Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e37322e302e302f31362d3234203d3e203533303036.roa
File:                     3138372e37322e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          fikdssZElX1MXvLjWygrQijClj2A5l/GKRiCM4g1WBU=
Subject key identifier:   49:40:26:63:16:AE:35:04:E1:6D:87:45:9E:FE:59:F2:2B:B3:59:B1
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2400D12323D57EA929E804F7ECECC9DF5F4F1588
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e37322e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:19:06 +0000
ROA not before:           Sat 11 Dec 2021 18:14:06 +0000
ROA not after:            Sat 10 Dec 2022 18:19:06 +0000
asID:                     53006
IP address blocks:        187.72.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:d1:23:23:d5:7e:a9:29:e8:04:f7:ec:ec:c9:df:5f:4f:15:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:14:06 2021 GMT
            Not After : Dec 10 18:19:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:c1:40:a7:55:b3:e2:c3:46:1b:90:d5:2f:
                    40:f2:2a:01:d4:e7:f7:87:68:21:bc:42:db:31:60:
                    79:86:62:79:ef:e1:3f:75:97:d0:93:1d:bb:ae:51:
                    a4:a3:ac:31:c2:8c:e4:38:ed:dd:f3:0c:68:bf:ea:
                    d0:10:ae:b8:b0:ba:06:0e:c2:29:be:1e:c8:20:66:
                    30:78:b1:94:57:ad:3f:9a:b8:a6:11:b3:54:12:a8:
                    9c:61:da:c9:84:2d:a3:75:dd:68:c1:60:a9:ce:bf:
                    f9:24:d7:17:f5:03:9e:18:ed:57:3f:f5:63:ff:ce:
                    6a:79:c6:d7:23:27:cc:ed:3f:5b:83:b1:b0:3a:e9:
                    7e:30:40:45:24:4a:ab:5a:db:a2:e8:33:3a:ea:c1:
                    c7:c6:f2:9a:01:25:80:63:34:ca:8b:65:3a:83:f4:
                    40:f6:a2:a0:53:b6:43:22:49:54:27:a3:d7:b7:ab:
                    31:a0:ca:5f:2c:16:63:6d:38:49:bc:a9:61:38:4a:
                    e7:34:ae:47:f4:9c:f0:5e:2e:e1:44:e4:cd:d6:85:
                    db:74:8f:f4:82:53:58:4f:53:80:a8:aa:6b:8b:9f:
                    b5:8a:26:d4:bd:cb:f1:06:c2:43:f3:a6:d9:c8:4d:
                    e2:cf:40:14:5b:61:11:58:67:fe:bf:1e:10:14:bb:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:40:26:63:16:AE:35:04:E1:6D:87:45:9E:FE:59:F2:2B:B3:59:B1
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138372e37322e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:32:6a:97:b8:22:4f:0c:d4:f3:c5:53:8b:76:88:a4:71:
         66:19:f0:02:00:4d:e2:07:93:d8:e5:9f:7f:b5:2e:07:4a:da:
         b6:41:ee:ab:9a:8f:d3:91:47:7c:19:4c:5a:bf:58:b5:83:7f:
         e3:61:b1:e5:97:58:e6:65:39:72:fb:3d:2f:46:ee:51:66:23:
         55:7b:41:fd:70:8d:62:6f:c6:89:e7:72:9d:e2:e6:31:6d:69:
         29:c7:38:b1:eb:84:fa:5a:9a:61:1d:46:2d:68:06:08:c6:5d:
         4b:70:ab:a5:10:f6:dc:3b:45:e5:59:fa:75:c4:4d:35:35:a3:
         56:d2:7f:1a:18:69:1d:e9:ce:7d:79:00:e9:c1:3b:96:a6:b3:
         23:f5:2e:00:a6:91:82:fc:71:d3:af:1e:07:35:bd:ee:cc:90:
         e4:ee:19:79:fa:53:c7:e8:53:8a:16:4c:65:b1:72:e3:30:93:
         dc:a0:57:03:05:8b:39:b0:4f:aa:58:86:49:a8:dc:99:2e:dc:
         b8:70:b1:f5:bf:c3:59:01:ea:2c:06:ef:ea:a1:88:6d:38:ba:
         37:3d:bc:84:10:c9:e3:09:b9:4a:6f:44:28:d7:d5:fe:6d:43:
         01:4e:f8:0b:0f:03:0f:2d:9c:91:1b:94:05:59:fe:56:b4:8d:
         ca:66:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org