Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e3131322e302e302f31362d3234203d3e203533303036.roa
File:                     3138392e3131322e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          kg4yJZHq0Es8zX95jZIcO9XPVErSoh2t2dwEG2dcXI8=
Subject key identifier:   AC:C2:87:B0:7C:08:80:13:4A:AF:9C:84:93:23:2F:A3:52:50:8A:B9
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       449624F9E2D702704D802BA7A74831C5431D8246
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e3131322e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:17:21 +0000
ROA not before:           Sat 11 Dec 2021 18:12:21 +0000
ROA not after:            Sat 10 Dec 2022 18:17:21 +0000
asID:                     53006
IP address blocks:        189.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:96:24:f9:e2:d7:02:70:4d:80:2b:a7:a7:48:31:c5:43:1d:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:12:21 2021 GMT
            Not After : Dec 10 18:17:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:a6:2a:5b:73:ea:79:38:c1:bd:3b:58:21:
                    36:bd:de:46:ce:6b:47:fc:b1:36:26:55:1f:0e:47:
                    14:a0:23:f6:27:62:ea:54:76:47:c8:08:a3:e7:64:
                    00:44:61:dd:28:b0:c1:bc:01:2f:65:ad:29:42:98:
                    69:93:ea:de:e3:05:05:6a:4f:1c:22:c5:60:4e:65:
                    de:2f:78:12:31:22:97:74:c8:0d:d5:a3:17:d1:2e:
                    f5:fb:1a:a6:31:0f:44:69:d5:85:3d:69:19:8c:13:
                    ac:8a:37:19:8a:20:a3:76:ad:4e:09:c7:96:38:5b:
                    80:b7:0c:f6:88:09:3f:6e:30:04:ba:d3:a3:1a:f1:
                    fe:70:bb:a4:ff:6e:3c:88:8d:d7:76:ff:be:2b:ac:
                    5d:d1:68:97:ef:3a:b0:36:1d:01:30:04:73:80:da:
                    7c:cd:fa:7f:9d:08:87:58:26:a3:ba:2f:7c:ac:2d:
                    f1:e9:78:2f:5b:88:ef:96:23:56:cc:cf:97:cb:9f:
                    b0:cd:e2:5e:ca:77:84:f0:36:ce:97:f1:79:a2:64:
                    2d:c2:1b:42:89:e4:66:b2:fb:f6:bd:9c:ac:32:49:
                    d3:be:56:05:c7:d4:6c:51:0a:1c:bc:b1:73:ef:d4:
                    5e:4e:00:88:29:1f:b6:25:73:ff:49:56:cb:1f:6d:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C2:87:B0:7C:08:80:13:4A:AF:9C:84:93:23:2F:A3:52:50:8A:B9
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e3131322e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:81:4a:a3:e9:e8:d7:05:0f:4d:c4:ac:ba:81:df:dc:e8:f8:
         66:30:4d:0e:dd:46:03:a5:a7:f0:3d:b9:56:47:57:4b:01:f5:
         a3:8b:ab:c0:cc:9c:81:28:d4:c0:75:70:d4:00:54:99:28:dd:
         43:52:3d:26:5d:46:fa:5c:bf:a1:a9:53:84:ec:eb:dc:06:22:
         20:03:2f:d0:c4:e7:bb:c6:f3:87:ca:3c:5d:ff:f1:e5:09:8b:
         80:ea:95:bd:ce:e8:9e:8f:ee:2b:91:cb:7f:93:2f:e6:06:1f:
         36:1e:ee:b6:67:e8:e8:71:cb:41:a4:9c:3d:b6:8b:ab:9e:cc:
         75:1b:4f:12:7e:76:7e:0a:eb:4e:7d:ca:6e:00:0d:bb:1f:91:
         94:36:25:ab:01:82:e2:f1:c2:b6:aa:05:ec:97:50:10:b5:49:
         6e:1e:ce:1f:07:1b:6e:95:96:e9:58:d7:1e:43:80:1c:d0:50:
         e5:c3:65:7a:48:db:45:e3:6d:40:c1:a3:31:a3:67:46:18:b9:
         90:24:eb:44:6b:9d:e2:6a:bd:1f:21:fb:fa:c5:1e:bf:24:cb:
         fa:80:48:00:65:37:89:1a:96:c9:74:15:d3:95:85:b2:bf:26:
         8a:4c:08:8d:c8:6c:63:d1:2a:25:8a:de:10:4d:f4:d1:c4:56:
         97:f6:78:bd
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIURJYk+eLXAnBNgCunp0gxxUMdgkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODEyMjFaFw0yMjEyMTAxODE3MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDlDQUE2MkE1QjczRUE3OTM4
QzFCRDNCNTgyMTM2QkRERTQ2Q0U2QjQ3RkNCMTM2MjY1NTFGMEU0NzE0QTAyM0Y2
Mjc2MkVBNTQ3NjQ3QzgwOEEzRTc2NDAwNDQ2MUREMjhCMEMxQkMwMTJGNjVBRDI5
NDI5ODY5OTNFQURFRTMwNTA1NkE0RjFDMjJDNTYwNEU2NURFMkY3ODEyMzEyMjk3
NzRDODBERDVBMzE3RDEyRUY1RkIxQUE2MzEwRjQ0NjlENTg1M0Q2OTE5OEMxM0FD
OEEzNzE5OEEyMEEzNzZBRDRFMDlDNzk2Mzg1QjgwQjcwQ0Y2ODgwOTNGNkUzMDA0
QkFEM0EzMUFGMUZFNzBCQkE0RkY2RTNDODg4REQ3NzZGRkJFMkJBQzVERDE2ODk3
RUYzQUIwMzYxRDAxMzAwNDczODBEQTdDQ0RGQTdGOUQwODg3NTgyNkEzQkEyRjdD
QUMyREYxRTk3ODJGNUI4OEVGOTYyMzU2Q0NDRjk3Q0I5RkIwQ0RFMjVFQ0E3Nzg0
RjAzNkNFOTdGMTc5QTI2NDJEQzIxQjQyODlFNDY2QjJGQkY2QkQ5Q0FDMzI0OUQz
QkU1NjA1QzdENDZDNTEwQTFDQkNCMTczRUZENDVFNEUwMDg4MjkxRkI2MjU3M0ZG
NDk1NkNCMUY2REMxNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2cqmKltz6nk4wb07WCE2vd5GzmtH/LE2JlUfDkcUoCP2J2LqVHZH
yAij52QARGHdKLDBvAEvZa0pQphpk+re4wUFak8cIsVgTmXeL3gSMSKXdMgN1aMX
0S71+xqmMQ9EadWFPWkZjBOsijcZiiCjdq1OCceWOFuAtwz2iAk/bjAEutOjGvH+
cLuk/248iI3Xdv++K6xd0WiX7zqwNh0BMARzgNp8zfp/nQiHWCajui98rC3x6Xgv
W4jvliNWzM+Xy5+wzeJeyneE8DbOl/F5omQtwhtCieRmsvv2vZysMknTvlYFx9Rs
UQocvLFz79ReTgCIKR+2JXP/SVbLH23BXwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FKzCh7B8CIATSq+chJMjL6NSUIq5MB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzgzOTJlMzEzMTMyMmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM1MzMzMDMwMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC9cDAN
BgkqhkiG9w0BAQsFAAOCAQEAVoFKo+no1wUPTcSsuoHf3Oj4ZjBNDt1GA6Wn8D25
VkdXSwH1o4urwMycgSjUwHVw1ABUmSjdQ1I9Jl1G+ly/oalThOzr3AYiIAMv0MTn
u8bzh8o8Xf/x5QmLgOqVvc7ono/uK5HLf5Mv5gYfNh7utmfo6HHLQaScPbaLq57M
dRtPEn52fgrrTn3KbgANux+RlDYlqwGC4vHCtqoF7JdQELVJbh7OHwcbbpWW6VjX
HkOAHNBQ5cNlekjbReNtQMGjMaNnRhi5kCTrRGud4mq9HyH7+sUevyTL+oBIAGU3
iRqWyXQV05WFsr8mikwIjchsY9EqJYreEE300cRWl/Z4vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org