Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e3131322e302f32302d3234203d3e203533303036.roa
File:                     3138372e34342e3131322e302f32302d3234203d3e203533303036.roa (raw, json)
Hash identifier:          6eI/17OjBhCq/n33FlM8WfNb/j1THNT+B9wSo6xoCsg=
Subject key identifier:   4E:0A:EB:7C:35:69:A6:59:63:86:55:05:6A:AB:EC:27:56:D1:34:AA
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       257898C33052F0106B86B98FD0BFA4B2A22B9D29
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e3131322e302f32302d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:19:31 +0000
ROA not before:           Sat 11 Dec 2021 18:14:31 +0000
ROA not after:            Sat 10 Dec 2022 18:19:31 +0000
asID:                     53006
IP address blocks:        187.44.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:78:98:c3:30:52:f0:10:6b:86:b9:8f:d0:bf:a4:b2:a2:2b:9d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:14:31 2021 GMT
            Not After : Dec 10 18:19:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:4b:7a:a7:96:ac:dc:fd:a3:52:05:4d:69:
                    b2:00:55:a6:55:7b:33:ad:2e:ad:01:ec:c1:9f:3f:
                    e0:c3:7e:d9:83:ac:d1:86:90:67:65:9a:05:fb:ed:
                    87:e9:35:c8:84:6d:ef:78:7b:73:f3:20:9f:3b:f8:
                    0e:3f:79:f8:fe:8c:bf:74:e6:c2:e0:0e:ce:1b:a2:
                    e3:c0:83:d8:ed:0f:0a:70:b6:fc:93:86:cb:6f:3f:
                    69:0a:ab:37:fb:94:cd:7d:30:de:2f:14:cb:8a:16:
                    43:ac:e4:6a:9c:72:07:5e:2a:fe:b4:61:60:42:72:
                    e2:11:08:7e:92:ed:70:11:7c:de:bc:31:c9:4b:ce:
                    d4:1b:a3:bf:e6:12:eb:40:65:b6:ff:f9:ad:a9:11:
                    a2:1a:5e:4f:32:59:20:2a:fe:5e:6e:c9:21:1a:95:
                    8d:0b:71:37:c7:fb:a0:f0:53:0d:88:42:8c:24:6c:
                    87:e6:11:fa:80:5d:b8:e6:5f:3e:d7:8f:ef:af:17:
                    2b:2a:49:a8:8e:0b:be:88:5f:c8:18:08:b9:87:3e:
                    5f:30:51:7e:5c:91:c2:89:59:86:9c:bf:0c:c2:3a:
                    47:db:70:17:c1:af:4c:de:89:ef:2f:9f:0f:19:89:
                    16:5a:3c:89:06:04:0d:8c:73:e2:86:26:df:e2:e5:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:EB:7C:35:69:A6:59:63:86:55:05:6A:AB:EC:27:56:D1:34:AA
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e3131322e302f32302d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:ce:40:eb:c4:61:8c:5c:af:d4:e5:e6:ca:32:25:22:2a:
         0f:f5:e6:4b:05:7d:9e:f1:33:e3:06:0e:0d:90:67:47:a6:fc:
         aa:a5:df:d1:dc:80:13:c9:7f:0e:06:09:fc:96:19:fb:43:fe:
         02:1a:51:0b:bd:ad:a2:f7:80:99:60:d4:fa:82:af:7d:d1:73:
         75:0e:cd:39:3b:1e:56:71:03:36:e6:79:3d:ea:4d:16:88:07:
         65:14:7f:da:4f:e8:17:4c:24:3d:fa:37:24:41:02:69:7d:e0:
         a8:12:5e:03:0f:a4:4a:aa:8f:07:cc:0e:74:08:a4:8b:61:ab:
         5e:be:43:bc:13:f0:70:bf:e7:83:6c:bb:33:d9:7b:e7:75:2a:
         6c:6b:72:61:23:cb:76:f1:31:6d:42:b8:e0:31:31:ed:4a:1b:
         93:f0:53:9b:92:8d:fe:b0:65:86:26:82:10:fc:ea:c3:a0:f4:
         0e:38:a5:a5:23:7a:3c:8f:f4:f4:38:ba:91:23:99:f8:14:d0:
         c2:82:83:06:db:2f:35:d8:39:35:26:89:82:ba:9e:7b:ec:da:
         21:ce:8a:77:87:4d:1c:4b:50:e7:06:4a:65:08:6a:f2:9e:c5:
         77:a3:00:92:7c:ba:24:74:c6:d2:33:17:ae:e8:98:7c:a2:76:
         f6:7f:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org