Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33392e302e302f31382d3234203d3e203533303036.roa
File:                     3138392e33392e302e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          pJHGfwtNaTsXcZwNZCVQ8L75ZL+rZzRgRoz92a+2KCo=
Subject key identifier:   CB:5C:CF:B2:EF:93:4A:C8:5E:06:DC:C1:E1:6D:04:21:A2:E4:69:7A
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       68E03EDA256DC3333F0A89A191E611D1857E88DB
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33392e302e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:16:27 +0000
ROA not before:           Sat 11 Dec 2021 18:11:27 +0000
ROA not after:            Sat 10 Dec 2022 18:16:27 +0000
asID:                     53006
IP address blocks:        189.39.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:3e:da:25:6d:c3:33:3f:0a:89:a1:91:e6:11:d1:85:7e:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:11:27 2021 GMT
            Not After : Dec 10 18:16:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:8d:bf:15:c9:64:a6:34:48:2c:e4:eb:bd:
                    ba:78:21:2c:75:59:6b:7d:77:c6:ae:50:63:d7:85:
                    06:2a:36:2e:89:37:25:48:6b:e1:61:67:20:e4:16:
                    c5:70:21:ba:11:f1:9e:a2:74:25:86:bd:84:10:53:
                    c9:56:52:29:8b:c6:2f:5f:92:0b:7a:5c:c4:1a:81:
                    f0:34:31:06:22:b5:da:52:3c:7c:50:ae:a8:d5:85:
                    2d:42:1f:47:ab:59:9d:15:01:e7:b1:a9:45:0d:ec:
                    cf:de:43:45:7f:a4:cc:73:40:15:0b:b3:4a:5f:0c:
                    36:f0:d1:13:d3:3e:f3:8c:ec:6d:e0:3b:32:46:1e:
                    6b:76:5c:a4:8e:4c:6b:03:fd:b8:4e:ed:55:9e:90:
                    1d:20:7b:99:94:88:ec:45:b7:d1:0f:3a:92:7e:37:
                    dc:73:56:87:cd:d5:3c:30:c0:7c:d2:c6:a3:ca:2c:
                    57:58:1f:11:36:e1:73:fe:ac:79:4e:8e:46:f2:7a:
                    f1:7c:8e:c8:97:54:36:17:27:84:e0:31:21:f3:93:
                    b6:38:55:1f:e4:1a:43:d5:58:ca:b0:eb:84:b2:14:
                    b5:b7:86:6d:a7:3e:b2:1e:8b:9e:76:2b:1d:0f:4c:
                    31:cd:db:47:ce:0c:13:4b:88:73:46:f9:d8:c3:78:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:CF:B2:EF:93:4A:C8:5E:06:DC:C1:E1:6D:04:21:A2:E4:69:7A
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3138392e33392e302e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:8e:69:5d:cc:c3:b4:7a:14:27:13:17:04:49:fd:49:1b:
         57:cd:5b:9e:e1:2e:af:92:49:d5:d2:bf:f7:46:e1:38:62:80:
         cc:ee:5c:26:2b:44:d5:1b:88:1b:52:ea:49:e4:d8:12:ad:14:
         54:70:0f:5e:39:72:92:0e:30:68:b9:a1:9a:0b:bb:da:59:fc:
         04:d5:c6:ec:fd:d3:e7:43:70:89:24:08:e6:b3:fc:0a:5a:89:
         89:e9:17:41:7a:9a:f5:04:63:83:e1:6d:b6:f5:f8:da:a6:c3:
         60:e0:07:f7:4f:5b:73:ce:c5:11:2c:33:e4:7e:8b:5b:74:29:
         57:38:59:f9:5c:0c:db:bb:51:d4:6c:58:e6:b9:82:e9:ff:61:
         f8:42:59:f4:35:26:0b:44:2e:2c:64:d8:24:b6:aa:c0:85:4f:
         b5:23:81:56:76:fb:1e:6f:e4:42:fe:74:46:1b:79:ec:9c:08:
         0e:b0:86:79:35:67:2d:60:ad:da:03:fb:a0:19:5d:2a:4a:18:
         8c:f9:6d:d2:f7:46:9e:92:c8:d3:c5:2a:65:82:82:20:50:8c:
         13:e9:c5:05:0c:a4:3f:fe:b8:fa:84:ba:df:e5:70:2d:a5:b1:
         0f:a2:6d:8c:58:4b:58:68:dd:e7:0d:b1:eb:8b:be:c2:69:ed:
         7f:21:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org