Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31392e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e31392e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          WeAaO1w+xWcdzptnPKsqrWgJlTeCRXkO0nRRXrKrhnw=
Subject key identifier:   51:5A:EF:AF:0E:AB:0E:EA:47:9B:A5:5F:E6:9E:05:D7:CF:E7:5A:A3
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5BD3DC2B22C7B7E17B19A09963943ABF1C794FCA
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31392e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:13 +0000
ROA not before:           Fri 22 Dec 2023 20:20:13 +0000
ROA not after:            Fri 20 Dec 2024 20:25:13 +0000
asID:                     263073
IP address blocks:        177.223.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d3:dc:2b:22:c7:b7:e1:7b:19:a0:99:63:94:3a:bf:1c:79:4f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:13 2023 GMT
            Not After : Dec 20 20:25:13 2024 GMT
        Subject: CN=515AEFAF0EAB0EEA479BA55FE69E05D7CFE75AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:51:42:5b:3b:1c:07:5d:16:f9:36:d9:1e:
                    08:e5:9e:a2:ec:c6:7a:82:47:fd:32:1a:01:19:6c:
                    9c:61:2c:a9:20:bc:56:dc:c7:89:fe:ef:e4:27:d4:
                    ab:44:9e:c8:ff:19:55:51:cd:fc:22:18:58:37:0b:
                    2a:28:2f:9a:97:d8:47:3b:42:dc:15:56:cf:71:4e:
                    5f:95:9e:f6:7e:5b:c2:ef:c7:58:a3:e8:2b:fd:21:
                    dc:cc:cd:04:2b:17:a6:b8:d4:b6:be:db:12:33:45:
                    01:16:cc:c2:74:8d:c3:5a:9b:3e:e3:4c:06:b8:ec:
                    f9:b6:91:7a:3f:c0:60:27:44:7e:cc:e3:9d:28:d8:
                    03:ca:57:6d:13:12:d8:05:06:49:fd:23:6d:47:4a:
                    4e:9d:71:e5:e6:0d:aa:6f:d5:df:ba:b8:87:02:84:
                    8e:89:c2:16:d2:3b:46:2d:29:3c:82:ec:d8:96:a2:
                    e6:9d:bd:38:f1:59:8b:75:a7:41:c1:a4:20:45:a3:
                    e1:9f:ac:13:80:aa:82:21:ab:0b:67:1d:b7:33:2f:
                    86:13:54:f2:37:70:51:55:30:08:0b:6f:8e:e0:0c:
                    23:92:f6:3a:0d:5f:e4:ea:91:4e:ff:73:4a:ac:7d:
                    38:e1:86:57:90:8e:94:f1:87:2a:6d:04:e1:2f:31:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:EF:AF:0E:AB:0E:EA:47:9B:A5:5F:E6:9E:05:D7:CF:E7:5A:A3
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31392e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:c9:e8:ba:78:44:4f:ce:91:95:e6:f1:c8:30:ef:fb:4c:
         87:f1:47:be:30:7f:fb:df:d2:56:b3:55:03:c0:e4:4a:6d:30:
         4b:75:07:78:a3:17:c3:4e:30:da:ea:09:6e:28:ed:e8:d5:a1:
         b1:8e:9f:84:21:45:79:4a:31:c2:f9:9c:4c:d8:da:ed:ee:fa:
         e6:16:b5:06:3c:85:53:5e:c3:00:2b:2b:22:51:20:c1:70:00:
         80:79:72:22:53:c7:28:25:93:dc:fe:b0:3c:ee:13:8e:b2:fc:
         a4:ac:0c:e6:52:8d:7c:58:d1:ed:cf:0d:e5:ad:58:e4:54:66:
         ae:39:80:02:31:c6:ed:7e:44:bc:b6:97:63:05:0c:a0:c2:4b:
         4b:40:90:a8:e3:be:84:6b:aa:b0:64:c5:67:8a:20:c9:36:56:
         a0:88:6a:e0:41:af:35:f6:93:e7:d5:ff:d8:c8:6e:7c:3b:1a:
         d2:94:67:cf:39:8d:20:b3:7f:91:66:6b:f9:e1:fc:71:5e:82:
         57:ba:08:85:f1:d3:d9:12:b0:bb:75:c2:80:2a:45:e5:67:82:
         b7:e1:3b:b6:44:51:6f:2b:50:92:68:e8:9e:20:d6:ab:00:dd:
         05:00:2c:ba:20:7c:cf:cb:f6:bc:2a:61:ff:99:a4:5a:22:c4:
         c9:98:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org