Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3132362e302e302f31362d3234203d3e203533303036.roa
File:                     3137392e3132362e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          DRCB5JscpiGTpzzI1R92BNdq2GhCHagchxq8GenR3L4=
Subject key identifier:   AA:BD:A9:AF:35:17:75:73:02:99:71:50:83:C8:6C:98:D6:C5:80:01
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       62923B41E5795497B6095958A97D7DD1A51B9290
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3132362e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:25:13 +0000
ROA not before:           Sat 11 Dec 2021 18:20:13 +0000
ROA not after:            Sat 10 Dec 2022 18:25:13 +0000
asID:                     53006
IP address blocks:        179.126.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:92:3b:41:e5:79:54:97:b6:09:59:58:a9:7d:7d:d1:a5:1b:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:20:13 2021 GMT
            Not After : Dec 10 18:25:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:d2:ac:e9:51:31:96:1c:fa:9f:84:d7:46:
                    18:8e:31:f8:41:e4:15:6a:56:e3:98:71:aa:73:98:
                    2a:a0:f5:7f:f2:0f:ed:2b:8d:20:45:88:5a:86:62:
                    28:ca:8a:3b:aa:4b:c6:bd:5d:68:02:4f:be:16:84:
                    26:12:74:81:eb:0a:39:f2:f8:db:a5:48:67:f6:36:
                    e2:e5:85:94:61:a4:c4:3d:43:bb:63:b0:20:6b:bf:
                    79:5f:61:5e:b2:0c:4b:e2:9c:ec:62:a0:ff:8a:8d:
                    42:72:59:b7:5e:82:3b:0d:3a:c3:a6:3b:25:5c:d9:
                    a3:f4:0c:65:81:56:00:d1:68:6c:aa:06:d7:f6:50:
                    ba:a1:b1:37:3c:58:8c:3e:5f:fa:a4:54:66:98:55:
                    ac:9e:80:6b:72:ca:1e:04:ed:56:62:f0:fc:a4:51:
                    9f:c7:98:bd:38:55:4c:7d:6f:4c:51:e4:b8:c0:0c:
                    05:08:b8:f3:e5:12:4b:eb:60:9a:e4:7b:92:f0:e4:
                    ae:2a:0c:45:fc:7b:2c:bc:80:cb:85:71:d1:95:f2:
                    61:8a:18:67:51:c8:68:93:ce:18:3a:29:f2:4a:c2:
                    d9:4b:f1:7f:89:65:be:0a:b5:0e:cc:f2:79:4a:e2:
                    88:42:b4:9c:f5:9f:92:47:e5:36:a9:a5:dd:c8:d1:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:A9:AF:35:17:75:73:02:99:71:50:83:C8:6C:98:D6:C5:80:01
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3132362e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:40:29:5b:0b:9f:6c:de:6e:3a:42:96:40:cc:25:99:bf:
         9e:02:2e:73:00:b2:d3:6c:dd:1c:5b:1b:79:5e:ac:66:a7:1a:
         a6:99:9b:95:62:24:46:c3:98:cf:88:c4:9b:a2:e8:16:db:2a:
         4d:7c:7a:eb:34:eb:16:c5:48:31:c3:a0:2e:ae:91:a3:f3:8f:
         46:c2:46:12:65:39:13:c3:db:c8:94:4e:bb:92:b6:c3:8e:90:
         50:b3:01:0f:a3:1f:45:06:07:d4:75:3e:f6:93:5e:41:6a:22:
         5b:b2:8e:37:28:11:85:8f:ff:df:5a:fd:67:32:49:eb:e5:80:
         3b:6d:4d:7e:39:ff:87:3c:e9:88:9b:f0:d0:99:9b:55:7a:0c:
         44:0d:80:b3:31:ec:7b:e9:f5:8d:72:a5:69:60:86:18:9b:b1:
         52:32:f2:c5:0b:4f:58:df:62:c5:88:60:c5:f6:17:44:2b:c7:
         de:8d:5e:93:08:96:bf:0d:04:c0:8a:48:41:93:8b:03:5d:de:
         72:24:c5:0a:33:82:12:a8:7e:ce:03:2f:00:50:ad:ee:13:3e:
         e4:a6:57:ac:85:f3:c5:dc:b8:92:f1:10:00:a9:c2:4d:15:0f:
         3d:10:e0:9d:36:16:b5:e6:61:d0:a7:01:a8:2f:c1:f5:bd:e7:
         ca:79:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org