137392e3130382e39362e302f31392d3234203d3e203533303036.roa (raw, json)
Hash identifier:          nT39MLpIiuySbrh28V9g+97/L+vHiULJ+kCY7Qg9r/w=
Subject key identifier:   0D:06:DA:1D:D7:D9:66:9A:68:95:D9:D0:F7:E7:D6:61:B7:09:69:40
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       7D2A8082A6E8636076D7DBD0EF786788AD7F42AE
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:21:35 +0000
ROA not before:           Sat 11 Dec 2021 18:16:35 +0000
ROA not after:            Sat 10 Dec 2022 18:21:35 +0000
asID:                     53006
IP address blocks:        179.108.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2a:80:82:a6:e8:63:60:76:d7:db:d0:ef:78:67:88:ad:7f:42:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:16:35 2021 GMT
            Not After : Dec 10 18:21:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:48:f4:9f:49:65:f7:bc:c5:31:c5:df:9e:
                    74:c7:35:49:1d:e0:d5:87:a9:5a:b9:99:b8:4d:b4:
                    f0:f0:f0:4e:ee:07:33:48:0d:3f:c0:a5:e7:17:b9:
                    52:40:f2:54:a8:c0:25:60:68:5e:86:e0:f8:13:c7:
                    ae:24:c2:d1:53:20:94:ac:fc:eb:0e:51:e8:6e:47:
                    9b:a9:7f:ab:9f:41:c1:2f:ba:d1:c5:7c:10:70:8f:
                    a2:da:b1:2e:05:39:72:0a:ba:eb:ae:c9:b8:ba:e5:
                    e4:e6:d1:0d:4a:98:7c:42:73:21:49:61:1b:dd:cd:
                    e8:b5:fb:0b:78:60:c2:6c:76:c2:60:fb:3a:72:7e:
                    ff:4a:c1:fd:f0:5e:0d:d7:45:ef:5f:8e:58:6e:2c:
                    39:40:2f:45:d2:09:43:16:45:87:29:2c:e0:db:3a:
                    e7:a6:c6:56:b6:19:b1:7e:70:51:d2:92:39:28:af:
                    5a:6a:70:85:fb:58:68:0e:75:76:2b:af:fe:cb:1b:
                    1c:a3:59:b8:d0:26:41:64:be:f5:fa:87:00:b2:5a:
                    7c:7d:b1:65:17:6a:20:6f:b8:1b:0d:ad:64:4d:15:
                    12:41:1d:b8:62:ef:58:58:16:ef:fd:7b:a9:2e:10:
                    1d:12:d8:96:b3:b3:f1:72:2f:1e:0b:77:f6:c5:27:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:06:DA:1D:D7:D9:66:9A:68:95:D9:D0:F7:E7:D6:61:B7:09:69:40
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:46:fb:42:8c:cb:ef:38:8d:6e:e9:d1:1c:54:e8:8d:5e:4f:
         1e:56:a6:af:0c:78:e4:82:5a:28:7b:6c:11:ef:c7:39:b2:2e:
         b4:b1:0f:0d:29:ed:06:05:cc:c7:cf:04:74:36:91:fd:7a:9a:
         79:6d:f2:ea:57:77:d9:45:e1:61:40:7f:7e:96:80:ab:d1:a1:
         02:6a:e4:62:97:cd:90:ad:33:59:5b:dd:cd:31:40:14:26:23:
         e3:2f:18:45:85:ab:20:75:73:87:46:d7:75:2a:d4:75:b5:97:
         ae:67:ec:c5:bd:8f:c8:7f:23:30:58:5a:cf:d3:37:36:e2:76:
         bd:7a:19:81:4e:e9:1a:5f:05:eb:05:7c:c5:f3:98:41:47:a3:
         34:fc:0e:32:14:68:6c:b7:6c:0b:6e:3e:77:61:96:09:14:76:
         c4:07:d5:46:9e:b0:07:64:96:77:68:1d:04:5d:d2:dc:8e:4f:
         06:9c:32:78:52:98:05:4d:fb:03:11:38:ec:c6:19:c0:50:b7:
         43:22:c0:bb:93:f1:27:72:8c:6f:50:3f:0f:0f:ad:8a:2c:9c:
         60:27:6e:f6:fc:fd:ac:02:5e:4a:e0:ad:08:93:46:a5:be:8c:
         3e:b1:6b:d7:6d:8d:cf:ee:9b:68:7f:9f:aa:72:58:88:3a:ae:
         3a:36:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org