Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138362e3231302e302e302f31362d3234203d3e203533303036.roa
File:                     3138362e3231302e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          QgDksu7eAzAjPalBl7DGsAHsJv2OvRKUE7DLeLEYtYE=
Subject key identifier:   1F:4A:22:BB:02:FF:EE:E5:EA:27:E5:3D:3F:39:B4:B8:3F:AE:16:AB
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2D6977E58E47ACE65722A9B8EDB0CD7C38EAA7BC
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138362e3231302e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:23:42 +0000
ROA not before:           Sat 11 Dec 2021 18:18:42 +0000
ROA not after:            Sat 10 Dec 2022 18:23:42 +0000
asID:                     53006
IP address blocks:        186.210.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:69:77:e5:8e:47:ac:e6:57:22:a9:b8:ed:b0:cd:7c:38:ea:a7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:18:42 2021 GMT
            Not After : Dec 10 18:23:42 2022 GMT
        Subject: CN=3082010A0282010100E19E29FA3B095583FAC4EA4F57A201336861F036911D6A574B631D37014AF171C7C1CBDCFB6497CC82B216235299AB3D1CC051937DBD1A19319563C6FAF1FD235C30F4562587FAC0FCC803CF52BEBC678EDC8BF93E9FBAF400D5F464213B3D83B9D0346014511B9E0604306DEE01E74A2ED25CA630BB733D3F25360FD109560275E617E8333E3CF67C90FC77F0F28F420E5933524BED25FCDEC6C690F7BFBEF75EF82CE1A553F45938631696523252670BB13188344CBF5DF765868F462DCFF68BC1169959219FA29EB52A3206D4FC7F2FBA0B2376039277C9F2A4CF12F0033AF9523017E5E809A67B7EA49D56C54193F346948D5875D3F25B03256AC3BEBEB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:29:fa:3b:09:55:83:fa:c4:ea:4f:57:a2:
                    01:33:68:61:f0:36:91:1d:6a:57:4b:63:1d:37:01:
                    4a:f1:71:c7:c1:cb:dc:fb:64:97:cc:82:b2:16:23:
                    52:99:ab:3d:1c:c0:51:93:7d:bd:1a:19:31:95:63:
                    c6:fa:f1:fd:23:5c:30:f4:56:25:87:fa:c0:fc:c8:
                    03:cf:52:be:bc:67:8e:dc:8b:f9:3e:9f:ba:f4:00:
                    d5:f4:64:21:3b:3d:83:b9:d0:34:60:14:51:1b:9e:
                    06:04:30:6d:ee:01:e7:4a:2e:d2:5c:a6:30:bb:73:
                    3d:3f:25:36:0f:d1:09:56:02:75:e6:17:e8:33:3e:
                    3c:f6:7c:90:fc:77:f0:f2:8f:42:0e:59:33:52:4b:
                    ed:25:fc:de:c6:c6:90:f7:bf:be:f7:5e:f8:2c:e1:
                    a5:53:f4:59:38:63:16:96:52:32:52:67:0b:b1:31:
                    88:34:4c:bf:5d:f7:65:86:8f:46:2d:cf:f6:8b:c1:
                    16:99:59:21:9f:a2:9e:b5:2a:32:06:d4:fc:7f:2f:
                    ba:0b:23:76:03:92:77:c9:f2:a4:cf:12:f0:03:3a:
                    f9:52:30:17:e5:e8:09:a6:7b:7e:a4:9d:56:c5:41:
                    93:f3:46:94:8d:58:75:d3:f2:5b:03:25:6a:c3:be:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4A:22:BB:02:FF:EE:E5:EA:27:E5:3D:3F:39:B4:B8:3F:AE:16:AB
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138362e3231302e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:4a:3d:36:6e:f0:20:bd:97:6b:68:36:2f:1d:af:e9:4a:
         da:d9:50:12:53:d6:64:f6:50:ee:ec:ac:6c:2a:4d:55:4d:7d:
         6d:44:d0:0a:9c:05:0c:9e:0a:0f:72:63:f0:cf:4d:cc:b0:cd:
         89:fa:f6:a6:5b:68:a7:4e:b8:58:61:ce:13:82:75:a6:19:29:
         24:74:01:e6:7b:59:b8:c8:20:9c:f9:54:51:61:3c:df:20:79:
         df:64:08:78:73:52:a8:57:e5:91:14:57:eb:09:e6:e0:08:68:
         ef:1b:f4:69:a3:72:73:a6:d6:bc:cc:86:96:fa:1f:7c:9c:59:
         cb:46:43:4f:ba:72:a1:dc:86:ca:11:1d:e3:32:86:c4:96:96:
         8e:9a:20:82:0a:8a:86:c5:20:f6:93:c0:36:1d:82:b0:25:13:
         38:09:81:9e:4d:47:c3:99:c1:1f:c3:e5:be:39:7b:72:33:a8:
         c3:38:e8:f8:ac:62:8d:54:11:d0:b8:c3:61:a2:72:90:2d:c4:
         06:57:35:8d:6d:74:f0:2e:dd:cf:34:8f:c4:b4:b8:56:b1:0a:
         8f:05:7a:c3:aa:ca:08:96:55:23:74:78:0d:cc:26:34:80:8b:
         ea:2a:e7:4b:b6:b0:a4:84:aa:7c:a9:14:ca:67:4e:17:58:41:
         c2:1a:0f:c4
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIULWl35Y5HrOZXIqm47bDNfDjqp7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODE4NDJaFw0yMjEyMTAxODIzNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE5RTI5RkEzQjA5NTU4M0ZB
QzRFQTRGNTdBMjAxMzM2ODYxRjAzNjkxMUQ2QTU3NEI2MzFEMzcwMTRBRjE3MUM3
QzFDQkRDRkI2NDk3Q0M4MkIyMTYyMzUyOTlBQjNEMUNDMDUxOTM3REJEMUExOTMx
OTU2M0M2RkFGMUZEMjM1QzMwRjQ1NjI1ODdGQUMwRkNDODAzQ0Y1MkJFQkM2NzhF
REM4QkY5M0U5RkJBRjQwMEQ1RjQ2NDIxM0IzRDgzQjlEMDM0NjAxNDUxMUI5RTA2
MDQzMDZERUUwMUU3NEEyRUQyNUNBNjMwQkI3MzNEM0YyNTM2MEZEMTA5NTYwMjc1
RTYxN0U4MzMzRTNDRjY3QzkwRkM3N0YwRjI4RjQyMEU1OTMzNTI0QkVEMjVGQ0RF
QzZDNjkwRjdCRkJFRjc1RUY4MkNFMUE1NTNGNDU5Mzg2MzE2OTY1MjMyNTI2NzBC
QjEzMTg4MzQ0Q0JGNURGNzY1ODY4RjQ2MkRDRkY2OEJDMTE2OTk1OTIxOUZBMjlF
QjUyQTMyMDZENEZDN0YyRkJBMEIyMzc2MDM5Mjc3QzlGMkE0Q0YxMkYwMDMzQUY5
NTIzMDE3RTVFODA5QTY3QjdFQTQ5RDU2QzU0MTkzRjM0Njk0OEQ1ODc1RDNGMjVC
MDMyNTZBQzNCRUJFQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4Z4p+jsJVYP6xOpPV6IBM2hh8DaRHWpXS2MdNwFK8XHHwcvc+2SX
zIKyFiNSmas9HMBRk329GhkxlWPG+vH9I1ww9FYlh/rA/MgDz1K+vGeO3Iv5Pp+6
9ADV9GQhOz2DudA0YBRRG54GBDBt7gHnSi7SXKYwu3M9PyU2D9EJVgJ15hfoMz48
9nyQ/Hfw8o9CDlkzUkvtJfzexsaQ97++9174LOGlU/RZOGMWllIyUmcLsTGINEy/
Xfdlho9GLc/2i8EWmVkhn6KetSoyBtT8fy+6CyN2A5J3yfKkzxLwAzr5UjAX5egJ
pnt+pJ1WxUGT80aUjVh10/JbAyVqw76+tQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FB9KIrsC/+7l6iflPT85tLg/rharMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzgzNjJlMzIzMTMwMmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM1MzMzMDMwMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC60jAN
BgkqhkiG9w0BAQsFAAOCAQEARh9KPTZu8CC9l2toNi8dr+lK2tlQElPWZPZQ7uys
bCpNVU19bUTQCpwFDJ4KD3Jj8M9NzLDNifr2pltop064WGHOE4J1phkpJHQB5ntZ
uMggnPlUUWE83yB532QIeHNSqFflkRRX6wnm4Aho7xv0aaNyc6bWvMyGlvoffJxZ
y0ZDT7pyodyGyhEd4zKGxJaWjpogggqKhsUg9pPANh2CsCUTOAmBnk1Hw5nBH8Pl
vjl7cjOowzjo+KxijVQR0LjDYaJykC3EBlc1jW108C7dzzSPxLS4VrEKjwV6w6rK
CJZVI3R4DcwmNICL6irnS7awpISqfKkUymdOF1hBwhoPxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org