Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203533303036.roa
File:                     3230312e31362e3139322e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          KRlV2wATfEqBV2C6elGlUOB8N3Y3b1+KVtWqiCC/AWU=
Subject key identifier:   BE:CC:E9:13:03:96:11:70:7B:FF:65:39:21:A4:20:09:B7:55:57:1E
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       3631B402B90A408E28D5D11DBCEC4402D9C41484
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:15:09 +0000
ROA not before:           Sat 11 Dec 2021 18:10:09 +0000
ROA not after:            Sat 10 Dec 2022 18:15:09 +0000
asID:                     53006
IP address blocks:        201.16.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:31:b4:02:b9:0a:40:8e:28:d5:d1:1d:bc:ec:44:02:d9:c4:14:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:10:09 2021 GMT
            Not After : Dec 10 18:15:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:e0:28:cb:58:b5:e9:6c:9d:02:d6:8b:60:
                    d7:11:b5:34:cf:01:b5:b6:0a:82:0f:a6:8b:6f:a5:
                    e9:c8:5b:3e:f8:90:2a:4a:46:7d:b8:6a:f0:49:c6:
                    0d:28:d1:5c:2c:aa:22:7e:f0:23:b1:5f:42:5a:78:
                    e5:0d:bc:ce:fd:16:82:d5:21:fb:7e:8b:e7:19:2b:
                    b9:b0:14:4b:0e:25:08:0f:a0:8e:5a:34:75:d4:5a:
                    f7:74:d0:f8:08:98:40:fd:e8:49:2f:9d:95:6e:66:
                    b8:6e:03:97:ef:4a:b7:12:1a:aa:54:74:e4:d7:5a:
                    36:a3:0c:e4:88:b4:c1:fc:95:ec:10:28:e6:cb:2f:
                    7f:0f:c9:7c:ae:28:dc:be:6e:7b:4f:ff:fb:be:21:
                    2e:c1:da:4d:da:6f:e5:11:e8:db:36:09:23:04:c4:
                    31:d4:76:86:ea:a4:b4:a8:f7:49:ee:2c:47:ec:ce:
                    d4:30:f9:37:52:94:ae:85:1e:a8:5c:1d:0d:4f:e0:
                    fc:7b:d6:87:c6:fd:c9:e7:ce:3d:58:d6:9a:91:0d:
                    b4:a5:31:d7:13:a3:8d:01:c6:7a:ca:10:ac:62:2d:
                    a6:ca:85:1b:36:17:09:5a:8e:b1:e8:c3:1a:93:54:
                    1c:37:15:a3:81:52:a9:c3:ba:29:a7:b3:92:85:d2:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:E9:13:03:96:11:70:7B:FF:65:39:21:A4:20:09:B7:55:57:1E
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3139322e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:6c:6f:34:34:20:1d:30:76:e5:d2:95:4b:fb:6c:6b:61:
         38:85:fb:b2:35:47:34:5c:96:cc:aa:f6:19:90:9e:4f:25:01:
         1b:71:6d:e6:8c:df:90:ad:b4:17:23:7a:a8:c5:86:09:17:26:
         2c:de:2d:bb:34:f0:11:3b:13:3a:c9:3d:b9:cf:82:fd:67:06:
         62:6b:c3:94:73:95:1a:b5:5b:7b:51:27:81:2e:1c:d4:ee:4d:
         c9:fe:bc:6d:92:b5:62:e8:4c:51:b8:c8:1e:d1:ed:0c:9a:a6:
         f9:6b:8d:cf:a3:73:a7:6b:f1:97:63:ab:df:7c:6f:8d:db:15:
         92:fb:72:b2:b4:e7:58:c7:40:9a:1e:cf:02:01:a2:b3:da:23:
         81:13:2f:ce:4f:ee:32:3d:63:dc:c6:1a:60:24:f3:b3:e9:32:
         f7:04:3f:79:62:4f:c1:d1:b3:07:a7:5f:00:1c:8a:49:e4:02:
         b3:87:ba:34:57:93:9b:df:ea:28:a3:bf:7c:4b:03:8c:1e:0f:
         c3:74:71:d7:20:7a:51:ad:a2:ed:97:ae:f3:5b:9b:a1:56:b5:
         17:00:63:4a:27:59:d4:38:e6:ec:05:a7:6c:69:bf:d0:35:cb:
         9a:c8:23:f2:e4:54:f6:88:aa:f8:91:73:e2:a7:7b:71:41:f6:
         fa:ef:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:11 2025 by rpki-client