Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203136373335.roa
File:                     323030313a313239313a3a2f33322d3332203d3e203136373335.roa (raw, json)
Hash identifier:          aWvJswpZyhkmsaS3a0Hu3f72zAGR05M3wly3Oow+zIY=
Subject key identifier:   08:81:86:DA:7C:F1:39:1D:78:92:57:61:E1:FF:5D:35:0C:60:0C:37
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2CD4C27EC918A53E8503B237972EEB48661658CB
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:08:20 +0000
ROA not before:           Sat 11 Dec 2021 18:03:20 +0000
ROA not after:            Sat 10 Dec 2022 18:08:20 +0000
asID:                     16735
IP address blocks:        2001:1291::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d4:c2:7e:c9:18:a5:3e:85:03:b2:37:97:2e:eb:48:66:16:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:03:20 2021 GMT
            Not After : Dec 10 18:08:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:95:3c:bc:7b:03:df:a3:e2:9d:58:ba:85:
                    f6:93:41:51:0e:82:15:61:5f:7c:37:3b:c0:93:93:
                    93:5d:11:14:ed:b8:f7:33:2c:b4:4e:d6:ee:b9:c3:
                    15:67:07:91:8c:48:38:f1:34:8b:b5:4d:72:58:fd:
                    0e:b1:29:19:cc:60:2b:28:d5:be:48:d7:93:b3:1a:
                    c4:66:4d:81:60:6b:71:e0:b0:f9:9b:75:c0:b0:f0:
                    44:62:2f:fa:fb:26:d2:b4:7f:2c:c0:71:aa:78:b5:
                    fb:0b:01:7b:03:1c:4b:54:be:dc:08:f5:0c:fc:99:
                    21:ec:21:a3:37:56:bf:d4:a9:9c:b1:c5:3c:0a:cc:
                    50:f1:c4:46:3f:af:fb:3f:66:90:31:fc:e1:33:3c:
                    36:03:01:fe:0d:2b:38:04:5d:1e:88:f2:a2:0f:c5:
                    83:56:f5:64:1a:c7:b3:c5:65:26:13:c6:4e:79:68:
                    31:fb:14:87:eb:e5:cd:3a:bb:a1:02:84:b9:28:e2:
                    de:94:1d:d2:65:f2:da:7f:4b:d5:1b:5c:df:96:0f:
                    cf:52:27:47:17:51:ee:81:a7:c3:5d:d5:23:cc:8d:
                    6f:eb:e9:8d:31:50:61:e8:48:cd:7b:df:be:cc:90:
                    95:25:1c:ee:f8:2b:b0:0c:62:15:be:1a:62:ab:2b:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:81:86:DA:7C:F1:39:1D:78:92:57:61:E1:FF:5D:35:0C:60:0C:37
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323030313a313239313a3a2f33322d3332203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1291::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:f5:37:5e:60:8f:b4:ff:1b:d6:5a:9d:55:cf:60:54:5a:
         48:32:eb:6a:be:47:2e:66:b2:f2:49:e2:d3:f7:20:04:9d:23:
         0c:ac:c0:41:44:95:e7:fc:b8:d3:43:17:cc:f3:a7:1e:d7:66:
         fb:5a:85:63:38:6d:d1:04:d4:3f:48:19:8f:09:e0:21:62:38:
         14:97:2c:c0:f4:ef:6e:2a:b8:14:c9:52:ff:eb:19:66:1e:00:
         f0:c7:e3:da:a9:95:87:61:45:d2:a0:38:6b:3e:6c:b3:5a:d0:
         b2:67:3d:23:af:08:36:06:17:fd:07:03:bf:fd:b5:84:b3:52:
         14:d1:09:81:ab:8a:e4:74:3b:9a:a4:0d:a1:c2:03:c5:72:bf:
         8b:ca:fd:68:ad:81:17:dc:04:e7:10:12:57:c7:34:50:3d:ca:
         59:b6:6d:09:5f:6a:3d:9c:bf:54:f1:75:ce:27:cb:a2:60:fc:
         60:7c:38:a3:12:2a:b6:3f:dc:8d:4e:41:66:d5:ea:55:b0:d5:
         0a:8f:0b:ed:26:c0:bd:5c:83:36:d9:3a:b8:9a:d9:53:a6:4a:
         62:ee:45:8d:70:18:35:6d:9a:4c:24:d6:03:77:2b:72:81:68:
         ff:84:d5:af:96:41:86:fb:31:4a:10:81:98:17:1d:af:a5:4d:
         79:af:a9:36
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIULNTCfskYpT6FA7I3ly7rSGYWWMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODAzMjBaFw0yMjEyMTAxODA4MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI0MDk1M0NCQzdCMDNERkEz
RTI5RDU4QkE4NUY2OTM0MTUxMEU4MjE1NjE1RjdDMzczQkMwOTM5MzkzNUQxMTE0
RURCOEY3MzMyQ0I0NEVENkVFQjlDMzE1NjcwNzkxOEM0ODM4RjEzNDhCQjU0RDcy
NThGRDBFQjEyOTE5Q0M2MDJCMjhENUJFNDhENzkzQjMxQUM0NjY0RDgxNjA2Qjcx
RTBCMEY5OUI3NUMwQjBGMDQ0NjIyRkZBRkIyNkQyQjQ3RjJDQzA3MUFBNzhCNUZC
MEIwMTdCMDMxQzRCNTRCRURDMDhGNTBDRkM5OTIxRUMyMUEzMzc1NkJGRDRBOTlD
QjFDNTNDMEFDQzUwRjFDNDQ2M0ZBRkZCM0Y2NjkwMzFGQ0UxMzMzQzM2MDMwMUZF
MEQyQjM4MDQ1RDFFODhGMkEyMEZDNTgzNTZGNTY0MUFDN0IzQzU2NTI2MTNDNjRF
Nzk2ODMxRkIxNDg3RUJFNUNEM0FCQkExMDI4NEI5MjhFMkRFOTQxREQyNjVGMkRB
N0Y0QkQ1MUI1Q0RGOTYwRkNGNTIyNzQ3MTc1MUVFODFBN0MzNURENTIzQ0M4RDZG
RUJFOThEMzE1MDYxRTg0OENEN0JERkJFQ0M5MDk1MjUxQ0VFRjgyQkIwMEM2MjE1
QkUxQTYyQUIyQjMyQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAskCVPLx7A9+j4p1YuoX2k0FRDoIVYV98NzvAk5OTXREU7bj3Myy0
TtbuucMVZweRjEg48TSLtU1yWP0OsSkZzGArKNW+SNeTsxrEZk2BYGtx4LD5m3XA
sPBEYi/6+ybStH8swHGqeLX7CwF7AxxLVL7cCPUM/Jkh7CGjN1a/1KmcscU8CsxQ
8cRGP6/7P2aQMfzhMzw2AwH+DSs4BF0eiPKiD8WDVvVkGsezxWUmE8ZOeWgx+xSH
6+XNOruhAoS5KOLelB3SZfLaf0vVG1zflg/PUidHF1HugafDXdUjzI1v6+mNMVBh
6EjNe9++zJCVJRzu+CuwDGIVvhpiqysyuwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FAiBhtp88TkdeJJXYeH/XTUMYAw3MB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMyMzAzMDMxM2EzMTMyMzkzMTNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzYzNzMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARKR
MA0GCSqGSIb3DQEBCwUAA4IBAQA//vU3XmCPtP8b1lqdVc9gVFpIMutqvkcuZrLy
SeLT9yAEnSMMrMBBRJXn/LjTQxfM86ce12b7WoVjOG3RBNQ/SBmPCeAhYjgUlyzA
9O9uKrgUyVL/6xlmHgDwx+PaqZWHYUXSoDhrPmyzWtCyZz0jrwg2Bhf9BwO//bWE
s1IU0QmBq4rkdDuapA2hwgPFcr+Lyv1orYEX3ATnEBJXxzRQPcpZtm0JX2o9nL9U
8XXOJ8uiYPxgfDijEiq2P9yNTkFm1epVsNUKjwvtJsC9XIM22Tq4mtlTpkpi7kWN
cBg1bZpMJNYDdytygWj/hNWvlkGG+zFKEIGYFx2vpU15r6k2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org