Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa
File:                     3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          L7KIVFUJe99sFsnC3xBBK3V7PT04+VRx7eTE8ATJzTc=
Subject key identifier:   AB:09:4F:46:CF:0E:74:77:39:9B:90:20:0A:94:E2:17:CE:B4:13:C9
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       6BB28080B6F01C90AA9A9D38A2B3329BFD7FBE37
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa
Signing time:             Sat 23 Apr 2022 13:53:59 +0000
ROA not before:           Sat 23 Apr 2022 13:48:59 +0000
ROA not after:            Sat 22 Apr 2023 13:53:59 +0000
asID:                     263073
IP address blocks:        177.223.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:80:80:b6:f0:1c:90:aa:9a:9d:38:a2:b3:32:9b:fd:7f:be:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 23 13:48:59 2022 GMT
            Not After : Apr 22 13:53:59 2023 GMT
        Subject: CN=AB094F46CF0E7477399B90200A94E217CEB413C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:59:98:e2:b0:4e:34:74:1d:71:96:a4:51:
                    73:df:d0:6e:4d:31:6f:ed:4e:3d:cf:87:b3:6c:7f:
                    06:43:a2:ec:02:11:f5:b2:38:70:62:6c:b7:2c:3f:
                    e5:82:62:89:cc:e4:ba:3d:0e:f6:2f:a3:57:ce:bd:
                    4d:ad:8e:c0:64:bf:5f:9a:30:1e:34:0d:ad:50:a6:
                    4a:9f:f3:6c:40:7d:5a:d6:ee:c5:b3:a0:b2:29:e4:
                    86:10:91:d2:7a:8b:23:1c:7c:a4:6f:b5:00:5c:0c:
                    d3:20:f6:3e:b0:41:2e:10:7e:12:a7:3f:ee:06:94:
                    42:27:43:f1:f9:e0:ef:8c:d4:b8:e7:97:68:dc:c6:
                    83:af:ca:41:18:0a:81:7d:9c:b7:95:cb:ac:41:72:
                    d0:12:2b:cc:e2:52:ab:45:34:79:77:ba:4e:9d:df:
                    c6:ee:74:f6:bb:4a:90:c4:c4:43:d6:e9:8e:1b:83:
                    8b:b6:f3:74:d5:59:e7:d4:97:8a:73:01:42:2b:bf:
                    62:e0:e4:14:24:51:d7:9b:c9:3b:9f:9a:12:16:11:
                    af:93:34:e6:bb:0e:17:62:7a:fe:37:1a:26:84:15:
                    73:0f:a1:49:a0:4f:82:1e:42:aa:67:18:48:8b:52:
                    c3:75:c8:7a:07:c0:2b:6c:fd:e7:94:d2:44:fe:c9:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:4F:46:CF:0E:74:77:39:9B:90:20:0A:94:E2:17:CE:B4:13:C9
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:d4:0d:b0:bf:c6:54:f4:0a:1c:56:2d:c0:f0:c3:68:79:
         3e:e2:df:49:c0:65:72:83:db:fc:ff:14:a7:e0:99:60:2a:24:
         ee:5c:86:1e:b6:0b:36:d2:b3:ee:19:24:41:72:52:a3:ba:f7:
         53:fc:91:e4:19:4e:f1:22:1e:05:69:dc:fb:52:bf:9f:ef:58:
         1f:34:89:8f:60:07:db:9c:b6:df:6a:2e:21:19:ed:8b:4f:49:
         a6:64:de:f1:e6:d7:ea:d9:a6:57:cf:67:6a:83:eb:fe:50:13:
         8e:00:2c:64:c9:a5:21:6a:77:23:d0:05:f3:56:95:d9:37:3f:
         01:1f:6b:6d:e0:f4:5c:49:8f:84:e2:62:06:4e:d4:6f:35:9c:
         7c:93:bf:47:4b:ba:da:28:60:9c:54:8a:e1:f7:68:ab:35:62:
         11:22:3d:8f:2b:e0:00:d7:8e:89:a5:35:a7:a1:fa:df:6a:c0:
         5e:37:f7:3f:3a:73:5f:13:ec:ec:70:4a:ef:0d:89:a6:d9:30:
         fd:58:60:1b:bc:05:ea:c5:7d:f1:87:11:e3:12:62:c4:3e:0d:
         fd:16:fe:2f:14:77:70:46:1a:98:0c:37:46:e1:20:71:44:21:
         0f:9c:55:31:54:75:6b:47:cf:19:68:6f:d0:3f:97:d1:ba:b5:
         83:94:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:14 2023 by rpki-client on console-fra.rpki-client.org