Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203136373335.roa
File:                     3138392e33382e39362e302f32302d3234203d3e203136373335.roa (raw, json)
Hash identifier:          yyQmxG7bjgdr83Zr3kth3wv6/Dn5ntEGoxv5QFWq7jQ=
Subject key identifier:   C3:FC:42:4F:16:1E:84:29:3F:8E:5F:51:52:34:F2:5A:6B:B1:A2:7E
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       6E4F472243971DE2D1B48162BFC28D11542843D7
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:16:42 +0000
ROA not before:           Sat 11 Dec 2021 18:11:42 +0000
ROA not after:            Sat 10 Dec 2022 18:16:42 +0000
asID:                     16735
IP address blocks:        189.38.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:47:22:43:97:1d:e2:d1:b4:81:62:bf:c2:8d:11:54:28:43:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:11:42 2021 GMT
            Not After : Dec 10 18:16:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:21:96:9e:65:4c:da:6f:12:8d:59:5c:93:
                    23:62:05:38:f9:9c:dc:f2:f9:51:2b:d1:cb:0c:d9:
                    eb:39:2d:c9:72:76:6a:0e:c1:8d:89:0b:88:6d:3f:
                    35:d3:1e:34:03:4a:80:47:14:71:ff:21:89:47:21:
                    af:be:f5:13:73:5f:40:58:af:e1:6b:f8:f5:1b:f7:
                    a0:1f:6b:07:54:38:91:30:a0:ee:6a:73:e5:20:c4:
                    30:bf:08:00:89:e9:3e:a6:c2:a3:67:1a:6e:20:84:
                    3a:47:fa:7e:4a:e8:95:43:1f:b7:d5:cf:56:8c:06:
                    0a:bb:fd:7a:3f:0b:c1:c7:8c:3e:ee:bb:df:be:2a:
                    db:3c:95:21:db:37:9f:a6:8d:6a:04:1c:ed:fa:80:
                    f8:81:57:18:a1:22:53:e7:5c:76:0f:03:e5:a0:21:
                    05:94:db:98:b7:56:5c:04:e6:58:ec:70:7a:a6:a2:
                    28:de:80:61:d3:b3:39:d4:64:18:05:1c:c9:99:fc:
                    14:3a:9d:fa:f1:ff:e3:45:0f:34:48:fd:62:16:ca:
                    3e:9f:3e:22:35:4e:de:5f:6e:dc:1b:60:8b:c9:4f:
                    56:c5:bb:11:68:c8:f2:d4:53:b1:2c:eb:1f:b3:ba:
                    e9:32:02:9a:61:d0:7e:a7:ce:8d:8f:41:ae:46:55:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:42:4F:16:1E:84:29:3F:8E:5F:51:52:34:F2:5A:6B:B1:A2:7E
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:55:88:43:97:5d:d9:e5:62:cf:95:c0:d7:96:ae:09:7e:31:
         95:d9:0a:7c:fe:eb:46:cf:41:13:3f:b5:17:41:34:8b:d9:0f:
         9c:c7:1c:dd:fe:f0:c7:2a:fd:d6:ee:90:e7:d6:f0:ad:86:ab:
         47:e1:8e:bd:8f:29:44:44:01:fe:e6:f2:f0:b5:fb:98:90:25:
         b4:73:38:6c:53:89:c4:78:c5:e1:75:84:9d:c8:88:3b:f5:c2:
         fb:a2:c9:7f:c2:c2:64:03:ad:37:77:16:0a:8e:ce:f0:f4:6a:
         9d:f2:56:ee:b9:56:f7:f3:a6:e2:3e:3d:8a:e3:1a:7c:ea:77:
         1a:b4:a3:41:d1:1b:92:fb:d2:66:00:9f:41:ae:c8:e7:82:3b:
         c3:8a:4d:5b:0e:b0:3c:2a:2a:e9:0b:52:c7:0f:be:d4:6d:61:
         1f:c2:af:74:bb:15:e0:48:9e:a3:7e:ca:56:6d:ae:fa:94:8c:
         dd:8b:7c:df:96:ca:04:86:56:c6:b9:96:17:b9:61:d0:2c:c7:
         cc:d5:50:d2:77:f2:79:cd:48:27:51:f4:db:18:f9:62:74:70:
         ef:3d:5a:0b:32:1a:3a:bc:ee:44:c6:df:ac:ad:e9:38:f6:84:
         8d:a6:24:13:72:e9:80:aa:36:f4:71:ae:10:36:56:b9:2a:2b:
         66:28:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:47:37 2025 by rpki-client