Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3132382e302f31382d3234203d3e203533303036.roa
File:                     3230312e31362e3132382e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          IiLnwOifNRS4aMZP01Oh4MDwCcZBZhYlbCrbKMaa2z8=
Subject key identifier:   D4:E0:68:FD:B9:74:F7:29:BB:E8:EB:EB:07:4C:04:D9:E4:A2:0F:91
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       536FF72F11558F83F010FF0CDDCBC9ABD4160B7F
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3132382e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:14:36 +0000
ROA not before:           Sat 11 Dec 2021 18:09:36 +0000
ROA not after:            Sat 10 Dec 2022 18:14:36 +0000
asID:                     53006
IP address blocks:        201.16.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6f:f7:2f:11:55:8f:83:f0:10:ff:0c:dd:cb:c9:ab:d4:16:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:09:36 2021 GMT
            Not After : Dec 10 18:14:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:ea:46:3f:c6:f2:e7:15:40:ea:4c:c2:53:
                    30:e4:a2:fb:d1:7a:9c:bd:91:35:62:24:2d:f0:37:
                    9b:ff:5b:11:ac:66:ac:c5:10:90:16:a7:d3:7d:0e:
                    95:8f:34:7c:93:f4:64:99:40:5c:da:e3:71:3b:56:
                    64:03:d4:68:82:db:ed:e6:57:11:fa:2f:7b:61:98:
                    d0:9b:48:be:38:72:1d:fd:65:c1:e7:d9:5d:a3:1a:
                    6b:a5:dd:97:79:9c:fe:0c:71:52:55:d7:73:34:55:
                    22:e1:c1:59:09:5e:f5:98:c0:71:b0:90:aa:1d:aa:
                    04:45:b0:dc:6c:94:1f:31:15:38:6c:6e:67:9f:5b:
                    90:0b:c3:a6:f5:56:0f:72:ad:80:30:23:3e:ef:2b:
                    58:21:b7:9c:ac:86:4c:c5:d4:fc:8d:e6:38:d6:62:
                    74:91:5c:c3:ce:23:7c:9c:54:cc:f0:15:cf:ca:27:
                    b9:43:43:59:e1:9c:5f:1c:56:a5:6f:ec:24:9b:4d:
                    c3:0a:66:18:a0:d6:83:76:30:12:da:7b:8d:0e:cb:
                    af:e5:11:7e:cc:ca:36:51:41:35:a9:6a:2c:ac:4c:
                    a1:d2:24:b1:89:ad:07:64:31:3a:b7:17:a0:ae:3d:
                    cd:8b:66:5b:20:a1:b2:a9:51:41:df:43:21:b5:eb:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:68:FD:B9:74:F7:29:BB:E8:EB:EB:07:4C:04:D9:E4:A2:0F:91
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3132382e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:34:d5:57:f4:2b:ae:f1:35:b9:83:2b:fb:f2:de:8f:07:
         75:29:59:ca:a0:09:36:c3:94:b1:e7:14:c9:90:52:cf:42:66:
         7a:5e:57:66:8c:38:3a:d1:de:11:3f:b5:1a:4c:7f:66:39:e0:
         f5:dc:28:be:cc:ff:83:07:7b:12:29:d3:51:54:81:0c:7b:9a:
         eb:87:29:09:57:0d:c9:9f:ed:2d:31:7a:c4:ee:11:03:20:3f:
         fb:e2:35:09:b0:c4:9c:e3:9b:8b:32:8b:25:13:95:6d:0f:6c:
         eb:21:fb:af:30:8d:ed:e3:6f:3b:68:30:3f:33:b1:83:f9:94:
         59:6e:95:ea:f2:82:68:5b:41:48:80:f3:f8:bb:c4:37:0c:d7:
         1e:f3:3c:c3:5b:2a:ed:4b:d8:37:74:2a:98:16:ca:7b:16:bf:
         c4:a8:e0:7a:bc:f3:71:68:1f:2d:7b:4b:13:88:c2:13:7d:a0:
         18:ba:0f:f6:2a:16:ca:db:2d:a0:0e:9b:64:fa:76:50:c7:ce:
         ab:5c:fe:44:ce:ff:de:45:60:14:61:58:c0:f5:0b:7e:c6:e6:
         2f:ec:ea:65:bb:51:a5:23:5d:69:7c:2d:ea:02:df:fa:9e:e3:
         af:fc:95:c3:5f:76:1d:1b:ed:da:54:8c:3d:b9:f2:39:3c:5e:
         ae:49:1b:a2
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUU2/3LxFVj4PwEP8M3cvJq9QWC38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RDEwN0VGRDA1MzJCQzRFMjNFNjY3QUJBMTE4ODE3
QTY2MzY1NDAeFw0yMTEyMTExODA5MzZaFw0yMjEyMTAxODE0MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkRDNkVBNDYzRkM2RjJFNzE1
NDBFQTRDQzI1MzMwRTRBMkZCRDE3QTlDQkQ5MTM1NjIyNDJERjAzNzlCRkY1QjEx
QUM2NkFDQzUxMDkwMTZBN0QzN0QwRTk1OEYzNDdDOTNGNDY0OTk0MDVDREFFMzcx
M0I1NjY0MDNENDY4ODJEQkVERTY1NzExRkEyRjdCNjE5OEQwOUI0OEJFMzg3MjFE
RkQ2NUMxRTdEOTVEQTMxQTZCQTVERDk3Nzk5Q0ZFMEM3MTUyNTVENzczMzQ1NTIy
RTFDMTU5MDk1RUY1OThDMDcxQjA5MEFBMURBQTA0NDVCMERDNkM5NDFGMzExNTM4
NkM2RTY3OUY1QjkwMEJDM0E2RjU1NjBGNzJBRDgwMzAyMzNFRUYyQjU4MjFCNzlD
QUM4NjRDQzVENEZDOERFNjM4RDY2Mjc0OTE1Q0MzQ0UyMzdDOUM1NENDRjAxNUNG
Q0EyN0I5NDM0MzU5RTE5QzVGMUM1NkE1NkZFQzI0OUI0REMzMEE2NjE4QTBENjgz
NzYzMDEyREE3QjhEMEVDQkFGRTUxMTdFQ0NDQTM2NTE0MTM1QTk2QTJDQUM0Q0Ex
RDIyNEIxODlBRDA3NjQzMTNBQjcxN0EwQUUzRENEOEI2NjVCMjBBMUIyQTk1MTQx
REY0MzIxQjVFQjBBOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvcbqRj/G8ucVQOpMwlMw5KL70XqcvZE1YiQt8Deb/1sRrGasxRCQ
FqfTfQ6VjzR8k/RkmUBc2uNxO1ZkA9Rogtvt5lcR+i97YZjQm0i+OHId/WXB59ld
oxprpd2XeZz+DHFSVddzNFUi4cFZCV71mMBxsJCqHaoERbDcbJQfMRU4bG5nn1uQ
C8Om9VYPcq2AMCM+7ytYIbecrIZMxdT8jeY41mJ0kVzDziN8nFTM8BXPyie5Q0NZ
4ZxfHFalb+wkm03DCmYYoNaDdjAS2nuNDsuv5RF+zMo2UUE1qWosrEyh0iSxia0H
ZDE6txegrj3Ni2ZbIKGyqVFB30MhtesKnwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNTgaP25dPcpu+jr6wdMBNnkog+RMB8GA1UdIwQYMBaAFLR9EH79BTK8TiPmZ6uh
GIF6ZjZUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZkRFFiNmVwaDlUV3Rn
S3dXRGdrTVcxeFhZRkNHc01Xd3hpYnp0R3pxbUY4LzAvQjQ3RDEwN0VGRDA1MzJC
QzRFMjNFNjY3QUJBMTE4ODE3QTY2MzY1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNDdEMTA3RUZEMDUzMkJDNEUyM0U2NjdBQkExMTg4MTdBNjYz
NjU0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GZERRYjZlcGg5VFd0Z0t3V0Rn
a01XMXhYWUZDR3NNV3d4aWJ6dEd6cW1GOC8wLzMyMzAzMTJlMzEzNjJlMzEzMjM4
MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzUzMzMwMzAzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBskQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAZp401Vf0K67xNbmDK/vy3o8HdSlZyqAJNsOU
secUyZBSz0Jmel5XZow4OtHeET+1Gkx/Zjng9dwovsz/gwd7EinTUVSBDHua64cp
CVcNyZ/tLTF6xO4RAyA/++I1CbDEnOObizKLJROVbQ9s6yH7rzCN7eNvO2gwPzOx
g/mUWW6V6vKCaFtBSIDz+LvENwzXHvM8w1sq7UvYN3QqmBbKexa/xKjgerzzcWgf
LXtLE4jCE32gGLoP9ioWytstoA6bZPp2UMfOq1z+RM7/3kVgFGFYwPULfsbmL+zq
ZbtRpSNdaXwt6gLf+p7jr/yVw192HRvt2lSMPbnyOTxerkkbog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org