Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa
File:                     3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          euXUYTf+c3qtsgbxkw91M+3/U14y7r+mnqFo8UqJG0w=
Subject key identifier:   2E:51:FB:E0:AF:75:AE:5E:35:63:72:8B:5D:B9:CF:E9:74:6C:F4:6C
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       66B1879D50C5A33C0798F1694CE704D28BEE8336
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:05 +0000
ROA not before:           Fri 22 Dec 2023 20:20:05 +0000
ROA not after:            Fri 20 Dec 2024 20:25:05 +0000
asID:                     263073
IP address blocks:        168.121.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b1:87:9d:50:c5:a3:3c:07:98:f1:69:4c:e7:04:d2:8b:ee:83:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:05 2023 GMT
            Not After : Dec 20 20:25:05 2024 GMT
        Subject: CN=2E51FBE0AF75AE5E3563728B5DB9CFE9746CF46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:36:fa:ad:5f:b6:2f:81:1d:bc:83:63:24:
                    a9:e4:c9:b5:ce:73:d1:0f:bb:82:c4:07:1c:b6:fb:
                    ab:f3:95:14:3c:9f:cf:08:ff:d3:18:64:9d:62:b9:
                    b1:74:36:a2:f5:8e:32:09:ce:35:fc:9d:55:41:60:
                    74:31:4f:61:dd:bc:c8:9f:43:2e:0f:83:f1:ea:33:
                    27:4d:41:4c:f2:a7:15:62:ca:d7:54:9c:db:94:18:
                    0f:4f:d0:25:f6:3b:b2:82:d6:69:6e:f7:99:ad:85:
                    39:6c:bf:d6:4c:c7:32:82:5d:22:f3:14:1a:14:4b:
                    ef:3f:90:6d:b9:16:a4:8a:59:ad:5a:db:a1:4d:80:
                    9d:50:99:23:ba:46:f7:61:36:e3:b3:57:2a:ef:3e:
                    73:9c:a1:7c:f9:be:9a:1f:7f:a2:6f:69:5a:10:8e:
                    97:1c:54:94:fd:65:ae:dd:8f:7a:af:fc:dc:04:d4:
                    c0:00:c5:3c:06:06:c7:84:55:5f:07:1e:68:5c:1a:
                    3f:15:81:72:55:22:74:31:5e:5a:44:b4:d7:ee:43:
                    fd:50:da:cb:04:2c:56:42:54:73:8a:a1:e2:fe:bc:
                    17:18:b1:7c:60:cf:42:35:32:cf:88:53:5f:f5:a9:
                    e5:c5:0f:b9:3d:0b:a4:aa:c4:77:f2:e8:3d:a7:0e:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:FB:E0:AF:75:AE:5E:35:63:72:8B:5D:B9:CF:E9:74:6C:F4:6C
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:d8:23:42:9e:62:a2:92:49:77:c4:0a:24:9c:b2:5c:11:
         57:90:19:b5:06:a9:05:74:21:77:13:2e:fc:7e:96:0c:02:bf:
         fe:37:fb:6e:d4:f5:45:60:e6:af:cf:db:37:8f:1c:39:ad:8b:
         66:ab:f6:84:c4:e3:5f:39:d2:a4:5d:85:9b:50:3d:f7:bb:9a:
         a6:92:07:11:93:9a:85:53:2d:db:8d:22:09:5b:a6:35:0d:54:
         81:ba:8c:db:44:fa:e4:9c:53:e6:6f:ea:91:83:97:0c:70:dd:
         b0:b6:be:12:80:40:97:1f:c2:39:47:ec:c3:dc:d5:69:d0:45:
         99:af:70:3d:74:62:69:df:6e:f4:f0:7d:96:20:94:e9:bd:cf:
         a2:15:75:5c:dc:86:07:8b:0e:91:6e:34:b7:5a:e8:74:d3:9b:
         f0:6a:e2:b5:a1:f1:d9:a6:33:f9:15:33:63:82:f5:57:1d:ec:
         7f:76:39:4f:37:5c:47:64:17:a8:ac:db:fa:83:76:8e:9b:f0:
         3d:4b:89:62:53:8c:31:51:3b:60:ac:6f:17:c2:de:eb:21:f2:
         75:57:00:73:08:10:b0:06:dc:af:d4:85:e2:f1:19:e0:84:54:
         bb:39:c8:b2:ed:a6:c2:f9:82:9e:c8:bd:af:84:9c:b2:74:cc:
         65:95:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org