Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203136373335.roa
File:                     3138392e33372e302e302f31372d3234203d3e203136373335.roa (raw, json)
Hash identifier:          fgwQcyJAls4HIi0gOQaiBxmcoNZ28OM4OVSdA2BIn4Q=
Subject key identifier:   94:89:15:55:82:8F:3E:2D:1E:A5:BB:D0:9E:6A:2E:31:25:7F:62:53
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       6C69BA862B9AB0EFE1BE806A183429FC622300DC
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:22:17 +0000
ROA not before:           Sat 11 Dec 2021 18:17:17 +0000
ROA not after:            Sat 10 Dec 2022 18:22:17 +0000
asID:                     16735
IP address blocks:        189.37.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:ba:86:2b:9a:b0:ef:e1:be:80:6a:18:34:29:fc:62:23:00:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:17:17 2021 GMT
            Not After : Dec 10 18:22:17 2022 GMT
        Subject: CN=3082010A0282010100BCF335AF23E0B41DC77E75CD7DA9ABBEA54EA737248033AA1889BF2437F042B79E46D2B577D1FFB860882D3B7112DF8ACB5191103EE2100B2ED36E65CE856179A95B16B17E34E7CD42DAD69752524F0717853CD35B0EE6044296DF6D9B42C8DCD546656CF19692CE98F39B99415874EA29B0F6F3188BBC83CEED88F1682CF9E7E737BC924AB9839C3A5ACA0E841CF9F2527441D838C6AF88DB4BE2BF4D96C10DDCC624D4A785443790B9795B8B6A91B422A975E4886E71BF4D0D7D0B971B3645C8A9902586813C5096D9E9FC25B087DC810BCB40499D2C4E5F0163A90792645197E5800782BBD842E5069A7217ADC2C4741ED312E4EEA50EB3B588E06A2B50E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:35:af:23:e0:b4:1d:c7:7e:75:cd:7d:a9:
                    ab:be:a5:4e:a7:37:24:80:33:aa:18:89:bf:24:37:
                    f0:42:b7:9e:46:d2:b5:77:d1:ff:b8:60:88:2d:3b:
                    71:12:df:8a:cb:51:91:10:3e:e2:10:0b:2e:d3:6e:
                    65:ce:85:61:79:a9:5b:16:b1:7e:34:e7:cd:42:da:
                    d6:97:52:52:4f:07:17:85:3c:d3:5b:0e:e6:04:42:
                    96:df:6d:9b:42:c8:dc:d5:46:65:6c:f1:96:92:ce:
                    98:f3:9b:99:41:58:74:ea:29:b0:f6:f3:18:8b:bc:
                    83:ce:ed:88:f1:68:2c:f9:e7:e7:37:bc:92:4a:b9:
                    83:9c:3a:5a:ca:0e:84:1c:f9:f2:52:74:41:d8:38:
                    c6:af:88:db:4b:e2:bf:4d:96:c1:0d:dc:c6:24:d4:
                    a7:85:44:37:90:b9:79:5b:8b:6a:91:b4:22:a9:75:
                    e4:88:6e:71:bf:4d:0d:7d:0b:97:1b:36:45:c8:a9:
                    90:25:86:81:3c:50:96:d9:e9:fc:25:b0:87:dc:81:
                    0b:cb:40:49:9d:2c:4e:5f:01:63:a9:07:92:64:51:
                    97:e5:80:07:82:bb:d8:42:e5:06:9a:72:17:ad:c2:
                    c4:74:1e:d3:12:e4:ee:a5:0e:b3:b5:88:e0:6a:2b:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:15:55:82:8F:3E:2D:1E:A5:BB:D0:9E:6A:2E:31:25:7F:62:53
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33372e302e302f31372d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.37.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:53:d6:d5:8e:ab:23:0c:5c:b5:6b:07:2a:60:5d:80:18:
         2f:85:46:78:0e:f4:57:46:5c:c6:0b:4e:51:4c:31:d9:64:38:
         6c:c6:8f:db:5b:12:c2:88:b4:c0:f6:be:cf:f7:9c:98:fa:b5:
         ed:ac:b8:c6:be:d0:19:20:aa:4e:09:db:ad:55:56:5f:44:d6:
         b9:b4:74:14:cb:58:65:b6:b8:77:bc:8d:17:e3:cf:4d:76:3c:
         72:8a:51:a5:21:16:6c:58:47:cd:af:1a:a1:20:e4:a5:25:bd:
         28:fc:59:10:54:7b:c3:d6:87:13:09:de:4e:ab:46:1d:e3:29:
         ec:78:c9:86:37:cf:f4:db:a9:3b:2b:00:b5:63:1f:8f:d4:67:
         8c:28:15:c0:10:69:d8:4e:4a:aa:e0:a9:3e:82:0c:6a:7e:62:
         a7:05:a8:64:8e:18:cf:c1:5b:cf:f7:75:1b:0b:ee:bc:1c:64:
         08:2c:fa:e0:0a:1c:15:a5:48:fe:13:cf:e8:42:60:d0:cf:c9:
         75:8b:8a:bd:48:bc:af:a2:cd:f3:03:53:6a:47:f3:09:5b:70:
         bd:3f:59:43:e2:b9:d1:36:69:42:2b:06:41:bb:0d:f4:11:ae:
         5f:3a:92:2c:36:6d:16:5f:0c:72:90:e3:05:58:f6:f7:79:3a:
         8a:8d:29:f9
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUbGm6hiuasO/hvoBqGDQp/GIjANwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODE3MTdaFw0yMjEyMTAxODIyMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNGMzM1QUYyM0UwQjQxREM3
N0U3NUNEN0RBOUFCQkVBNTRFQTczNzI0ODAzM0FBMTg4OUJGMjQzN0YwNDJCNzlF
NDZEMkI1NzdEMUZGQjg2MDg4MkQzQjcxMTJERjhBQ0I1MTkxMTAzRUUyMTAwQjJF
RDM2RTY1Q0U4NTYxNzlBOTVCMTZCMTdFMzRFN0NENDJEQUQ2OTc1MjUyNEYwNzE3
ODUzQ0QzNUIwRUU2MDQ0Mjk2REY2RDlCNDJDOERDRDU0NjY1NkNGMTk2OTJDRTk4
RjM5Qjk5NDE1ODc0RUEyOUIwRjZGMzE4OEJCQzgzQ0VFRDg4RjE2ODJDRjlFN0U3
MzdCQzkyNEFCOTgzOUMzQTVBQ0EwRTg0MUNGOUYyNTI3NDQxRDgzOEM2QUY4OERC
NEJFMkJGNEQ5NkMxMEREQ0M2MjRENEE3ODU0NDM3OTBCOTc5NUI4QjZBOTFCNDIy
QTk3NUU0ODg2RTcxQkY0RDBEN0QwQjk3MUIzNjQ1QzhBOTkwMjU4NjgxM0M1MDk2
RDlFOUZDMjVCMDg3REM4MTBCQ0I0MDQ5OUQyQzRFNUYwMTYzQTkwNzkyNjQ1MTk3
RTU4MDA3ODJCQkQ4NDJFNTA2OUE3MjE3QURDMkM0NzQxRUQzMTJFNEVFQTUwRUIz
QjU4OEUwNkEyQjUwRTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvPM1ryPgtB3HfnXNfamrvqVOpzckgDOqGIm/JDfwQreeRtK1d9H/
uGCILTtxEt+Ky1GRED7iEAsu025lzoVhealbFrF+NOfNQtrWl1JSTwcXhTzTWw7m
BEKW322bQsjc1UZlbPGWks6Y85uZQVh06imw9vMYi7yDzu2I8Wgs+efnN7ySSrmD
nDpayg6EHPnyUnRB2DjGr4jbS+K/TZbBDdzGJNSnhUQ3kLl5W4tqkbQiqXXkiG5x
v00NfQuXGzZFyKmQJYaBPFCW2en8JbCH3IELy0BJnSxOXwFjqQeSZFGX5YAHgrvY
QuUGmnIXrcLEdB7TEuTupQ6ztYjgaitQ4wIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FJSJFVWCjz4tHqW70J5qLjElf2JTMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMxMzgzOTJlMzMzNzJlMzAyZTMw
MmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM2MzczMzM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHvSUAMA0G
CSqGSIb3DQEBCwUAA4IBAQC2XlPW1Y6rIwxctWsHKmBdgBgvhUZ4DvRXRlzGC05R
TDHZZDhsxo/bWxLCiLTA9r7P95yY+rXtrLjGvtAZIKpOCdutVVZfRNa5tHQUy1hl
trh3vI0X489NdjxyilGlIRZsWEfNrxqhIOSlJb0o/FkQVHvD1ocTCd5Oq0Yd4yns
eMmGN8/026k7KwC1Yx+P1GeMKBXAEGnYTkqq4Kk+ggxqfmKnBahkjhjPwVvP93Ub
C+68HGQILPrgChwVpUj+E8/oQmDQz8l1i4q9SLyvos3zA1NqR/MJW3C9P1lD4rnR
NmlCKwZBuw30Ea5fOpIsNm0WXwxykOMFWPb3eTqKjSn5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org