Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e33312e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e33312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          ONWY4cJtxHE2/bRatomHtNgvOfH7/bmdadmUY8vDbEM=
Subject key identifier:   C8:22:64:1F:16:FC:96:BB:27:97:4B:11:50:BF:05:C9:19:60:46:2C
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       786970AEC86F50FDE4F01BFBC54B318895FAD3A4
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e33312e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:09 +0000
ROA not before:           Fri 22 Dec 2023 20:20:09 +0000
ROA not after:            Fri 20 Dec 2024 20:25:09 +0000
asID:                     263073
IP address blocks:        177.223.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:70:ae:c8:6f:50:fd:e4:f0:1b:fb:c5:4b:31:88:95:fa:d3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:09 2023 GMT
            Not After : Dec 20 20:25:09 2024 GMT
        Subject: CN=C822641F16FC96BB27974B1150BF05C91960462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:ad:23:1d:ad:68:c3:1c:1e:62:92:c8:ab:
                    4f:23:24:00:52:5a:16:9d:00:24:50:38:8d:d7:c2:
                    2b:48:cc:9f:97:4d:90:6c:da:d3:93:cb:28:6b:b2:
                    08:80:8a:6d:cb:3f:d5:dd:02:1e:96:16:f2:76:68:
                    c0:62:f2:bc:4f:6d:b0:e8:a9:dc:61:de:2f:b0:fd:
                    b6:a9:86:09:b4:d6:c2:0c:3f:d4:b8:50:6f:93:75:
                    1f:2d:99:21:11:1f:f0:ff:ef:d4:a6:3d:68:67:68:
                    fa:57:e0:33:cc:f7:ae:12:77:68:26:08:36:a3:5b:
                    55:15:79:63:93:ac:a3:ef:d3:87:3e:79:7b:ae:8e:
                    75:4a:b6:dd:a0:c9:3a:29:fa:79:58:47:64:f2:c2:
                    4f:9a:56:f8:49:6d:0d:46:37:dd:5c:e6:2c:16:8c:
                    02:78:18:81:0f:50:b9:dc:26:c2:77:9b:fc:d8:da:
                    04:18:b8:b1:42:f9:12:b4:a9:7a:ff:fb:4d:a8:4a:
                    56:66:2a:1d:b4:06:e4:13:17:0e:2e:2e:95:f3:e3:
                    02:8b:78:2a:1e:30:9e:a1:2a:74:3e:a8:30:43:11:
                    9d:3b:ed:64:0a:5d:d9:af:2f:f6:2d:c2:12:0f:ef:
                    35:c3:67:82:85:0d:20:95:f7:cd:b6:dc:80:23:d4:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:22:64:1F:16:FC:96:BB:27:97:4B:11:50:BF:05:C9:19:60:46:2C
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e33312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:00:c2:22:a3:c9:16:ab:59:f2:62:a4:64:37:02:52:6c:
         16:59:e5:e3:19:dc:41:67:92:e4:de:5a:40:b5:63:d3:75:13:
         4c:c0:1d:3d:9d:e9:c4:63:80:2a:83:35:0b:a6:c2:f1:d7:de:
         d3:fd:5e:c5:ca:de:5b:be:51:5c:52:f0:6c:e4:f8:ca:38:15:
         59:42:a4:84:87:89:29:3b:b9:d4:cc:da:33:c0:40:69:ec:ec:
         c8:bf:e5:86:e6:3f:27:c8:7e:ec:1f:c7:cf:b1:97:2f:be:5e:
         ab:4b:e7:96:49:ec:6b:bf:71:d1:98:c5:97:1a:cb:c0:3e:2b:
         ec:87:b9:d0:a9:21:02:d9:8e:9b:e6:4c:77:a6:30:62:34:3c:
         5b:c1:e0:66:49:e5:17:d1:2a:7b:cd:29:72:d3:9c:b5:65:d2:
         fa:6f:14:82:e0:4e:d0:81:8a:66:f2:e8:0a:17:82:da:74:a4:
         67:ad:94:8d:56:60:fa:44:7b:2b:e2:8b:ee:18:a9:32:21:fd:
         31:2d:9a:05:62:25:6c:5f:1b:62:16:55:76:ce:3f:f5:86:f9:
         33:22:f7:f8:97:03:d8:60:56:7a:75:9f:ad:f2:fa:22:c0:83:
         40:a4:10:1f:1a:e5:93:72:9d:ca:c2:9d:35:31:99:4a:05:97:
         7e:9d:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org