Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          e3m66WZzihJuCpCGY3X/iGWjxUzOFnd4HmO8NpR46+8=
Subject key identifier:   C3:71:98:D5:CA:48:AF:37:F7:2D:40:ED:9C:41:78:8E:96:2B:C7:95
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       59B0BDA9F100E9B879D6D5A4BD30B4FACB6F7CA0
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:06 +0000
ROA not before:           Fri 22 Dec 2023 20:20:06 +0000
ROA not after:            Fri 20 Dec 2024 20:25:06 +0000
asID:                     263073
IP address blocks:        177.223.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:bd:a9:f1:00:e9:b8:79:d6:d5:a4:bd:30:b4:fa:cb:6f:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:06 2023 GMT
            Not After : Dec 20 20:25:06 2024 GMT
        Subject: CN=C37198D5CA48AF37F72D40ED9C41788E962BC795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:4b:47:31:c7:36:e7:10:b0:95:2b:52:14:
                    6c:a2:20:4b:60:79:0d:f9:3f:90:c9:0f:bb:7f:30:
                    54:d4:3f:dc:ca:47:a8:d8:21:ba:47:b5:e5:43:5b:
                    b0:70:32:f9:0b:bc:00:23:f9:8b:09:a1:88:b7:84:
                    d7:7a:cf:c7:8e:24:b8:ff:d4:67:8c:25:8b:bd:aa:
                    99:b7:e6:2b:50:4c:23:dc:b0:8a:e5:5b:f0:cf:67:
                    9d:14:15:4f:9b:d8:b8:0d:f8:9d:8d:3b:25:8d:0f:
                    94:04:50:74:f6:07:8c:cd:0a:9e:86:f1:b0:d7:5c:
                    27:86:21:15:47:76:d3:ae:05:37:73:88:95:26:52:
                    26:13:e8:f4:db:3e:e5:e0:29:68:6d:b4:f7:68:0b:
                    da:05:2f:3a:ac:8b:e6:47:ac:35:4e:00:48:ec:d4:
                    19:ac:8f:e4:dc:00:5e:17:ab:ce:18:d4:da:39:ee:
                    1a:b1:5f:6c:0f:a4:fe:7d:9f:d2:17:03:e7:4f:fc:
                    14:5f:e1:7b:34:49:9f:bb:8f:fb:b4:34:f5:ba:94:
                    a7:ff:be:3f:e3:7b:dc:52:10:17:32:da:df:9e:38:
                    c5:40:74:9a:fe:c3:80:d7:e8:f3:f4:d9:4d:f4:db:
                    63:24:a9:60:2b:4d:4c:13:99:12:a4:1f:d5:d7:86:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:98:D5:CA:48:AF:37:F7:2D:40:ED:9C:41:78:8E:96:2B:C7:95
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:e8:91:19:c7:9a:bf:fe:4e:f7:41:ab:f4:bd:fd:f6:0b:
         74:4b:54:92:2b:c3:a4:41:8a:f7:34:71:9a:17:88:08:30:ce:
         46:7a:d2:f3:e8:b5:fc:b7:61:38:cd:e8:ae:9b:da:67:4f:6d:
         05:9c:61:a7:c1:80:cd:01:e0:8b:16:59:ff:2b:1b:91:e3:c9:
         5b:c5:5a:df:e4:ce:2d:ef:56:c8:02:21:45:4c:d8:51:f0:a1:
         8d:87:14:76:41:bd:e2:f7:db:d8:9b:a4:f3:bb:e0:72:2c:85:
         f6:72:ed:fc:da:85:51:c9:2e:0c:1f:02:ee:61:53:90:85:db:
         d9:01:79:30:bd:22:8a:07:e2:7d:dc:1d:7d:a7:d9:87:2b:a6:
         a4:b0:56:96:d2:5b:e0:79:f3:a0:f3:81:84:ea:4b:19:e8:7d:
         a5:2f:61:dd:c8:3e:b6:8e:ba:af:ea:bc:68:c8:19:ae:2f:4b:
         bc:8d:fa:2f:cf:36:f5:d2:7b:be:7c:b9:61:41:18:91:6e:25:
         29:47:8d:fe:5c:ec:53:39:91:08:64:ca:42:2c:8f:b8:87:b4:
         97:1a:06:25:10:f5:92:be:24:1c:7b:12:35:12:37:c1:61:69:
         5f:5e:04:48:b3:a0:76:3b:a9:39:38:9a:4c:03:55:af:0e:3e:
         40:a8:ab:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWbC9qfEA6bh51tWkvTC0+stvfKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDZaFw0yNDEyMjAyMDI1MDZaMDMxMTAvBgNV
BAMTKEMzNzE5OEQ1Q0E0OEFGMzdGNzJENDBFRDlDNDE3ODhFOTYyQkM3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpktHMcc25xCwlStSFGyiIEtg
eQ35P5DJD7t/MFTUP9zKR6jYIbpHteVDW7BwMvkLvAAj+YsJoYi3hNd6z8eOJLj/
1GeMJYu9qpm35itQTCPcsIrlW/DPZ50UFU+b2LgN+J2NOyWND5QEUHT2B4zNCp6G
8bDXXCeGIRVHdtOuBTdziJUmUiYT6PTbPuXgKWhttPdoC9oFLzqsi+ZHrDVOAEjs
1Bmsj+TcAF4Xq84Y1No57hqxX2wPpP59n9IXA+dP/BRf4Xs0SZ+7j/u0NPW6lKf/
vj/je9xSEBcy2t+eOMVAdJr+w4DX6PP02U3022MkqWArTUwTmRKkH9XXhosJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw3GY1cpIrzf3LUDtnEF4jpYrx5UwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzM3MmUzMjMyMzMyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3xcwDQYJKoZIhvcNAQELBQADggEBAA8I6JEZ
x5q//k73Qav0vf32C3RLVJIrw6RBivc0cZoXiAgwzkZ60vPotfy3YTjN6K6b2mdP
bQWcYafBgM0B4IsWWf8rG5HjyVvFWt/kzi3vVsgCIUVM2FHwoY2HFHZBveL329ib
pPO74HIshfZy7fzahVHJLgwfAu5hU5CF29kBeTC9IooH4n3cHX2n2YcrpqSwVpbS
W+B586DzgYTqSxnofaUvYd3IPraOuq/qvGjIGa4vS7yN+i/PNvXSe758uWFBGJFu
JSlHjf5c7FM5kQhkykIsj7iHtJcaBiUQ9ZK+JBx7EjUSN8FhaV9eBEizoHY7qTk4
mkwDVa8OPkCoqyY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org