Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203136373335.roa
File:                     3138392e31352e302e302f31362d3234203d3e203136373335.roa (raw, json)
Hash identifier:          yAoTNmtBlFBqJeDmGMHp1uUE5oJnzAFMojNQNzxJq0Y=
Subject key identifier:   BA:D8:97:1B:ED:20:E4:EE:29:06:23:10:78:3F:DD:4B:AE:15:7D:0F
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       51CC9380F0F22D5A5B1C121E1D3C844FCE472359
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:22:36 +0000
ROA not before:           Sat 11 Dec 2021 18:17:36 +0000
ROA not after:            Sat 10 Dec 2022 18:22:36 +0000
asID:                     16735
IP address blocks:        189.15.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cc:93:80:f0:f2:2d:5a:5b:1c:12:1e:1d:3c:84:4f:ce:47:23:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:17:36 2021 GMT
            Not After : Dec 10 18:22:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:11:36:c7:f5:48:c4:8b:ce:cf:3a:45:26:
                    33:89:72:a3:c1:ea:00:19:e8:6c:5f:a0:22:43:10:
                    1b:1f:a6:1e:d3:86:d7:e6:74:39:f4:24:d2:19:b9:
                    c2:ea:02:3e:01:01:15:92:29:20:03:58:b1:ff:41:
                    43:e4:dd:6d:df:b3:36:ea:73:d0:ae:a0:d9:ad:92:
                    7a:aa:b9:0b:b2:0d:cd:09:d7:f3:ff:8c:21:38:49:
                    96:a6:c2:ba:14:f1:e2:ae:06:9b:84:da:c9:00:e0:
                    60:fc:75:ba:8a:2a:53:7f:6e:07:4c:26:49:cf:d5:
                    e1:40:c7:d0:29:22:7b:b1:b0:9f:ac:63:63:4d:c7:
                    72:d6:ef:36:d4:b7:ee:24:4e:ae:0d:c9:87:82:ba:
                    06:80:3f:2e:53:57:5b:37:38:39:bb:26:ee:aa:1c:
                    8b:e5:00:ed:96:26:f5:88:2d:1c:da:72:18:10:83:
                    ff:ff:87:b4:d4:db:52:3c:8c:6c:86:e2:13:06:2d:
                    5e:50:48:86:cc:78:e2:6c:3e:01:8c:fc:17:ad:57:
                    9a:94:9b:22:1f:f5:d9:d8:19:3e:0b:44:bd:2c:51:
                    e0:1e:f7:94:79:ce:9c:09:2a:2f:84:65:c1:60:b5:
                    91:27:f6:14:43:97:34:10:80:3b:ff:58:03:e8:77:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:97:1B:ED:20:E4:EE:29:06:23:10:78:3F:DD:4B:AE:15:7D:0F
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:52:e5:6f:a8:4f:65:0f:13:aa:fd:3e:89:61:ce:3e:e7:d8:
         5f:8e:f1:17:17:4a:f2:5a:1c:e6:91:0c:8c:ce:e7:e5:cf:5f:
         d6:c0:97:a7:d8:f0:40:17:6f:55:54:a2:82:12:92:4f:b3:85:
         38:6f:05:f7:a4:01:f2:59:a1:8a:d6:f5:ca:83:e8:35:77:46:
         7d:53:be:48:f6:38:e6:a1:dc:69:3b:cc:43:41:6e:52:62:b5:
         92:2b:d4:2e:1b:7e:35:80:59:2a:79:43:ce:de:e0:6b:a8:79:
         09:60:08:ea:a6:b1:d5:e9:f3:1a:5f:bb:03:c9:64:99:7b:1a:
         d5:68:e5:2c:1e:e5:a2:05:c0:6e:cf:c3:8a:30:a6:fa:90:41:
         98:52:78:f1:d0:19:44:19:20:f4:e3:1c:0e:9f:07:67:84:7a:
         d2:73:ef:5f:64:71:2e:17:83:1b:9d:00:92:7d:eb:98:f5:47:
         9e:18:d9:dd:51:2c:60:ee:35:bc:f0:5e:6c:6c:e9:76:6a:d7:
         54:fb:17:51:89:ba:2e:0b:28:2b:e9:b0:60:0d:dd:44:3d:3e:
         9f:8d:3f:0d:59:2c:df:13:3e:20:65:a4:8d:6b:78:1b:49:1a:
         36:60:bc:89:8e:05:9f:ec:5a:4a:a0:48:a8:b0:2f:3d:2c:09:
         d9:23:3f:7a
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUUcyTgPDyLVpbHBIeHTyET85HI1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODE3MzZaFw0yMjEyMTAxODIyMzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ5QTExMzZDN0Y1NDhDNDhC
Q0VDRjNBNDUyNjMzODk3MkEzQzFFQTAwMTlFODZDNUZBMDIyNDMxMDFCMUZBNjFF
RDM4NkQ3RTY3NDM5RjQyNEQyMTlCOUMyRUEwMjNFMDEwMTE1OTIyOTIwMDM1OEIx
RkY0MTQzRTRERDZEREZCMzM2RUE3M0QwQUVBMEQ5QUQ5MjdBQUFCOTBCQjIwRENE
MDlEN0YzRkY4QzIxMzg0OTk2QTZDMkJBMTRGMUUyQUUwNjlCODREQUM5MDBFMDYw
RkM3NUJBOEEyQTUzN0Y2RTA3NEMyNjQ5Q0ZENUUxNDBDN0QwMjkyMjdCQjFCMDlG
QUM2MzYzNERDNzcyRDZFRjM2RDRCN0VFMjQ0RUFFMERDOTg3ODJCQTA2ODAzRjJF
NTM1NzVCMzczODM5QkIyNkVFQUExQzhCRTUwMEVEOTYyNkY1ODgyRDFDREE3MjE4
MTA4M0ZGRkY4N0I0RDREQjUyM0M4QzZDODZFMjEzMDYyRDVFNTA0ODg2Q0M3OEUy
NkMzRTAxOENGQzE3QUQ1NzlBOTQ5QjIyMUZGNUQ5RDgxOTNFMEI0NEJEMkM1MUUw
MUVGNzk0NzlDRTlDMDkyQTJGODQ2NUMxNjBCNTkxMjdGNjE0NDM5NzM0MTA4MDNC
RkY1ODAzRTg3NzlCQTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvZoRNsf1SMSLzs86RSYziXKjweoAGehsX6AiQxAbH6Ye04bX5nQ5
9CTSGbnC6gI+AQEVkikgA1ix/0FD5N1t37M26nPQrqDZrZJ6qrkLsg3NCdfz/4wh
OEmWpsK6FPHirgabhNrJAOBg/HW6iipTf24HTCZJz9XhQMfQKSJ7sbCfrGNjTcdy
1u821LfuJE6uDcmHgroGgD8uU1dbNzg5uybuqhyL5QDtlib1iC0c2nIYEIP//4e0
1NtSPIxshuITBi1eUEiGzHjibD4BjPwXrVealJsiH/XZ2Bk+C0S9LFHgHveUec6c
CSovhGXBYLWRJ/YUQ5c0EIA7/1gD6HebpwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FLrYlxvtIOTuKQYjEHg/3UuuFX0PMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzgzOTJlMzEzNTJlMzAyZTMw
MmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM2MzczMzM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvQ8wDQYJ
KoZIhvcNAQELBQADggEBAHJS5W+oT2UPE6r9Polhzj7n2F+O8RcXSvJaHOaRDIzO
5+XPX9bAl6fY8EAXb1VUooISkk+zhThvBfekAfJZoYrW9cqD6DV3Rn1Tvkj2OOah
3Gk7zENBblJitZIr1C4bfjWAWSp5Q87e4GuoeQlgCOqmsdXp8xpfuwPJZJl7GtVo
5Swe5aIFwG7Pw4owpvqQQZhSePHQGUQZIPTjHA6fB2eEetJz719kcS4XgxudAJJ9
65j1R54Y2d1RLGDuNbzwXmxs6XZq11T7F1GJui4LKCvpsGAN3UQ9Pp+NPw1ZLN8T
PiBlpI1reBtJGjZgvImOBZ/sWkqgSKiwLz0sCdkjP3o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org