Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          DPlzmAYMqYcn5T1ou6vPCXbeMFP/7CunwrbiVHxAGTU=
Subject key identifier:   D0:F8:6D:72:F7:C1:8C:26:36:D5:63:09:E0:86:7C:AF:19:DB:31:FA
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       07B00AD5CB81DBF810161F98B9B3C134C48A125C
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:07 +0000
ROA not before:           Fri 22 Dec 2023 20:20:07 +0000
ROA not after:            Fri 20 Dec 2024 20:25:07 +0000
asID:                     263073
IP address blocks:        177.223.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b0:0a:d5:cb:81:db:f8:10:16:1f:98:b9:b3:c1:34:c4:8a:12:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:07 2023 GMT
            Not After : Dec 20 20:25:07 2024 GMT
        Subject: CN=D0F86D72F7C18C2636D56309E0867CAF19DB31FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:cb:94:dc:c6:5a:2b:fc:70:e9:2f:9e:8a:
                    d2:d3:f7:76:f4:c4:cc:58:fb:9e:b4:32:4d:b7:df:
                    4e:35:52:29:9c:51:2f:a0:3b:f3:ad:77:df:7b:c3:
                    cb:94:81:c6:e3:05:da:ea:e9:e0:98:3f:a9:86:fc:
                    41:42:e2:9a:f0:dd:47:1c:de:f2:5f:8d:95:42:ed:
                    31:ee:6c:89:3e:f4:25:3e:54:8e:05:6a:50:31:bf:
                    8c:c3:65:cf:1e:91:2f:a5:c1:df:3e:27:d2:f0:4e:
                    6c:e4:c6:8a:2c:96:31:29:64:4f:fe:8d:63:a0:ae:
                    e6:12:96:47:5b:05:7b:42:24:ec:29:21:af:1a:81:
                    3c:a2:a3:78:d9:07:fc:e1:79:e5:dc:a1:34:f0:83:
                    49:05:0e:db:98:cd:e0:ab:1f:c6:26:63:1b:e4:e5:
                    24:f7:07:87:c1:27:2b:b8:ee:14:b0:42:4f:cf:01:
                    24:12:4b:7c:83:21:56:fd:6e:74:32:5e:82:ce:2c:
                    06:9c:1e:79:78:1b:fb:1b:22:76:cf:22:5b:07:68:
                    8d:20:2a:c9:11:31:76:0b:fe:eb:dd:43:57:a8:f1:
                    c2:87:cd:fd:12:7c:85:a1:e1:ee:f2:b6:e7:55:af:
                    54:9c:8c:95:0a:2d:ff:02:ba:3c:8a:8d:0e:82:5a:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:6D:72:F7:C1:8C:26:36:D5:63:09:E0:86:7C:AF:19:DB:31:FA
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:de:5f:9f:b1:df:fc:8d:85:b0:98:c5:d3:29:d6:52:c2:ed:
         85:93:b2:46:09:f7:a5:a5:bf:24:dc:2e:ac:51:b4:5a:0b:2b:
         a3:8b:56:07:e4:58:fc:b4:ad:c2:91:97:c3:a1:16:bc:2b:96:
         8f:75:40:ba:31:93:51:d1:c4:bb:b0:f1:d6:2f:c7:a2:56:96:
         58:2e:41:b2:57:dd:c7:86:e8:30:3f:7c:83:a4:ae:52:27:68:
         e0:2a:57:5f:ce:92:a6:65:0b:9e:08:82:de:be:70:4a:9f:c3:
         5b:a1:03:d7:3f:14:48:4b:3a:6b:45:1d:52:3f:07:3a:19:d6:
         b1:7f:4b:97:be:1f:81:81:55:09:df:16:25:4a:eb:de:10:1f:
         36:9f:88:a7:90:aa:e2:2c:fd:7e:23:56:59:30:f8:82:cd:de:
         dd:cd:80:21:68:77:81:b6:f2:25:dd:49:97:b3:dc:07:5c:2b:
         97:48:fe:2e:a0:ff:56:14:f9:df:4c:36:36:e6:c8:4d:17:0c:
         6f:d5:34:c5:a2:ef:86:49:9f:5c:37:f6:18:07:98:47:d6:fb:
         88:20:a1:f5:cf:e7:98:31:ad:74:6d:36:61:4c:cd:43:ac:b7:
         d1:39:00:42:84:7c:2a:ca:e0:09:34:3d:3c:0f:e4:d8:31:0b:
         17:6d:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org