Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203533303036.roa
File:                     3138392e33382e39362e302f32302d3234203d3e203533303036.roa (raw, json)
Hash identifier:          muzr4w2etXZ22kBB21O1JZxy9mQK1Zb6mcah8PqU2cA=
Subject key identifier:   82:20:95:C4:9E:A1:99:B3:17:9B:83:72:D4:1C:65:5D:26:94:A8:42
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       0D790B2E632D2A557D2C51CD97CAF6EF198DADCE
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:16:54 +0000
ROA not before:           Sat 11 Dec 2021 18:11:54 +0000
ROA not after:            Sat 10 Dec 2022 18:16:54 +0000
asID:                     53006
IP address blocks:        189.38.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:79:0b:2e:63:2d:2a:55:7d:2c:51:cd:97:ca:f6:ef:19:8d:ad:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:11:54 2021 GMT
            Not After : Dec 10 18:16:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:85:a6:84:68:ec:88:b6:cc:2c:06:da:b2:
                    6e:98:6c:02:6f:fc:a4:e0:da:a8:cd:b6:89:3a:26:
                    4c:80:52:6d:7b:bd:b3:77:b4:f6:4d:d6:99:27:fc:
                    ae:f9:33:cd:35:14:14:1a:bc:b7:9d:ac:a2:5a:28:
                    eb:19:84:31:cf:dd:3d:5a:da:ff:3d:46:7b:ad:65:
                    03:a6:4d:6a:cb:2e:3c:a8:55:44:8d:5c:8f:4f:cd:
                    7e:eb:75:5e:18:b0:50:e3:aa:f8:4d:5b:02:14:14:
                    5f:09:b2:7b:b2:89:aa:e7:7e:96:7a:e7:84:b8:0c:
                    2d:50:fa:8d:4f:1c:19:31:f8:91:40:1c:b7:56:1d:
                    b2:f3:ad:70:ac:d1:9b:4d:fa:13:46:47:9b:54:45:
                    d3:eb:71:29:f4:79:21:85:28:58:b1:f7:59:ec:c0:
                    35:26:93:f1:5a:82:2f:0f:de:db:77:dc:d2:dc:3a:
                    f5:5a:ee:f4:79:95:19:a8:3b:aa:29:98:90:85:8d:
                    4e:a6:80:a6:1f:b6:7e:e7:ab:0e:ca:87:0e:e7:69:
                    ab:b2:45:9b:d2:fe:9c:8f:f2:8e:ba:c2:0a:de:ae:
                    82:94:5b:08:38:12:f5:19:ad:a1:3e:33:ed:74:1a:
                    26:f0:e4:63:c0:c8:79:a2:32:f1:13:e9:cf:bd:f7:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:20:95:C4:9E:A1:99:B3:17:9B:83:72:D4:1C:65:5D:26:94:A8:42
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33382e39362e302f32302d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:f6:38:16:be:f9:a7:85:7a:ed:d8:fb:b2:b5:a9:c0:3e:7a:
         ff:c4:d8:08:f3:df:70:7b:1f:fb:80:f8:73:a9:26:d6:36:26:
         00:f9:8e:0e:13:67:99:b9:be:cf:7f:35:f1:45:52:c7:e8:16:
         23:43:df:5b:08:12:7f:e9:81:9a:3f:cf:05:9f:88:97:53:c3:
         ad:30:e2:7f:ce:f5:17:39:c8:2e:72:72:95:5b:f7:2c:5e:f9:
         0a:76:fa:89:7c:78:da:cc:89:c2:32:4b:0d:66:44:01:5f:7b:
         b5:19:f3:22:22:2a:6a:24:36:d4:47:0e:13:e7:52:b1:2f:ca:
         04:0a:9d:05:f0:2c:2f:6b:91:6c:b6:31:a3:80:03:ea:8e:a7:
         b0:94:d4:a3:53:f2:de:7e:21:ef:54:ca:c2:57:4a:5b:bc:a6:
         d1:cc:5d:1d:0e:27:32:0f:97:a2:73:08:6d:fc:dc:cd:a3:c9:
         d0:0b:69:f2:c2:6f:89:81:fa:f8:6d:72:00:80:43:5e:a8:af:
         d9:d6:83:36:1f:ad:bb:77:9a:fa:00:28:e6:5b:34:34:e6:e2:
         e4:18:1a:c4:c9:62:6a:37:36:0e:0d:39:7d:9c:c7:92:5f:c6:
         c1:9d:b7:fa:28:fa:98:a5:a3:66:b1:06:1d:6e:be:d2:9b:21:
         35:7f:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org