Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e39362e302f32302d3234203d3e203533303036.roa
File:                     3138372e34342e39362e302f32302d3234203d3e203533303036.roa (raw, json)
Hash identifier:          b1OKhr1npnNq8DhKRTzxxyrNGkWwoREMzN1hgrw0dZc=
Subject key identifier:   13:F0:D2:93:7B:C5:FE:76:38:27:05:2C:68:AF:73:52:A5:B4:56:C2
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       42C46CF4E3FF7F5472BFDA0E80E194F78C942778
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e39362e302f32302d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:18:34 +0000
ROA not before:           Sat 11 Dec 2021 18:13:34 +0000
ROA not after:            Sat 10 Dec 2022 18:18:34 +0000
asID:                     53006
IP address blocks:        187.44.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c4:6c:f4:e3:ff:7f:54:72:bf:da:0e:80:e1:94:f7:8c:94:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:13:34 2021 GMT
            Not After : Dec 10 18:18:34 2022 GMT
        Subject: CN=3082010A0282010100B421FD0BB7AC078B5AEB43E228F7558E69346635C3511241EB32DE30E7E7341A1F1DB7EB49C5C8B8355DFB69965A0350052FB1352CCA478B46201B1BDF93BF0F9625EC551F3F6F3A59468C8F3E0993DB8BB7AC5F90F369E1F7B3EF075C96156018B9021D107584942DFA784F81F68FECCD8B13229A802719396AD01C1EA871F9BC5E73ECC2BB9F17A99615296A6C67C6CA0B1B59AF281F8C50310592D9FAB1276E78239396BF7185A25A1A20B8197A50B1EB59E14627866ACBB5073C874C1A447136E1938EB118CFA68094D9CEECB8FD7BA1BD8A8D1615043FF615031B4C3D5224732A803F9AFA50F93F94155DAD27212EFB2F858B9641BD8A686F24CCFFBC7F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:fd:0b:b7:ac:07:8b:5a:eb:43:e2:28:f7:
                    55:8e:69:34:66:35:c3:51:12:41:eb:32:de:30:e7:
                    e7:34:1a:1f:1d:b7:eb:49:c5:c8:b8:35:5d:fb:69:
                    96:5a:03:50:05:2f:b1:35:2c:ca:47:8b:46:20:1b:
                    1b:df:93:bf:0f:96:25:ec:55:1f:3f:6f:3a:59:46:
                    8c:8f:3e:09:93:db:8b:b7:ac:5f:90:f3:69:e1:f7:
                    b3:ef:07:5c:96:15:60:18:b9:02:1d:10:75:84:94:
                    2d:fa:78:4f:81:f6:8f:ec:cd:8b:13:22:9a:80:27:
                    19:39:6a:d0:1c:1e:a8:71:f9:bc:5e:73:ec:c2:bb:
                    9f:17:a9:96:15:29:6a:6c:67:c6:ca:0b:1b:59:af:
                    28:1f:8c:50:31:05:92:d9:fa:b1:27:6e:78:23:93:
                    96:bf:71:85:a2:5a:1a:20:b8:19:7a:50:b1:eb:59:
                    e1:46:27:86:6a:cb:b5:07:3c:87:4c:1a:44:71:36:
                    e1:93:8e:b1:18:cf:a6:80:94:d9:ce:ec:b8:fd:7b:
                    a1:bd:8a:8d:16:15:04:3f:f6:15:03:1b:4c:3d:52:
                    24:73:2a:80:3f:9a:fa:50:f9:3f:94:15:5d:ad:27:
                    21:2e:fb:2f:85:8b:96:41:bd:8a:68:6f:24:cc:ff:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:D2:93:7B:C5:FE:76:38:27:05:2C:68:AF:73:52:A5:B4:56:C2
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e34342e39362e302f32302d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:16:18:9a:ff:65:f5:2f:13:de:a9:1e:42:f6:28:ab:0e:a6:
         14:4d:29:74:74:4a:90:3c:6b:da:13:ad:d3:2f:d8:ed:07:aa:
         36:b4:40:b1:4b:8b:41:45:ca:45:d2:df:fb:14:7e:48:de:ff:
         e2:92:f5:ac:f0:4a:43:b3:34:90:67:36:ba:0d:4a:d1:8e:db:
         15:9a:11:e3:d8:66:50:28:e0:a6:77:74:d5:45:0a:da:1f:9a:
         43:5b:2c:18:d4:fb:0b:c6:54:5d:c6:69:87:b5:01:99:19:c5:
         2b:00:cb:4d:d9:34:17:d6:5b:98:39:9d:81:66:36:ba:ca:56:
         9a:9e:6f:c1:8e:05:66:01:4a:22:5c:83:d2:70:c4:dd:b0:e5:
         42:a6:3d:da:42:c7:ef:5a:81:9d:79:34:55:a6:8b:ab:d5:46:
         46:bb:9e:49:a1:9b:20:f1:41:26:ac:d3:e5:58:fa:7c:08:18:
         b9:17:d9:b4:27:89:bb:6e:ec:45:f0:27:16:f5:ad:91:20:f7:
         96:7e:bb:68:b3:f7:be:29:c7:23:8b:6e:e4:fd:63:35:c2:60:
         00:43:1b:e0:10:05:4e:ce:31:0c:76:21:1f:f7:58:e5:71:d8:
         8d:47:31:b4:b0:b8:98:3f:7a:ac:bd:ef:c1:97:d9:7b:0b:75:
         8f:aa:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:46:24 2025 by rpki-client