Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38322e302f32342d3234203d3e20323633303733.roa
File:                     3137302e37382e38322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          1m5cCLXPb4Rvc9EoxA2Jz+l+grTI37zoM882mEhgGsM=
Subject key identifier:   FB:1D:FE:74:98:94:AF:BA:F7:22:01:7D:FC:5D:8F:D0:FD:E5:6F:08
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5D574898579D3DD26A7C542B388A48795ECCE80A
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38322e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:13 +0000
ROA not before:           Fri 22 Dec 2023 20:20:13 +0000
ROA not after:            Fri 20 Dec 2024 20:25:13 +0000
asID:                     263073
IP address blocks:        170.78.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:57:48:98:57:9d:3d:d2:6a:7c:54:2b:38:8a:48:79:5e:cc:e8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:13 2023 GMT
            Not After : Dec 20 20:25:13 2024 GMT
        Subject: CN=FB1DFE749894AFBAF722017DFC5D8FD0FDE56F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:6e:c8:6a:c1:6e:47:45:f1:6c:1f:a0:84:
                    64:3a:3c:6c:91:28:5b:94:e1:17:b1:4e:7c:a1:ef:
                    35:81:4b:3e:9e:a9:af:51:e1:a4:7f:70:6f:41:7b:
                    a1:4b:d0:84:29:f5:c4:d1:be:5a:5f:e1:5f:37:20:
                    32:a1:06:81:78:90:22:51:a5:ba:fa:40:fb:68:32:
                    a9:7c:eb:49:95:4a:68:12:d3:a9:fa:dd:4d:42:64:
                    6d:71:27:4a:e6:1d:14:4b:ee:28:34:95:51:24:f5:
                    78:5e:f8:61:6e:18:c6:7a:54:4f:ed:e9:95:99:f5:
                    a3:6d:6a:24:74:42:84:27:e8:5b:d7:71:48:3e:97:
                    43:58:79:01:4f:cc:7f:9e:32:f6:62:12:74:6b:78:
                    27:4b:b4:74:14:04:26:d3:88:f0:3c:d8:ac:8d:d9:
                    0a:7e:86:0f:b9:9c:e1:af:d8:d6:04:8c:d2:07:a2:
                    c6:f8:77:15:8a:47:c8:f7:7e:76:93:3b:21:a2:31:
                    31:20:64:60:de:03:a0:e6:69:50:41:e9:d7:d3:52:
                    b9:2d:87:fa:c1:c7:64:bf:d1:8c:3d:b4:61:64:2e:
                    23:34:63:39:07:60:52:34:c6:8f:32:35:b3:3e:9b:
                    66:96:be:62:b3:8c:a8:f1:4d:13:18:f0:69:65:07:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1D:FE:74:98:94:AF:BA:F7:22:01:7D:FC:5D:8F:D0:FD:E5:6F:08
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38322e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:36:29:14:1e:6b:ee:93:6a:b9:48:05:7f:57:da:7d:24:
         32:a5:00:31:84:7c:a9:92:7d:ab:3c:3d:bd:a7:04:d5:c0:3e:
         fe:94:b9:56:75:0d:dd:f1:dc:be:b4:98:81:08:e4:cd:54:fa:
         b2:ed:a1:4e:f0:96:10:d5:73:8f:85:a6:b3:2f:fa:53:c7:74:
         1a:72:21:83:03:e9:4f:5e:a9:ba:64:f9:49:4b:17:4b:51:70:
         39:5f:ad:9e:a6:aa:17:77:ba:b5:a6:05:f4:3b:3c:47:4f:97:
         9f:c0:a2:7d:c6:3c:73:45:6f:d9:02:da:21:2b:32:26:69:87:
         16:39:1b:6e:dc:d5:a2:18:76:e4:87:ad:ae:f6:59:3d:52:61:
         be:39:5a:5a:ab:28:e0:97:e4:f4:72:cd:87:3a:45:fd:e2:63:
         b8:5c:8d:15:bd:e0:b1:8c:b8:d8:42:93:ce:93:dc:8e:9b:d4:
         1c:48:ee:06:3d:ee:79:34:ef:3d:8d:97:4b:46:34:34:4c:c0:
         1c:22:3e:e6:ee:65:ef:b7:34:63:0c:0f:25:72:98:5f:0e:c1:
         1c:2a:e6:3b:f6:c0:99:a0:a4:08:ba:51:d5:7a:a2:30:ba:42:
         20:00:47:cd:2c:2d:9c:20:ec:cb:39:ba:df:a3:d3:8f:98:90:
         88:24:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org