Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa
File:                     3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          42lqQmyc6vPlWzOc1kNXeDknq0EWBHcl+UEM11aYRjE=
Subject key identifier:   E3:7C:0E:54:16:F7:3A:2B:03:5E:3A:4A:6F:F9:9E:59:EB:12:F3:49
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       688DE08F736A239DE104375D3E5EC2ABEF3CBA73
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:07 +0000
ROA not before:           Fri 22 Dec 2023 20:20:07 +0000
ROA not after:            Fri 20 Dec 2024 20:25:07 +0000
asID:                     263073
IP address blocks:        168.121.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8d:e0:8f:73:6a:23:9d:e1:04:37:5d:3e:5e:c2:ab:ef:3c:ba:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:07 2023 GMT
            Not After : Dec 20 20:25:07 2024 GMT
        Subject: CN=E37C0E5416F73A2B035E3A4A6FF99E59EB12F349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:54:14:81:ab:8e:93:b3:b8:16:92:7f:e6:
                    a2:40:7f:a2:f7:ba:0d:61:24:cc:0d:34:56:62:ca:
                    c0:f1:74:f7:ed:54:b4:fc:08:d9:98:62:6e:c6:ef:
                    82:66:79:b1:64:1d:57:73:09:2c:76:a3:ce:e3:07:
                    92:a8:c6:a1:f9:8c:03:30:c4:17:c9:fc:06:2b:30:
                    c8:ef:fb:1c:d7:33:b8:dc:0c:23:5d:ee:82:29:9c:
                    cd:1b:d9:ea:55:ef:a2:a9:8c:b4:48:d6:d2:09:b7:
                    d5:1d:3a:21:e6:57:49:41:d7:76:46:95:a2:37:1f:
                    d8:3e:1c:08:50:cb:98:23:1a:2d:78:21:75:60:ab:
                    11:0a:73:9e:d4:1c:73:64:b7:3f:01:6e:a6:38:d0:
                    19:f5:1a:02:cd:78:85:28:b3:fa:b9:be:92:ae:75:
                    32:17:30:7b:ac:1c:71:85:86:b7:c1:e2:7f:56:e9:
                    03:0f:92:1b:10:0c:d7:25:7b:41:4b:78:c5:e9:99:
                    fe:c5:24:bb:6f:41:5c:82:10:54:05:66:2e:78:4a:
                    8c:de:e3:bb:6a:f9:14:df:0b:c9:1d:48:60:5e:1b:
                    3d:e8:e5:69:35:c0:67:22:4d:02:fe:a8:b8:e2:e4:
                    86:60:da:fd:dd:fd:75:99:e2:0e:0c:95:82:ad:29:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7C:0E:54:16:F7:3A:2B:03:5E:3A:4A:6F:F9:9E:59:EB:12:F3:49
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:03:8e:ac:fb:5e:5a:9e:bb:cb:84:e7:73:95:b5:13:4c:f7:
         46:d3:e9:d3:d3:4b:10:28:ef:1c:89:f6:f1:37:27:d1:f5:3f:
         18:52:3a:e6:0b:06:58:57:5c:90:78:c7:1a:21:a4:07:c4:f6:
         a6:8a:ec:24:58:30:12:e8:a6:62:78:db:60:2a:bc:04:04:43:
         b0:92:14:73:e5:a4:6d:ba:fd:22:92:84:af:b2:dc:a4:cf:8b:
         89:2c:de:86:5f:26:2a:3a:4e:66:55:fc:3b:bf:58:f6:13:4c:
         3f:3b:db:a6:7b:2a:ba:63:91:c9:3d:2c:da:d3:15:1b:04:9b:
         34:ce:7d:de:5b:d4:87:fa:6b:63:c4:75:17:77:32:72:a6:bd:
         da:63:2c:cc:2c:2c:68:33:90:89:66:fa:cf:98:0b:66:8c:f5:
         a9:4e:e8:e2:72:89:a9:e5:30:7b:b6:23:7a:6a:96:cc:fe:38:
         b0:96:63:07:7b:5e:02:e1:c7:78:e1:a2:6f:0e:c2:14:b5:a5:
         3d:26:49:38:3f:98:be:df:a1:11:44:76:8b:97:4f:3c:4b:f7:
         26:8d:98:26:9c:6b:16:42:2c:3e:04:d4:96:a5:24:a9:71:c6:
         13:2a:20:d6:55:c2:2b:94:91:21:fa:ca:01:8d:81:9d:65:85:
         b9:c2:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org