Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203533303036.roa
File:                     3138392e31352e302e302f31362d3234203d3e203533303036.roa (raw, json)
Hash identifier:          ebRxCsrQZU/vP32c2KKqP3+QUVGb8DDE64aXQOK4UrE=
Subject key identifier:   28:98:91:19:73:52:59:FD:ED:D1:0C:0B:FC:B2:B2:36:42:88:35:9C
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       5DC0F04ABEF92B6C3687FFFFB6792F8D53C7C306
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:22:45 +0000
ROA not before:           Sat 11 Dec 2021 18:17:45 +0000
ROA not after:            Sat 10 Dec 2022 18:22:45 +0000
asID:                     53006
IP address blocks:        189.15.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c0:f0:4a:be:f9:2b:6c:36:87:ff:ff:b6:79:2f:8d:53:c7:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:17:45 2021 GMT
            Not After : Dec 10 18:22:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:c3:89:8e:32:81:d4:8e:a7:5f:3f:66:24:
                    77:4d:36:b3:89:2e:86:b7:b7:6e:ee:c9:85:95:2b:
                    82:ee:3d:bd:0e:67:60:1c:dc:e1:18:df:9d:f8:a3:
                    0c:72:69:05:47:ff:23:69:9f:87:af:81:c7:8b:9c:
                    73:5b:ba:64:bf:55:f4:d4:b2:6e:e9:4d:a7:c3:de:
                    11:f0:af:51:af:43:f4:12:39:68:67:65:9e:27:0a:
                    c8:98:0d:c5:55:46:1f:70:74:79:31:e2:41:13:94:
                    53:20:4b:62:75:e6:4e:52:51:99:a9:16:79:ea:0d:
                    23:ac:c8:e1:76:2d:55:af:e7:51:78:99:52:6b:3c:
                    7e:19:b4:91:45:6a:24:6c:39:a2:47:b4:91:68:85:
                    d2:b5:80:6b:5d:f5:a7:cb:5b:c5:2f:dc:94:c1:e2:
                    d1:26:43:5c:11:d6:bf:f9:22:4f:ae:13:31:07:70:
                    73:73:a9:55:ac:b0:3b:a9:a6:8b:61:1c:6f:81:d5:
                    d5:93:a9:b9:ab:58:de:c5:c7:dd:61:86:76:2c:44:
                    38:d1:9d:2c:38:87:4c:e3:0d:d2:51:bd:67:35:8f:
                    96:9c:04:d3:95:a8:e3:e0:70:3c:1f:4c:a3:33:cc:
                    d2:d3:14:a4:4b:f3:85:66:3b:ea:72:4c:b4:e1:68:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:98:91:19:73:52:59:FD:ED:D1:0C:0B:FC:B2:B2:36:42:88:35:9C
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e31352e302e302f31362d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:28:da:09:34:e5:05:af:5a:ae:58:f9:23:66:4b:35:37:
         2c:da:f6:81:13:04:7c:c7:bf:3b:3e:a0:a3:0a:a6:22:70:a9:
         c9:01:b0:3b:37:67:b8:59:9e:bb:19:e6:df:3a:6b:1c:5f:2c:
         cd:26:b2:aa:e5:06:8b:c4:9f:52:50:4a:65:8e:b7:d8:b0:19:
         b2:f4:e8:20:40:be:04:67:2c:e3:64:ad:99:97:9c:e7:16:40:
         b4:2d:fe:2b:d2:59:69:23:4d:c4:de:a7:65:ae:21:18:58:39:
         74:5a:2f:7e:8d:77:3c:70:38:ee:20:bc:0d:e5:e4:52:ec:cc:
         bc:4f:4d:9e:c5:60:45:11:bb:6d:a4:1a:63:07:41:9d:98:d9:
         13:b7:3e:2a:d7:7e:91:6a:11:d8:2e:8c:f4:45:ea:df:8d:04:
         ad:dc:0c:e8:b3:34:5e:40:24:0a:c1:5f:e5:8b:ab:12:d3:98:
         bb:3b:4f:88:e7:02:73:b8:f7:f0:1d:b2:c4:39:46:b6:95:b7:
         64:84:3b:6e:6a:10:e6:1d:a4:40:93:e4:ef:4c:80:0c:4b:97:
         43:75:b5:1f:01:d7:ec:9f:dd:85:b9:61:9a:47:e5:9b:98:94:
         50:9e:d0:f9:7c:3a:1c:80:f4:d7:1b:75:6a:4f:25:7a:8a:47:
         cb:d6:df:7f
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUXcDwSr75K2w2h///tnkvjVPHwwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODE3NDVaFw0yMjEyMTAxODIyNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ2MUMzODk4RTMyODFENDhF
QTc1RjNGNjYyNDc3NEQzNkIzODkyRTg2QjdCNzZFRUVDOTg1OTUyQjgyRUUzREJE
MEU2NzYwMUNEQ0UxMThERjlERjhBMzBDNzI2OTA1NDdGRjIzNjk5Rjg3QUY4MUM3
OEI5QzczNUJCQTY0QkY1NUY0RDRCMjZFRTk0REE3QzNERTExRjBBRjUxQUY0M0Y0
MTIzOTY4Njc2NTlFMjcwQUM4OTgwREM1NTU0NjFGNzA3NDc5MzFFMjQxMTM5NDUz
MjA0QjYyNzVFNjRFNTI1MTk5QTkxNjc5RUEwRDIzQUNDOEUxNzYyRDU1QUZFNzUx
Nzg5OTUyNkIzQzdFMTlCNDkxNDU2QTI0NkMzOUEyNDdCNDkxNjg4NUQyQjU4MDZC
NURGNUE3Q0I1QkM1MkZEQzk0QzFFMkQxMjY0MzVDMTFENkJGRjkyMjRGQUUxMzMx
MDc3MDczNzNBOTU1QUNCMDNCQTlBNjhCNjExQzZGODFENUQ1OTNBOUI5QUI1OERF
QzVDN0RENjE4Njc2MkM0NDM4RDE5RDJDMzg4NzRDRTMwREQyNTFCRDY3MzU4Rjk2
OUMwNEQzOTVBOEUzRTA3MDNDMUY0Q0EzMzNDQ0QyRDMxNEE0NEJGMzg1NjYzQkVB
NzI0Q0I0RTE2OEMwM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApGHDiY4ygdSOp18/ZiR3TTaziS6Gt7du7smFlSuC7j29DmdgHNzh
GN+d+KMMcmkFR/8jaZ+Hr4HHi5xzW7pkv1X01LJu6U2nw94R8K9Rr0P0EjloZ2We
JwrImA3FVUYfcHR5MeJBE5RTIEtideZOUlGZqRZ56g0jrMjhdi1Vr+dReJlSazx+
GbSRRWokbDmiR7SRaIXStYBrXfWny1vFL9yUweLRJkNcEda/+SJPrhMxB3Bzc6lV
rLA7qaaLYRxvgdXVk6m5q1jexcfdYYZ2LEQ40Z0sOIdM4w3SUb1nNY+WnATTlajj
4HA8H0yjM8zS0xSkS/OFZjvqcky04WjAPwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCiYkRlzUln97dEMC/yysjZCiDWcMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzgzOTJlMzEzNTJlMzAyZTMw
MmYzMTM2MmQzMjM0MjAzZDNlMjAzNTMzMzAzMDM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvQ8wDQYJ
KoZIhvcNAQELBQADggEBAAvRKNoJNOUFr1quWPkjZks1Nyza9oETBHzHvzs+oKMK
piJwqckBsDs3Z7hZnrsZ5t86axxfLM0msqrlBovEn1JQSmWOt9iwGbL06CBAvgRn
LONkrZmXnOcWQLQt/ivSWWkjTcTep2WuIRhYOXRaL36NdzxwOO4gvA3l5FLszLxP
TZ7FYEURu22kGmMHQZ2Y2RO3PirXfpFqEdgujPRF6t+NBK3cDOizNF5AJArBX+WL
qxLTmLs7T4jnAnO49/AdssQ5RraVt2SEO25qEOYdpECT5O9MgAxLl0N1tR8B1+yf
3YW5YZpH5ZuYlFCe0Pl8OhyA9NcbdWpPJXqKR8vW338=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org