Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e33322e302e302f31362d3234203d3e203533303036.roa
File:                     3138372e33322e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          WtDZ31Lk6q1LLTmZeMC+9VbVCn30Mogeil+s6kQMhOc=
Subject key identifier:   43:4A:51:33:4B:62:31:CE:36:CA:B1:37:B8:AE:C5:11:A5:FF:88:D9
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       7D0E6C57E57F8E942FF90F2EF6DED1D4F0109E9C
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e33322e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:17:50 +0000
ROA not before:           Sat 11 Dec 2021 18:12:50 +0000
ROA not after:            Sat 10 Dec 2022 18:17:50 +0000
asID:                     53006
IP address blocks:        187.32.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:6c:57:e5:7f:8e:94:2f:f9:0f:2e:f6:de:d1:d4:f0:10:9e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:12:50 2021 GMT
            Not After : Dec 10 18:17:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:ef:d1:6f:55:b7:78:5e:a7:9a:47:73:0a:
                    ce:2e:26:96:35:fa:29:93:2a:04:dd:6f:5b:8e:37:
                    a2:1b:d3:75:dc:44:dc:29:c4:51:17:7a:e7:ff:c3:
                    a4:89:08:fe:5a:a3:ec:5d:3c:90:6f:a5:15:d7:e2:
                    66:0d:ea:6d:8f:57:c1:e1:50:2b:c3:60:55:c6:47:
                    e3:ef:b8:cc:47:61:07:91:13:54:cc:6e:5a:d4:6b:
                    1e:0f:0f:c3:dc:13:e0:83:4d:a2:fe:be:20:73:40:
                    dd:66:f8:27:9c:6a:b0:d9:74:cb:52:53:b3:85:42:
                    3c:03:66:49:30:5d:c8:32:9c:2b:cb:40:39:8b:7e:
                    34:48:04:e0:ba:75:3a:23:40:8d:3a:e5:0f:4c:7b:
                    32:5c:8e:03:ed:05:52:53:fb:5c:3f:1c:9b:24:52:
                    f0:86:ad:ff:53:a0:aa:3d:3b:21:29:e9:f1:83:8d:
                    cd:91:a3:2c:0e:00:e3:4d:0e:20:09:09:e5:d6:33:
                    7c:da:cf:8c:b8:f3:ce:4d:89:97:86:05:ee:b8:f1:
                    e1:ef:3e:31:1d:d8:41:16:0a:65:b6:a6:e1:7e:3e:
                    14:6f:d8:47:ab:82:55:6f:aa:be:b6:15:38:93:38:
                    4e:5e:30:25:50:fc:cf:94:28:79:72:d6:f7:44:b8:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4A:51:33:4B:62:31:CE:36:CA:B1:37:B8:AE:C5:11:A5:FF:88:D9
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e33322e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:c9:f0:ea:2b:71:06:36:55:77:a3:cd:fd:64:29:07:fc:
         6c:d7:51:03:1e:f8:71:2b:6f:6e:72:b5:ab:97:33:20:7f:e7:
         ae:ee:95:18:51:f0:da:6e:31:aa:90:0c:32:c3:ea:38:88:06:
         53:8c:35:72:b2:0b:9d:46:2a:6c:73:46:b5:e0:1d:e5:8a:85:
         a7:ae:06:82:68:f8:9f:e4:b3:d3:0d:81:e0:e5:ca:15:16:94:
         b8:52:3b:34:58:70:22:7a:67:1d:52:5e:2d:05:ed:cd:0b:d5:
         f6:f0:4d:a7:ef:d6:32:4e:df:3f:ce:c9:b9:37:27:d9:6f:4e:
         f4:7b:83:4a:7a:d5:ea:c8:c9:4a:c4:9e:9c:d9:9a:4f:77:96:
         f9:86:8a:32:40:6d:c5:f1:02:b7:6c:2f:6c:d9:ca:dc:0a:3b:
         d9:f4:39:14:3e:86:15:f1:96:50:97:c5:99:64:9a:b8:82:a6:
         77:82:06:7b:b8:22:58:ca:85:36:3e:20:8a:e5:ba:87:04:a1:
         34:21:61:bb:46:4f:c1:34:cb:a6:44:8c:0d:96:b6:ad:0c:9e:
         0b:b3:52:81:ec:5b:a5:26:23:6a:cf:3e:48:b4:34:6c:1d:7f:
         9b:ca:87:1e:c5:ca:f1:81:4c:17:93:26:ce:48:2e:07:65:c8:
         9e:8b:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org