Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa
File:                     3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          bqrdeVy/IUbg6ybFln2E8NDLKFW8sUXweKWb2dK8Pxc=
Subject key identifier:   56:00:3C:D6:10:DA:BD:C4:BF:9C:18:63:FE:B2:08:B0:05:0D:84:A1
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       7BEACFA5542EA056EC06DA31052DA1E938F99B2B
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:12 +0000
ROA not before:           Fri 22 Dec 2023 20:20:12 +0000
ROA not after:            Fri 20 Dec 2024 20:25:12 +0000
asID:                     263073
IP address blocks:        168.121.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ea:cf:a5:54:2e:a0:56:ec:06:da:31:05:2d:a1:e9:38:f9:9b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:12 2023 GMT
            Not After : Dec 20 20:25:12 2024 GMT
        Subject: CN=56003CD610DABDC4BF9C1863FEB208B0050D84A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:37:1c:cc:4f:5d:5b:64:a3:52:d0:0b:20:
                    f1:5a:31:2e:e6:c0:29:10:ed:f4:44:4c:98:35:a7:
                    1a:2f:8a:e7:06:e0:7b:48:d0:17:a5:90:99:5d:78:
                    3a:a9:af:fb:51:2e:b0:25:19:4c:b8:16:8e:63:c1:
                    10:ca:91:a6:2f:08:88:3a:d0:54:f8:4f:9d:1b:b9:
                    14:98:37:5f:f0:51:fd:9b:05:83:a0:bf:95:c0:c8:
                    8c:13:ff:a9:68:74:4e:96:df:41:94:67:7e:9e:8c:
                    19:70:42:21:86:58:95:51:df:21:41:c0:5b:a5:fb:
                    30:8d:c3:5f:e7:92:23:70:61:55:c6:b6:9c:7b:b0:
                    78:24:87:79:6d:9c:09:54:b0:bd:20:69:94:43:dc:
                    27:5e:8e:00:4f:8f:fc:41:fc:6e:07:8f:01:a7:76:
                    c7:3a:1d:f1:f4:00:a7:61:2d:14:4f:d0:25:d5:b0:
                    b2:93:bf:d0:22:d8:fe:c9:c6:1e:c4:8f:b8:60:59:
                    c4:53:1f:99:59:18:94:51:ad:5e:74:95:e1:2c:f4:
                    a0:e3:2e:aa:19:d3:56:55:8b:2d:6c:d3:28:0d:fa:
                    f5:66:08:be:54:f3:3b:7a:22:06:bf:4e:81:c0:72:
                    59:e2:28:f1:30:c6:bd:71:db:e6:91:1f:8c:5e:62:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:3C:D6:10:DA:BD:C4:BF:9C:18:63:FE:B2:08:B0:05:0D:84:A1
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:35:3b:0a:77:07:b8:19:5f:db:b4:8a:bf:f2:ea:ad:10:
         bc:56:32:77:ad:7a:42:a2:d8:46:48:c3:76:1a:c1:0e:84:ea:
         3e:dd:b0:2b:9d:fe:b3:ab:93:b3:73:bb:57:f1:f4:b2:60:c6:
         69:74:9a:85:77:2c:e0:bc:9e:15:dd:52:52:ef:27:4b:7b:75:
         3e:8f:a6:25:ac:b0:f9:05:0b:07:ef:85:20:b6:9e:a3:86:a4:
         c3:f1:ef:59:3c:d9:fe:6d:4d:82:2b:3a:f9:20:53:2c:4d:7d:
         ee:df:3f:fe:e9:ab:ca:ec:70:ee:6e:1d:7d:a5:13:58:0f:a0:
         21:a9:83:a4:a1:fb:98:4d:37:c7:38:96:f5:c1:a6:b8:47:44:
         41:a9:65:23:1b:0a:c0:93:80:79:ff:c3:5e:0e:2f:1b:f1:ed:
         19:e9:3e:0f:70:e5:eb:04:14:68:91:48:9e:64:68:b8:e6:ef:
         d4:eb:de:82:ec:2d:f8:59:30:5e:38:8c:9c:8f:09:cb:c4:8d:
         0c:15:05:6f:eb:06:35:72:1f:53:63:1f:80:41:4a:ea:57:07:
         49:c3:54:74:48:0d:b0:90:52:19:b4:e0:82:60:3d:18:4c:fc:
         93:89:7c:61:ad:7f:24:c4:8d:c0:fc:b6:db:10:8b:eb:09:de:
         9a:74:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org