Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234312e302f32342d3234203d3e20323633303733.roa
File:                     3133382e3231392e3234312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          OdYzCvhT8RAi0rKyxkGQUZXrvk6SKCu+dIs8cTaFNLQ=
Subject key identifier:   EB:13:72:7C:D7:8E:D1:2A:23:24:7A:00:CC:A7:56:C4:FB:2E:43:DC
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       78DA86D8DB22F9E767EE5148596DD18A8C6802C1
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234312e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:04 +0000
ROA not before:           Fri 22 Dec 2023 20:20:04 +0000
ROA not after:            Fri 20 Dec 2024 20:25:04 +0000
asID:                     263073
IP address blocks:        138.219.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:da:86:d8:db:22:f9:e7:67:ee:51:48:59:6d:d1:8a:8c:68:02:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:04 2023 GMT
            Not After : Dec 20 20:25:04 2024 GMT
        Subject: CN=EB13727CD78ED12A23247A00CCA756C4FB2E43DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:f7:65:88:59:07:ed:d8:8c:10:fa:e2:e5:
                    c7:e7:08:f8:97:0b:ee:5c:4c:bd:1e:ae:20:75:7a:
                    21:66:ad:1f:60:43:95:73:9a:55:21:c6:26:c1:58:
                    10:33:7e:9e:39:77:68:c7:8d:38:f4:29:52:17:b4:
                    92:b9:c6:51:ae:50:0b:7c:e7:91:7a:e1:40:c8:30:
                    38:51:eb:24:0c:fa:40:9b:d4:84:3c:1e:aa:d8:51:
                    9c:0f:22:b2:8e:60:83:e6:c1:fd:6b:b8:6b:3f:f1:
                    8a:65:aa:37:b7:c4:e9:37:47:28:4a:27:70:a2:ec:
                    97:63:bd:b4:4d:fc:7e:c0:d7:95:3f:52:3e:b9:db:
                    2d:31:a9:5d:a9:3b:6f:0c:7d:d2:40:db:b5:e8:9c:
                    0d:c2:c4:51:d8:65:6e:29:79:4e:30:7c:0d:fd:cd:
                    5c:67:9e:f4:e8:76:9c:92:88:f5:af:26:60:b5:0a:
                    ba:4e:2b:ae:e0:09:77:ed:8b:46:25:d0:28:d1:46:
                    50:b0:8b:77:96:93:dc:11:33:d1:c7:90:eb:dc:cc:
                    71:45:a6:31:5f:f9:9e:74:6e:31:8a:54:00:1f:fb:
                    34:e7:c6:a6:b4:8a:96:e1:88:a7:71:6b:11:fa:f5:
                    14:c7:d1:2c:82:5c:b9:7a:bc:88:04:cd:80:3b:bb:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:72:7C:D7:8E:D1:2A:23:24:7A:00:CC:A7:56:C4:FB:2E:43:DC
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:24:6b:97:0e:af:8d:3b:34:85:c3:63:0b:f7:d7:87:98:
         cb:2d:0f:a7:02:9b:f3:12:18:39:2a:e2:c9:c5:75:db:7f:b2:
         ac:9f:d0:aa:21:91:2c:ae:b1:d2:94:86:7c:54:bb:95:dd:56:
         1b:16:de:1b:6b:e0:b8:d8:24:1c:14:05:c2:a4:2d:ac:e2:9a:
         f5:42:df:d6:38:a0:5b:f9:2d:d2:7b:d0:59:2e:73:4b:76:53:
         44:83:71:a0:23:eb:30:a3:d0:4f:c7:30:c7:14:f9:7d:b0:61:
         ac:62:64:75:d3:28:1e:22:c5:21:7b:bf:ee:3a:ac:ce:c6:ef:
         86:b8:94:2a:43:88:9a:99:0b:87:ed:c4:98:45:0c:b8:8c:c2:
         79:f1:e9:e7:a1:7a:0d:5c:fc:aa:90:7c:52:28:fc:92:d9:84:
         f5:c0:9b:f2:7c:9e:c1:97:94:48:d7:7b:d9:d8:aa:03:15:0a:
         7c:a8:81:db:3d:a8:a4:74:c7:d5:d5:56:f1:11:66:2a:c4:c5:
         84:5a:35:3b:88:57:ab:a1:55:f4:cc:d3:33:e5:eb:f7:e8:7c:
         02:ca:a0:b5:9e:e1:55:37:ec:7e:e7:22:94:d4:1c:28:d4:c8:
         11:72:e8:4c:26:86:75:78:e3:32:0c:3d:db:87:e2:aa:21:a9:
         34:6b:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org