Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          u/Y1zkZZVge7efNcDQmokEX1g5ukIoE2gYnxiXLoqaM=
Subject key identifier:   85:08:94:60:3D:12:C3:5A:CC:7D:E8:7D:FB:EE:40:8D:3E:09:E6:C6
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       2DF64B6DF146630E789999AF798463ECF8ADDB1B
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:11 +0000
ROA not before:           Fri 22 Dec 2023 20:20:11 +0000
ROA not after:            Fri 20 Dec 2024 20:25:11 +0000
asID:                     263073
IP address blocks:        177.223.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f6:4b:6d:f1:46:63:0e:78:99:99:af:79:84:63:ec:f8:ad:db:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:11 2023 GMT
            Not After : Dec 20 20:25:11 2024 GMT
        Subject: CN=850894603D12C35ACC7DE87DFBEE408D3E09E6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:cb:ab:42:45:ff:1e:a2:4e:7b:84:83:5e:
                    12:92:cb:a3:1e:c2:83:d6:4e:a3:d2:48:85:27:0c:
                    dd:8c:3c:c8:96:3e:be:3f:80:56:ac:5b:15:4f:84:
                    b9:30:ee:21:46:62:9d:bf:80:22:4f:d1:70:27:ac:
                    58:0f:83:6b:08:c1:56:3e:ab:d8:c5:6a:dd:55:ec:
                    1b:7d:9b:68:c3:23:e1:e8:32:c3:69:e8:36:8d:54:
                    aa:cb:85:c5:2a:21:95:a0:06:65:2b:a0:6b:c0:00:
                    3e:d4:1e:af:52:68:6f:de:9c:0e:22:c3:49:0b:17:
                    7f:bb:66:5f:09:9d:eb:05:e6:e9:89:0e:18:0a:a6:
                    46:24:5f:c0:50:4b:c7:b5:3e:ed:6c:11:23:a9:d3:
                    84:2f:75:92:5e:55:d1:9a:8b:f5:9b:49:64:08:f4:
                    f2:1a:b2:f9:c0:89:77:08:2b:d7:ce:d4:4e:57:de:
                    30:1f:ac:ea:4f:77:49:97:a7:ff:4e:aa:a5:8d:5c:
                    be:f7:d1:52:6b:0e:63:4b:f7:cd:5c:a8:8f:cd:73:
                    b7:5f:27:ce:e6:6a:9b:a5:b7:c7:94:82:e8:17:a2:
                    3a:ba:8c:fd:17:ee:16:36:c2:23:25:20:c6:37:8d:
                    36:37:92:34:45:15:bb:e4:fa:c6:02:8c:5a:95:f1:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:08:94:60:3D:12:C3:5A:CC:7D:E8:7D:FB:EE:40:8D:3E:09:E6:C6
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:c3:96:b7:e5:bf:d5:2a:51:fd:e9:18:e6:b9:78:f8:c4:
         71:ad:d8:20:fd:d6:6c:03:3f:0e:98:05:ba:f8:39:34:66:26:
         1a:60:5a:a9:83:e5:30:1d:da:03:ec:3d:d0:27:a4:8c:9d:d9:
         5c:5b:c6:c6:f5:ca:06:ce:60:1d:97:1a:39:05:81:1a:1f:7b:
         4a:9f:12:41:c8:5c:16:b9:9b:cb:d0:be:b5:0a:d1:0b:50:2e:
         f3:cc:07:aa:ed:4b:81:4a:d2:ae:43:c2:35:1e:71:f6:c0:f0:
         d4:76:ad:a6:00:e4:68:94:ec:28:d5:65:6e:2e:ec:c7:1d:52:
         f2:54:13:f4:9d:f7:40:00:3e:dd:91:9d:cf:87:74:08:f4:ba:
         8b:71:ba:8f:e4:fe:fb:07:18:85:58:e2:bf:2f:34:f6:70:d4:
         92:df:4e:28:05:0b:22:fe:12:99:3c:2e:dc:7a:a5:b2:72:ba:
         f1:e2:4d:30:77:07:e0:f5:1c:70:6d:3d:05:e2:b5:c0:8c:5d:
         91:c3:a3:ef:09:62:18:43:e5:22:76:c9:8f:8c:a8:92:d0:c5:
         b0:73:8a:56:b4:c0:85:12:78:07:c7:dd:42:54:2d:44:d7:90:
         7e:6b:2c:0e:00:4e:e9:a3:4a:81:20:78:2a:36:9f:a7:9e:a9:
         5c:32:d3:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULfZLbfFGYw54mZmveYRj7Pit2xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMTFaFw0yNDEyMjAyMDI1MTFaMDMxMTAvBgNV
BAMTKDg1MDg5NDYwM0QxMkMzNUFDQzdERTg3REZCRUU0MDhEM0UwOUU2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYBcurQkX/HqJOe4SDXhKSy6Me
woPWTqPSSIUnDN2MPMiWPr4/gFasWxVPhLkw7iFGYp2/gCJP0XAnrFgPg2sIwVY+
q9jFat1V7Bt9m2jDI+HoMsNp6DaNVKrLhcUqIZWgBmUroGvAAD7UHq9SaG/enA4i
w0kLF3+7Zl8JnesF5umJDhgKpkYkX8BQS8e1Pu1sESOp04QvdZJeVdGai/WbSWQI
9PIasvnAiXcIK9fO1E5X3jAfrOpPd0mXp/9OqqWNXL730VJrDmNL981cqI/Nc7df
J87mapult8eUgugXojq6jP0X7hY2wiMlIMY3jTY3kjRFFbvk+sYCjFqV8WuRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhQiUYD0Sw1rMfeh9++5AjT4J5sYwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzM3MmUzMjMyMzMyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3xEwDQYJKoZIhvcNAQELBQADggEBAGPnw5a3
5b/VKlH96RjmuXj4xHGt2CD91mwDPw6YBbr4OTRmJhpgWqmD5TAd2gPsPdAnpIyd
2Vxbxsb1ygbOYB2XGjkFgRofe0qfEkHIXBa5m8vQvrUK0QtQLvPMB6rtS4FK0q5D
wjUecfbA8NR2raYA5GiU7CjVZW4u7McdUvJUE/Sd90AAPt2Rnc+HdAj0uotxuo/k
/vsHGIVY4r8vNPZw1JLfTigFCyL+Epk8Ltx6pbJyuvHiTTB3B+D1HHBtPQXitcCM
XZHDo+8JYhhD5SJ2yY+MqJLQxbBzila0wIUSeAfH3UJULUTXkH5rLA4ATumjSoEg
eCo2n6eeqVwy03Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org