Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          Ot7IQzF9qF060Ti8kphNeGLgkXjUYkfhZFjdVxykors=
Subject key identifier:   EB:70:94:2C:75:E8:25:16:6D:2D:57:AD:BA:0C:57:CC:F9:06:4F:04
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       4D5005C649899BBFBA394BA08920068F9F3B4ECE
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:13 +0000
ROA not before:           Fri 22 Dec 2023 20:20:13 +0000
ROA not after:            Fri 20 Dec 2024 20:25:13 +0000
asID:                     263073
IP address blocks:        177.223.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:50:05:c6:49:89:9b:bf:ba:39:4b:a0:89:20:06:8f:9f:3b:4e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:13 2023 GMT
            Not After : Dec 20 20:25:13 2024 GMT
        Subject: CN=EB70942C75E825166D2D57ADBA0C57CCF9064F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:60:e6:66:8b:f5:51:af:0d:6a:c0:af:1e:
                    93:ae:da:05:49:2a:22:d6:24:31:bf:61:66:e7:ad:
                    6f:a5:13:3d:48:a6:f5:cb:bf:f7:7e:24:3f:2a:0f:
                    5d:ec:de:48:f1:6b:85:05:3f:ca:7b:cc:3d:71:ea:
                    1e:d1:d8:63:f6:10:69:60:6c:20:e2:5e:0d:22:25:
                    e7:ff:00:24:e8:c4:00:2c:1e:a3:f9:86:23:f3:44:
                    9a:b6:f3:20:f7:54:c1:7c:1f:db:f6:b6:c5:60:b2:
                    42:db:59:ab:fc:b3:8b:23:ab:b8:b8:c2:57:ea:fa:
                    2a:72:f9:5f:53:46:ca:56:ca:e2:03:55:86:68:82:
                    11:ef:b2:46:75:fe:d8:6a:70:15:89:02:c7:27:2d:
                    c8:65:79:60:d2:95:19:1c:50:6f:48:f3:94:ec:fa:
                    6c:5a:16:ee:55:9b:4a:14:ac:78:c1:95:2e:c9:26:
                    e1:c5:dd:10:c0:d7:46:a1:07:2e:17:18:bf:30:c4:
                    09:af:3d:52:f3:66:9b:4e:76:07:e0:78:11:32:79:
                    c1:40:d5:04:c6:0a:08:13:4f:94:0e:78:a8:13:20:
                    a8:bd:1f:8f:41:71:ba:80:3d:86:b9:75:e1:e3:61:
                    6e:b0:1d:3e:4c:bc:78:24:cb:f6:dd:8a:2a:bc:3c:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:94:2C:75:E8:25:16:6D:2D:57:AD:BA:0C:57:CC:F9:06:4F:04
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:1e:7a:ea:ba:50:a4:6e:60:b0:9c:a9:dd:5b:12:2b:a5:
         a6:e2:c1:ea:d7:84:8f:18:60:1f:e5:38:69:e2:12:96:ff:3c:
         3a:1f:3a:68:6f:bb:ee:14:32:04:fb:87:2e:2f:a9:02:a5:24:
         a4:a4:8c:95:59:4f:ef:5e:3e:8b:46:1a:a1:5f:96:3a:b7:81:
         78:df:61:64:40:73:9b:ac:df:b5:80:44:c8:b4:25:21:51:3c:
         44:67:d5:c4:58:1e:0e:89:f2:ea:20:04:4f:ae:a1:92:15:b0:
         d7:16:92:a5:7d:d3:ea:84:c4:e1:ca:cf:98:21:fa:f0:90:bb:
         5f:af:f1:13:76:56:12:ca:d6:e6:78:34:fb:6b:2d:de:b1:fd:
         cc:9f:bb:73:5c:13:2b:97:6e:4a:0a:34:42:fb:da:4c:af:b9:
         21:ea:a8:0d:2a:5a:7e:94:7b:59:a1:95:ba:73:0d:3a:6f:6d:
         80:80:7d:f4:3a:a6:4d:f1:3f:8f:67:bf:3b:59:d5:bf:c6:8b:
         78:35:f4:00:f6:58:5d:5c:d8:eb:e8:07:ed:70:b1:db:11:ea:
         de:b6:52:66:d0:7b:19:b1:7e:8d:90:e9:4a:76:1a:42:31:e0:
         42:e6:18:18:84:ef:ac:d4:49:cd:72:39:0f:d5:6c:cc:07:a4:
         4e:34:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org