Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203136373335.roa
File:                     3230312e31362e3139322e302f31382d3234203d3e203136373335.roa (raw, json)
Hash identifier:          KJ9amM3Ty/rzwboMEw/zZweKhQp0Whq0PS4A+UsaMig=
Subject key identifier:   51:25:E6:0F:0E:FA:16:1E:F5:6B:ED:55:26:00:74:0D:4C:D0:A6:5F
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       7CDD71294AF9517A87ABCD88CA27CEE3B9DCDF28
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:14:56 +0000
ROA not before:           Sat 11 Dec 2021 18:09:56 +0000
ROA not after:            Sat 10 Dec 2022 18:14:56 +0000
asID:                     16735
IP address blocks:        201.16.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dd:71:29:4a:f9:51:7a:87:ab:cd:88:ca:27:ce:e3:b9:dc:df:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:09:56 2021 GMT
            Not After : Dec 10 18:14:56 2022 GMT
        Subject: CN=3082010A0282010100C254FB29066CED64E9891D97804BF6B85AF02ED6F22BFE399A7BD4BC4CFCF046DA63BCF9EFAC5FDCA564CD2AE2CB352EA099207C2EF3953A6ECD69744CD4E3E68C0E0E618761675225916B69F91141B70417A9C69927D7DC0CA90B963752DA7A0C913D4A99A1B3F65C0C2A3F3E50C8D738A8FCA91D3E6E47A4B0A0045B812A6508E1803D70207643919FAE4DE53F111F91590D922BB33B31B300E6B7B2FED260B489534131F9356B220D27B7BAC8F80FB87E3BF8A5CBF18CC1545F1857C2375ABECD2C01105AA99A172CCCC63034A35AE8F1C0286FFF201A93C4421B204E31F765E4EF3463E5EB8715AA7A8098059E1A8547552A53B4F95B699CEF57418D3D210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:fb:29:06:6c:ed:64:e9:89:1d:97:80:4b:
                    f6:b8:5a:f0:2e:d6:f2:2b:fe:39:9a:7b:d4:bc:4c:
                    fc:f0:46:da:63:bc:f9:ef:ac:5f:dc:a5:64:cd:2a:
                    e2:cb:35:2e:a0:99:20:7c:2e:f3:95:3a:6e:cd:69:
                    74:4c:d4:e3:e6:8c:0e:0e:61:87:61:67:52:25:91:
                    6b:69:f9:11:41:b7:04:17:a9:c6:99:27:d7:dc:0c:
                    a9:0b:96:37:52:da:7a:0c:91:3d:4a:99:a1:b3:f6:
                    5c:0c:2a:3f:3e:50:c8:d7:38:a8:fc:a9:1d:3e:6e:
                    47:a4:b0:a0:04:5b:81:2a:65:08:e1:80:3d:70:20:
                    76:43:91:9f:ae:4d:e5:3f:11:1f:91:59:0d:92:2b:
                    b3:3b:31:b3:00:e6:b7:b2:fe:d2:60:b4:89:53:41:
                    31:f9:35:6b:22:0d:27:b7:ba:c8:f8:0f:b8:7e:3b:
                    f8:a5:cb:f1:8c:c1:54:5f:18:57:c2:37:5a:be:cd:
                    2c:01:10:5a:a9:9a:17:2c:cc:c6:30:34:a3:5a:e8:
                    f1:c0:28:6f:ff:20:1a:93:c4:42:1b:20:4e:31:f7:
                    65:e4:ef:34:63:e5:eb:87:15:aa:7a:80:98:05:9e:
                    1a:85:47:55:2a:53:b4:f9:5b:69:9c:ef:57:41:8d:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:25:E6:0F:0E:FA:16:1E:F5:6B:ED:55:26:00:74:0D:4C:D0:A6:5F
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:af:46:b4:3d:a2:f4:8c:2f:cc:cf:b2:b1:d2:a4:c4:40:
         e3:e9:b4:34:15:43:39:1c:c2:0c:3a:2c:b4:7b:7d:ea:09:2b:
         6e:67:81:b5:3a:ef:68:45:68:3d:f1:86:31:33:9e:60:bd:3d:
         21:aa:f6:49:14:7b:84:29:f6:49:aa:80:93:2c:f0:61:8b:d2:
         62:52:0d:18:97:1f:7b:45:c9:e6:71:e5:98:d7:a6:d5:39:a9:
         b5:7b:5d:a2:b9:28:b5:a0:74:b6:73:4a:5b:0b:29:54:1e:aa:
         d4:c7:01:21:cd:c7:49:89:3e:ab:7f:7c:91:0f:38:4c:66:85:
         e4:9c:6d:b3:41:50:8b:be:a2:c2:04:d1:71:27:0b:9c:2c:4d:
         b0:f1:0b:2d:3e:e0:7b:e8:6a:eb:75:e6:6e:c2:00:d9:7e:61:
         15:ff:66:ea:04:cd:45:df:4b:c7:4d:92:3c:f2:e4:31:65:5e:
         ec:2a:2c:3a:90:6a:7d:c2:61:4e:e9:18:94:d1:81:d9:af:5e:
         80:06:43:30:99:e2:79:61:5d:2b:ca:1b:9a:a4:10:d2:a3:01:
         9e:54:d4:dd:98:35:a9:a5:65:b6:c0:01:f5:d1:d7:ef:7c:1a:
         e5:8d:9a:4b:17:b7:e1:75:f9:5a:a1:e0:14:e4:8d:9f:0d:14:
         6f:ac:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org