Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa
File:                     3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          PgkOVoP6BOYX8FDTlXyAlThLQuLxgvE3GCqZBgzoUEw=
Subject key identifier:   B0:17:25:7B:6C:1C:FC:62:22:24:95:EE:0C:57:12:43:FB:75:84:03
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       7CA84E51456E79ACB4D64C63DCA35DE89E2B2ACB
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:09 +0000
ROA not before:           Fri 22 Dec 2023 20:20:09 +0000
ROA not after:            Fri 20 Dec 2024 20:25:09 +0000
asID:                     263073
IP address blocks:        164.163.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a8:4e:51:45:6e:79:ac:b4:d6:4c:63:dc:a3:5d:e8:9e:2b:2a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:09 2023 GMT
            Not After : Dec 20 20:25:09 2024 GMT
        Subject: CN=B017257B6C1CFC62222495EE0C571243FB758403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3b:b1:ef:1e:79:64:eb:64:ed:14:4d:22:be:
                    1d:52:b3:d0:56:9b:ba:8a:33:a2:0a:89:ad:13:a4:
                    67:8a:05:f8:59:f1:90:3e:9b:60:e8:5c:4e:fb:37:
                    d1:0b:c6:6d:95:9f:2b:1a:33:8f:8e:51:51:13:91:
                    94:8c:33:fe:5f:06:ec:e5:ed:ff:ad:0a:95:0b:76:
                    5a:f7:6a:46:a8:3e:66:52:f0:ac:98:0d:43:a5:0d:
                    27:9a:a2:7e:7b:c4:51:5c:dc:ca:13:12:a1:87:13:
                    40:e6:b3:65:53:2b:4d:e5:0c:ae:1f:35:c5:3c:b8:
                    1d:32:d9:b7:62:0c:f4:0b:0f:01:85:a3:5f:94:0a:
                    f5:2f:d1:f5:5b:73:4e:69:0c:0f:04:75:1c:e9:ff:
                    bd:9b:17:45:8f:86:a8:d2:d5:42:0e:f0:1a:38:46:
                    c8:f7:0d:f8:f8:b4:8c:d5:a6:12:b8:d9:75:f7:2c:
                    cc:46:9f:b5:d0:5c:8f:b8:7a:7c:2b:ab:79:86:a8:
                    77:cf:c3:7d:cf:76:15:de:a6:46:fc:6d:e5:f8:cc:
                    05:8f:53:89:f5:29:25:85:f2:03:72:9f:88:fe:ab:
                    9a:0e:6b:f8:b1:e1:18:86:90:9a:11:3c:c5:e0:4a:
                    5d:74:a1:93:f4:f2:2d:9a:1c:67:13:22:dc:61:a3:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:25:7B:6C:1C:FC:62:22:24:95:EE:0C:57:12:43:FB:75:84:03
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:f5:f4:72:1a:82:91:28:37:8d:c7:15:14:35:da:a3:ba:
         26:b4:4d:93:6f:4b:20:7f:70:dc:96:7c:33:88:78:9e:0b:df:
         ea:51:59:54:0e:fe:43:ed:48:04:73:39:fc:1c:1d:1a:5e:e8:
         a4:ed:29:0f:53:68:74:60:61:33:fa:00:3f:32:a2:77:81:5b:
         94:a8:a0:27:00:ac:47:7c:e2:ee:f3:96:c6:7b:63:61:4a:85:
         06:b8:0f:63:6c:88:24:59:d9:5d:90:84:98:3e:a1:3e:ef:1c:
         d9:12:44:1d:b1:c3:ca:64:19:bd:f3:80:de:28:73:fc:50:a3:
         f0:23:8b:da:0f:5f:6f:54:6e:f5:af:d2:2b:94:cd:9d:29:b4:
         11:37:c5:60:e5:a8:96:43:50:5a:1a:69:27:f0:40:ea:7d:c8:
         c9:93:2b:af:93:c1:22:ad:a2:6c:6a:14:82:b0:21:a0:67:1f:
         8d:23:62:cb:e0:9f:83:3e:fc:37:10:0f:61:45:28:57:b9:28:
         96:47:79:c8:80:25:ab:e4:74:6e:e9:1b:28:1e:d7:c8:e1:36:
         56:54:a8:45:d2:ca:3f:90:b3:d3:91:87:b9:b0:94:5b:65:33:
         37:56:29:85:0d:31:1f:75:eb:bc:94:79:a0:03:f4:11:19:cb:
         01:f3:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org