Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32342e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32342e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          VWyRFzXdN0AZN7WUZvg4JrXVxOyJC3xaXJIJUKoJigY=
Subject key identifier:   30:94:5C:15:B0:2F:EE:91:06:AE:79:98:DC:EC:18:44:E4:74:DD:2F
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5B48BA3F6AB1F7B809E81D709653249B78ACABDB
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32342e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:10 +0000
ROA not before:           Fri 22 Dec 2023 20:20:10 +0000
ROA not after:            Fri 20 Dec 2024 20:25:10 +0000
asID:                     263073
IP address blocks:        177.223.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:48:ba:3f:6a:b1:f7:b8:09:e8:1d:70:96:53:24:9b:78:ac:ab:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:10 2023 GMT
            Not After : Dec 20 20:25:10 2024 GMT
        Subject: CN=30945C15B02FEE9106AE7998DCEC1844E474DD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:cd:03:83:a1:44:86:97:8e:c4:45:e7:95:
                    69:ed:c3:09:a3:3d:77:c8:39:a4:c2:e5:80:9f:9e:
                    57:87:34:c7:a6:54:50:bd:12:3d:b6:67:bd:f6:7f:
                    d6:25:26:67:28:2e:62:d9:7b:3d:44:b6:1f:c3:88:
                    ea:65:19:2c:aa:3c:dc:f6:83:96:71:12:3a:4e:83:
                    53:12:22:b8:f3:98:a0:55:61:1c:71:6d:c7:89:59:
                    9c:f4:b3:d1:d9:88:87:9d:e2:cd:ac:6e:d9:c2:4e:
                    bf:46:93:cb:2f:68:a3:d3:a7:a0:f7:a3:da:2d:c6:
                    65:d0:f6:0f:b2:92:09:a6:a4:4d:81:31:61:a8:09:
                    8b:29:d6:dd:0d:84:92:a4:c7:87:00:90:75:c2:c1:
                    12:7c:4b:41:51:93:d8:02:46:04:80:1c:07:5e:c8:
                    11:aa:00:1b:db:a8:db:dc:9e:63:e4:12:9d:94:7d:
                    27:f5:8f:46:ec:e4:dd:fa:81:56:d8:a5:90:c2:3c:
                    cf:c4:75:99:16:3c:1f:25:f5:12:4d:1a:12:63:8e:
                    77:50:72:3d:9f:f2:bc:1a:3e:7f:19:a4:da:52:ee:
                    8f:7b:85:7a:db:37:44:d3:1a:44:10:b6:76:ed:15:
                    e5:b9:8d:c5:64:5a:3b:93:ad:1d:f9:0b:b9:12:61:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:5C:15:B0:2F:EE:91:06:AE:79:98:DC:EC:18:44:E4:74:DD:2F
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32342e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:39:34:15:d1:fd:00:9e:14:7e:c9:87:c7:56:b6:c7:8e:dd:
         35:76:fd:de:ec:52:86:0d:0e:5d:49:d7:7b:20:57:12:c8:41:
         d7:e1:58:ec:c6:4b:d3:8c:88:da:0f:18:fa:7f:f9:21:78:d1:
         ce:62:b0:d3:55:89:55:35:ef:29:24:06:12:0a:71:20:86:3e:
         c2:7a:0b:26:0b:43:16:b7:90:26:39:f7:3d:6b:3c:af:b8:5e:
         2f:e5:f4:92:8d:14:8d:2c:59:70:e2:30:52:66:7e:57:62:a2:
         68:31:b1:c4:29:e9:36:4f:2c:dd:24:fd:51:e2:aa:07:49:93:
         d6:a6:c7:50:8c:ad:1a:11:97:cc:fd:bd:bb:32:15:b3:65:fe:
         77:75:36:31:9c:1a:3c:6e:e4:3d:10:30:81:33:da:cf:e4:cb:
         c2:b6:f8:c9:4e:b1:ab:0b:0f:30:ad:89:31:e8:2e:9e:46:7d:
         ae:f8:9d:af:09:15:b4:67:68:2e:4f:1a:24:95:0f:2b:78:e7:
         92:1c:2b:90:34:9b:2f:b4:4e:e2:be:59:d3:a5:6e:27:9c:21:
         3f:4b:c0:49:e0:95:58:6e:03:1b:50:b9:40:8d:6a:84:26:15:
         a4:cb:36:75:01:b4:76:72:17:58:ff:83:ff:36:57:6f:a5:bb:
         25:9e:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org