Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3136302e3131322e302f32302d3234203d3e203136373335.roa
File:                     3230302e3136302e3131322e302f32302d3234203d3e203136373335.roa (raw, json)
Hash identifier:          O8eu1hd+cNjJwUT28qBzSQMbYrfCkPTfpDONpNkn3j0=
Subject key identifier:   F7:8B:51:59:5D:BE:F2:F3:D0:76:9A:05:07:9B:1D:DA:55:05:0D:C7
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       3C9B3E6FC6C7366192466004826A7E77272E352C
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3136302e3131322e302f32302d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:13:09 +0000
ROA not before:           Sat 11 Dec 2021 18:08:09 +0000
ROA not after:            Sat 10 Dec 2022 18:13:09 +0000
asID:                     16735
IP address blocks:        200.160.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9b:3e:6f:c6:c7:36:61:92:46:60:04:82:6a:7e:77:27:2e:35:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:08:09 2021 GMT
            Not After : Dec 10 18:13:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:ae:14:5d:b3:14:15:16:28:93:9d:d4:26:
                    7d:54:92:f1:f4:7b:82:66:68:c4:bb:ac:80:3c:69:
                    51:81:91:6e:2b:fe:3d:bc:18:6f:be:e5:83:6a:01:
                    3c:44:f6:75:bf:9c:fc:16:36:ef:10:1f:e5:74:66:
                    30:4b:48:c9:61:86:ef:fd:78:17:d6:26:4e:42:79:
                    24:60:67:d0:b8:26:2d:c2:d6:9e:d1:c0:dc:34:94:
                    c4:da:ab:cc:f4:b2:8b:db:0c:55:ff:30:55:fe:ce:
                    ed:b4:e8:37:07:a3:cc:bb:15:2d:cf:79:c1:8e:a4:
                    e6:77:2e:16:6f:86:5e:93:8b:70:ca:a5:e7:24:d4:
                    96:02:28:c8:61:a1:4f:5a:12:75:2f:b8:e2:e0:b5:
                    46:07:3a:cd:e6:2b:ae:73:1b:bb:9c:03:fb:26:fe:
                    a8:bb:a9:33:d7:82:01:fc:0f:79:b5:56:61:9f:16:
                    be:62:a0:14:06:33:04:48:32:f4:f8:03:2b:58:e6:
                    35:54:34:1c:14:6f:50:d9:e6:90:64:ae:72:fa:ab:
                    37:39:b2:ef:4f:34:6d:2b:f2:8d:cb:a9:66:e9:07:
                    b3:bb:4a:b4:eb:f1:4f:29:ff:3e:66:37:34:83:d5:
                    cb:72:0d:c4:8c:bf:33:fc:56:44:99:d8:0c:4e:21:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:51:59:5D:BE:F2:F3:D0:76:9A:05:07:9B:1D:DA:55:05:0D:C7
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3136302e3131322e302f32302d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:f4:ba:7e:fc:71:06:6d:23:a6:3c:af:68:8c:fd:b9:f7:
         ab:9c:e0:43:54:3c:d5:10:56:ee:2f:b0:68:7b:04:4b:2e:ba:
         d4:ec:6b:35:3f:76:45:4f:c0:a4:5f:2c:b2:27:7b:d7:55:29:
         e5:58:36:79:d1:46:b9:73:6d:2e:c8:71:bc:03:7b:d0:6e:94:
         d5:70:95:d0:a5:ea:5c:d1:af:c6:5e:ee:ef:b1:a0:4d:66:6c:
         d6:eb:dd:24:04:11:d0:67:4a:d5:2f:5f:d5:47:af:dc:72:28:
         94:7c:84:00:92:51:c3:f8:fd:74:03:b3:bd:0d:a6:d4:6f:87:
         f1:3e:4f:e8:c9:14:b4:dd:25:7f:cf:e8:df:56:6e:33:22:be:
         41:57:f3:3c:77:22:0d:f4:36:23:7b:a5:59:40:c8:6a:3c:4c:
         65:27:c9:e0:40:cd:cb:7a:08:2c:83:c9:77:3e:21:e0:6c:07:
         5b:5f:bc:9f:22:9a:21:bf:76:d3:6e:21:81:1a:ff:9d:23:54:
         5d:7e:d3:cc:69:0b:9a:4d:46:10:cf:df:4e:54:d2:99:99:e0:
         a5:38:4f:d0:0d:38:05:a9:4f:56:3b:d2:83:90:ba:55:b0:da:
         bc:4e:34:ad:e4:34:8b:60:7f:99:90:00:f8:40:3d:1d:26:ce:
         b5:96:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org