Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3232352e3139322e302f31382d3234203d3e203533303036.roa
File:                     3230302e3232352e3139322e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          Y5bh/r3apBX3uuh2VxWSDvtYVHgrW0QThFn0v8nLZ04=
Subject key identifier:   5F:6A:0D:48:5C:73:3B:13:CC:FF:97:E5:9F:B8:E8:87:51:42:AB:37
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       379D04C0AEA31F509856B3F95D3AF21B98028B4C
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3232352e3139322e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:10:22 +0000
ROA not before:           Sat 11 Dec 2021 18:05:22 +0000
ROA not after:            Sat 10 Dec 2022 18:10:22 +0000
asID:                     53006
IP address blocks:        200.225.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9d:04:c0:ae:a3:1f:50:98:56:b3:f9:5d:3a:f2:1b:98:02:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:05:22 2021 GMT
            Not After : Dec 10 18:10:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:0e:f2:17:39:00:11:8a:5b:ec:6d:1c:fa:
                    dc:14:12:e4:cb:0d:a0:42:8b:2e:58:9e:e0:cd:44:
                    b5:6e:5c:a6:52:0e:9d:f1:93:2d:1d:50:d1:6f:15:
                    cb:b8:ca:b0:67:81:fa:11:2c:1e:10:25:eb:f6:be:
                    15:e8:9a:aa:d1:b5:3c:84:0d:b4:4e:fc:5e:6c:be:
                    15:34:3c:30:e9:56:ae:b6:54:21:e4:6b:39:78:92:
                    ac:9b:b4:b1:eb:5c:38:0c:d3:6f:93:6f:2e:39:8a:
                    65:bb:e1:b6:fd:95:aa:77:e0:b3:f7:de:25:22:0d:
                    a7:e1:9c:86:9c:e4:dc:54:63:41:e1:31:74:e6:fa:
                    ad:fc:e5:d9:1c:1f:89:f7:1b:52:46:54:4b:7c:55:
                    bc:ac:3f:4c:ae:a1:f6:27:4b:7b:76:27:e1:60:44:
                    fb:9a:5b:6b:0f:c4:86:44:e6:b5:58:e4:4e:36:bb:
                    11:a2:6f:54:cc:28:2a:81:d9:7f:38:40:81:06:50:
                    50:24:c1:1e:db:f9:21:13:6b:24:77:1a:5d:31:b1:
                    51:56:0d:80:12:8f:cf:4c:39:06:3d:c0:c1:4e:4b:
                    62:0c:71:c6:57:f5:f8:ac:9b:87:c8:e2:a9:54:33:
                    c4:2c:ed:c3:e1:5a:32:3f:c8:29:c5:a0:d7:e9:fd:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6A:0D:48:5C:73:3B:13:CC:FF:97:E5:9F:B8:E8:87:51:42:AB:37
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3232352e3139322e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:28:34:ae:b4:bf:66:8d:c6:47:e9:c7:86:c2:87:3b:a4:
         1f:d1:d2:5a:c7:db:dd:00:92:5a:19:17:70:b6:59:de:98:6d:
         47:1f:5b:c2:a1:ef:3c:0c:8f:45:dd:6a:b1:88:8b:35:e7:98:
         5c:c3:be:e1:7a:0b:bb:e5:d5:96:fd:2e:ff:83:1e:d0:3a:63:
         d5:1f:7f:45:84:60:10:52:a3:43:7a:05:a5:2c:79:20:fc:2e:
         b8:03:da:6b:a9:4d:e3:a6:05:4e:30:6f:51:81:4a:d1:4a:8f:
         e7:b1:48:1c:0f:cb:fa:1a:fd:7a:b2:46:60:e6:50:1b:ac:ef:
         a7:08:62:c8:81:78:6c:2e:e2:18:77:e0:a5:a4:b2:f6:60:a3:
         75:f2:02:e3:6f:b3:8a:44:04:ba:63:8c:2f:4e:df:d1:15:f1:
         60:65:bc:f4:4f:c9:0a:7d:ca:d6:8d:c0:3b:20:9e:9f:50:93:
         21:54:93:96:28:d4:a0:90:78:af:de:fb:96:78:51:09:9e:8b:
         67:8a:0d:9f:b4:c5:52:3a:a9:7f:83:5d:77:d1:39:a6:29:7c:
         45:cc:31:f6:ea:25:92:d0:9b:41:88:eb:27:64:ae:9b:9b:a2:
         e5:60:01:fc:20:23:b3:25:a7:69:03:fe:76:f6:b4:e0:57:17:
         14:db:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org