Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3138372e3137362e302f32302d3234203d3e203533303036.roa
File:                     3230302e3138372e3137362e302f32302d3234203d3e203533303036.roa (raw, json)
Hash identifier:          nZd87yNG09pv27RwPaBV0Uk9u9UJfVsEEqEk7k7le40=
Subject key identifier:   C3:F8:0C:C7:41:8C:88:21:E8:02:83:79:11:23:76:60:91:BC:7B:E9
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       47FB6695E96E2ADB771926EFF9AA7CEDB07A86C6
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3138372e3137362e302f32302d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:12:18 +0000
ROA not before:           Sat 11 Dec 2021 18:07:18 +0000
ROA not after:            Sat 10 Dec 2022 18:12:18 +0000
asID:                     53006
IP address blocks:        200.187.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fb:66:95:e9:6e:2a:db:77:19:26:ef:f9:aa:7c:ed:b0:7a:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:07:18 2021 GMT
            Not After : Dec 10 18:12:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:98:24:e3:73:7e:13:23:ea:2d:85:18:4c:
                    65:9e:c2:95:b5:f9:f9:2b:35:e6:57:64:f0:08:cf:
                    e0:e1:28:01:c1:43:06:cd:47:10:9b:34:d8:e9:41:
                    7a:df:65:6f:73:98:89:ec:46:b9:6a:dd:93:62:fd:
                    f0:42:0b:c3:c9:93:b3:94:a0:27:b8:ca:0b:d3:ad:
                    36:ce:e2:07:93:d9:d6:62:02:23:37:00:16:86:65:
                    4d:76:54:3e:24:76:ba:f7:3c:4e:c3:bd:79:4f:78:
                    74:06:0e:71:df:33:b9:03:13:fd:25:fe:1e:96:aa:
                    7c:e1:73:4d:fe:a4:c3:a2:18:1e:e4:7d:d8:ea:7c:
                    9a:8b:25:d4:bd:6b:92:25:4b:a8:b6:50:c9:51:e1:
                    bb:eb:3c:68:be:18:2e:1b:80:d5:51:c2:b8:2f:2f:
                    fc:09:31:a2:d1:59:33:47:4c:a3:8f:10:04:22:33:
                    3d:43:84:81:f6:22:30:96:7b:7c:19:b6:eb:23:6f:
                    22:f3:09:d1:4c:e5:0c:8c:54:64:d3:f9:89:ef:c8:
                    94:91:dc:aa:b6:20:0a:1c:ce:5f:ee:04:b7:e0:9d:
                    d3:74:a4:ab:40:93:98:7d:5f:77:bd:da:37:a0:dd:
                    09:e3:1e:2f:91:53:91:aa:72:3e:e9:f2:99:01:8c:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:0C:C7:41:8C:88:21:E8:02:83:79:11:23:76:60:91:BC:7B:E9
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3138372e3137362e302f32302d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:15:cd:41:76:1d:07:ab:64:48:99:b9:e9:95:df:f8:3d:
         60:fc:22:94:4f:85:21:62:94:69:40:86:1b:d5:ed:4e:95:53:
         9d:ed:4a:f7:f6:90:aa:e5:4f:f2:42:e2:29:72:d3:98:74:68:
         0b:75:c5:d1:37:63:e6:d7:2f:9c:4c:13:b4:c9:19:c6:04:f0:
         de:e4:31:18:54:41:1a:67:8e:89:0e:8e:16:ce:4c:86:d6:5f:
         5f:ae:e1:6a:f0:88:21:33:09:ff:5a:7d:75:3a:44:4f:22:df:
         25:15:cc:f4:f9:27:f1:2e:48:96:0a:f4:d3:0d:db:b3:f4:19:
         bd:f8:29:5d:50:8e:3e:d3:e3:c9:85:9f:47:8a:6f:85:de:2c:
         27:86:1d:c1:a9:d7:9a:32:ac:53:4e:e0:6e:2b:5e:ef:07:8e:
         57:42:e2:c9:29:5e:0c:e6:6f:24:08:0e:1e:10:09:da:f4:e0:
         0a:07:fd:d5:14:5e:46:a1:41:1e:a8:fb:05:20:3f:21:95:5c:
         c9:69:db:57:fe:9d:80:6d:96:c1:9a:eb:19:fe:74:60:ec:22:
         57:51:f9:eb:88:77:9c:e3:bd:8a:8d:fd:b3:96:c9:8b:b6:68:
         10:42:c2:34:94:dd:09:c7:26:ef:d6:84:a5:ea:d2:0e:9a:a5:
         8b:3b:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org