Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
File:                     3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa (raw, json)
Hash identifier:          jZPFxp+Ua7XdgV5znIKdmgbUoMnZwZO6yMOO/gYWaIo=
Subject key identifier:   E1:3F:B7:D8:C2:91:14:F7:AC:84:D2:D8:24:AD:46:46:1E:9A:8C:E1
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       618113BB9809ABDEFA8C3671BFC2141CC0C46FA1
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:06 +0000
ROA not before:           Fri 22 Dec 2023 20:20:06 +0000
ROA not after:            Fri 20 Dec 2024 20:25:06 +0000
asID:                     263073
IP address blocks:        177.223.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:81:13:bb:98:09:ab:de:fa:8c:36:71:bf:c2:14:1c:c0:c4:6f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:06 2023 GMT
            Not After : Dec 20 20:25:06 2024 GMT
        Subject: CN=E13FB7D8C29114F7AC84D2D824AD46461E9A8CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:45:5f:a0:eb:54:0e:42:2d:1b:9a:af:cd:
                    b2:bb:25:55:70:3a:9a:ca:9a:00:26:81:3b:7d:f7:
                    91:ee:78:b5:b1:ed:09:b7:12:20:dd:92:cd:0a:da:
                    57:c0:f9:90:25:74:c3:25:ad:e7:be:58:36:f9:94:
                    b7:ed:75:b4:b1:8e:30:82:ab:4e:5b:e6:f2:f0:eb:
                    55:79:e3:e6:71:42:d6:21:b1:be:c8:ce:65:55:6e:
                    2d:45:05:95:d3:d1:cb:91:58:53:ad:d7:0e:43:0e:
                    a5:42:2b:78:31:9f:09:31:cf:33:f4:1f:85:ab:d9:
                    d3:bd:0d:9d:66:6a:bc:58:30:d2:4e:84:7b:ce:13:
                    18:6a:a5:67:58:ad:14:1d:3f:8b:d1:8b:68:a9:88:
                    49:c2:7f:69:87:ab:52:9c:19:d9:8a:25:92:ff:b6:
                    ab:85:d6:1b:1f:95:df:83:97:fe:ff:82:0b:e8:ba:
                    7a:fd:d6:2f:aa:a2:62:fb:46:a0:70:c3:53:6f:b0:
                    a4:8a:1b:35:cc:db:2f:fa:7e:18:a5:50:7e:8c:25:
                    df:c8:3b:7e:35:55:35:24:ed:1f:65:4a:92:ae:73:
                    44:d4:c9:2e:c6:52:5a:01:91:ee:cd:6f:a2:ca:8b:
                    c7:de:fc:72:f4:c3:a8:44:8b:e7:20:fc:6c:9c:ed:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3F:B7:D8:C2:91:14:F7:AC:84:D2:D8:24:AD:46:46:1E:9A:8C:E1
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:6c:39:53:09:a0:f7:90:ff:3a:f2:b7:6d:60:02:44:2a:
         d2:8e:7b:2d:0b:e3:6b:47:6a:2b:80:8a:ef:cf:3a:b3:78:f5:
         ef:bb:eb:9d:7b:aa:b0:52:e4:40:b5:28:40:98:0c:3c:3f:4e:
         2d:a6:6c:18:07:c4:d2:bf:31:df:92:34:f9:02:45:fb:18:e1:
         2d:cd:1d:97:50:8d:41:ce:83:25:45:6e:56:a4:6b:4b:f7:6b:
         85:bc:cd:2f:2a:af:e3:44:5b:33:a1:89:20:8c:6b:7d:2d:79:
         39:ef:f8:12:20:d3:55:3d:7d:b1:23:c1:90:0b:29:10:72:f7:
         7b:ab:9d:94:19:65:e0:04:63:c9:58:b8:a4:19:bf:94:f8:3d:
         58:43:0e:13:30:23:57:7f:d0:5f:e3:77:22:56:70:e3:b3:eb:
         94:97:e4:7f:75:88:9f:e5:1d:28:5c:15:ed:a9:17:e5:ba:36:
         5c:32:0f:55:1d:23:4b:f5:eb:de:46:3f:27:1d:d0:29:c4:18:
         0c:ff:05:51:47:0a:99:a1:2b:cf:22:5a:c9:f2:9e:5e:3f:59:
         df:5a:aa:ba:af:a1:95:04:16:87:43:8c:e7:71:9e:a3:95:f1:
         5a:ee:db:6f:8f:17:69:1f:13:fa:59:2e:1b:58:82:01:47:f6:
         bb:40:30:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYYETu5gJq976jDZxv8IUHMDEb6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDZaFw0yNDEyMjAyMDI1MDZaMDMxMTAvBgNV
BAMTKEUxM0ZCN0Q4QzI5MTE0RjdBQzg0RDJEODI0QUQ0NjQ2MUU5QThDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCookVfoOtUDkItG5qvzbK7JVVw
OprKmgAmgTt995HueLWx7Qm3EiDdks0K2lfA+ZAldMMlree+WDb5lLftdbSxjjCC
q05b5vLw61V54+ZxQtYhsb7IzmVVbi1FBZXT0cuRWFOt1w5DDqVCK3gxnwkxzzP0
H4Wr2dO9DZ1marxYMNJOhHvOExhqpWdYrRQdP4vRi2ipiEnCf2mHq1KcGdmKJZL/
tquF1hsfld+Dl/7/ggvounr91i+qomL7RqBww1NvsKSKGzXM2y/6fhilUH6MJd/I
O341VTUk7R9lSpKuc0TUyS7GUloBke7Nb6LKi8fe/HL0w6hEi+cg/Gyc7RPxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4T+32MKRFPeshNLYJK1GRh6ajOEwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzM3MmUzMjMyMzMyZTMxMzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASx3xAwDQYJKoZIhvcNAQELBQADggEBAI8WbDlT
CaD3kP868rdtYAJEKtKOey0L42tHaiuAiu/POrN49e+76517qrBS5EC1KECYDDw/
Ti2mbBgHxNK/Md+SNPkCRfsY4S3NHZdQjUHOgyVFblaka0v3a4W8zS8qr+NEWzOh
iSCMa30teTnv+BIg01U9fbEjwZALKRBy93urnZQZZeAEY8lYuKQZv5T4PVhDDhMw
I1d/0F/jdyJWcOOz65SX5H91iJ/lHShcFe2pF+W6NlwyD1UdI0v1695GPycd0CnE
GAz/BVFHCpmhK88iWsnynl4/Wd9aqrqvoZUEFodDjOdxnqOV8Vru22+PF2kfE/pZ
LhtYggFH9rtAMGU=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org