Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203533303036.roa
File:                     3230312e34382e3132382e302f31372d3234203d3e203533303036.roa (raw, json)
Hash identifier:          FOTsYzU++n5R8ntUpxIPhToROymuzqACkDfx71LyRuo=
Subject key identifier:   6B:41:B9:FB:F5:4C:BF:5D:AC:69:AE:E7:D3:D5:1E:09:28:57:68:8D
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       6C0B0485C71861353F787BFE3C034A69957D8B1D
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:16:02 +0000
ROA not before:           Sat 11 Dec 2021 18:11:02 +0000
ROA not after:            Sat 10 Dec 2022 18:16:02 +0000
asID:                     53006
IP address blocks:        201.48.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0b:04:85:c7:18:61:35:3f:78:7b:fe:3c:03:4a:69:95:7d:8b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:11:02 2021 GMT
            Not After : Dec 10 18:16:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:be:b9:63:66:b2:64:37:7c:e5:b1:a3:24:
                    25:c8:12:27:c3:b2:24:49:3c:cc:b1:b6:1a:ea:88:
                    ce:4d:d0:9b:73:10:0a:07:3a:16:f0:f2:62:96:41:
                    6f:aa:cb:d1:a5:39:49:83:0a:05:28:3e:c7:96:4a:
                    c3:25:57:eb:b1:36:8d:e5:ac:71:55:83:c1:20:b0:
                    15:d3:c1:af:8e:ea:d6:33:0c:a9:d0:ff:a2:68:e5:
                    41:19:a1:67:da:a7:72:a4:62:54:8f:76:b5:0e:9c:
                    50:7b:5c:0d:72:87:9a:ef:bb:e3:95:47:26:fa:a8:
                    03:ec:9d:b3:fe:4c:ee:8d:e9:aa:ce:bd:9d:d7:9d:
                    84:55:89:05:7e:2d:2b:7f:bc:08:26:f6:c4:2f:aa:
                    dc:99:ad:fb:56:bd:53:52:e9:71:08:2f:e2:78:35:
                    ec:36:b5:ab:81:bd:1c:2a:5e:1a:8f:df:a0:3a:98:
                    30:a8:31:a7:23:ba:5d:4d:e3:8a:92:a9:8d:a7:09:
                    92:e1:9f:ac:62:b4:c3:c9:33:43:ff:e4:f8:1a:27:
                    72:6d:90:77:b2:fd:0b:97:51:61:44:7f:14:30:d2:
                    2e:a0:9a:65:f5:3d:47:c1:ed:5f:28:e6:fe:91:5b:
                    7c:d4:2f:b6:e0:6d:f9:09:c5:b6:22:0e:e5:42:12:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:41:B9:FB:F5:4C:BF:5D:AC:69:AE:E7:D3:D5:1E:09:28:57:68:8D
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e34382e3132382e302f31372d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.48.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:23:50:47:8b:c5:92:bb:a3:dc:e5:e3:3b:d7:54:3f:cc:
         be:35:4c:67:ae:fd:31:c3:a9:36:c4:e5:ec:de:04:ad:20:d0:
         43:98:e0:32:44:21:b8:5b:9b:f5:a3:01:ae:c7:f2:08:16:a4:
         50:df:56:03:95:b3:2e:bf:87:a4:c4:f6:ed:ef:98:c8:1f:f5:
         3e:42:8f:59:55:4e:a1:dc:95:6d:bf:bc:c6:68:26:1e:97:25:
         68:96:e9:ef:fa:b9:6a:84:d8:c6:15:ae:33:64:43:d7:d7:0b:
         fc:20:83:59:59:fb:c1:47:6e:d5:60:c5:7d:53:62:17:1a:bc:
         9f:2a:79:a3:5e:7e:b2:d9:0d:5a:4b:8b:bf:ef:45:f6:8e:8e:
         7e:8b:3a:5f:dc:97:89:a4:41:57:9c:5d:ba:42:d5:25:8f:49:
         3c:fa:3d:0f:86:f5:de:0d:28:a6:cf:7d:91:15:6d:df:88:8a:
         de:57:fe:48:39:b6:36:f0:bc:87:4f:56:ac:84:a8:fa:88:fc:
         02:36:47:2d:a6:d2:34:e1:0d:ca:f1:58:47:b2:b5:d5:b2:1e:
         fb:49:3c:b1:a6:a9:9a:75:a0:67:69:a5:3f:eb:24:58:28:11:
         7b:8f:f4:8a:f8:e8:50:e2:4d:3b:c9:f3:88:58:2d:fa:ba:23:
         90:b2:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org