Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32312d3231203d3e20323633303733.roa
File:                     3138362e3232342e32342e302f32312d3231203d3e20323633303733.roa (raw, json)
Hash identifier:          YzTppWFQ1TSo+/6awtsWTjJ4E2HFacokceL931dnxog=
Subject key identifier:   34:A7:D6:E4:3E:CA:7E:E1:58:24:79:12:1F:6F:20:60:72:9F:25:41
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5001405BFFE31F8180269ED20F8B7BFF6863B9A7
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32312d3231203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:10 +0000
ROA not before:           Fri 22 Dec 2023 20:20:10 +0000
ROA not after:            Fri 20 Dec 2024 20:25:10 +0000
asID:                     263073
IP address blocks:        186.224.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:40:5b:ff:e3:1f:81:80:26:9e:d2:0f:8b:7b:ff:68:63:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:10 2023 GMT
            Not After : Dec 20 20:25:10 2024 GMT
        Subject: CN=34A7D6E43ECA7EE1582479121F6F2060729F2541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:fd:da:c6:d9:c6:eb:ea:37:47:cb:95:e0:
                    e2:9c:0c:6f:ba:27:c9:1b:df:2e:5a:8a:d9:dd:35:
                    01:72:2a:ad:40:63:a5:d0:1f:74:ce:34:ee:bd:3e:
                    e3:f2:f1:cb:b6:0a:92:f1:b8:67:ac:2c:8a:62:51:
                    b2:5d:0e:2f:ea:7c:7f:27:02:7b:22:cc:3e:6f:3b:
                    d4:04:32:f1:19:bc:b1:4b:fe:41:37:53:c8:27:fd:
                    30:e7:a8:35:c8:d5:9d:40:27:a8:07:58:9c:11:97:
                    88:50:88:f7:70:1f:ab:80:c1:47:d1:f9:38:98:5b:
                    7b:d9:66:39:97:d8:cd:33:9d:33:ff:22:35:e9:19:
                    ff:52:2d:f3:1f:ac:28:29:fe:c7:6d:71:cb:d4:4b:
                    75:19:de:fd:55:5b:98:ce:21:e8:9a:51:54:b5:db:
                    82:4e:84:a6:21:89:0c:d7:80:14:bb:56:7a:05:48:
                    f1:e3:3f:5a:19:14:ae:d2:e5:2d:8e:4f:74:ea:eb:
                    db:d7:fa:aa:2a:38:1c:94:1c:6c:af:58:ad:ff:a0:
                    98:90:dc:34:45:15:18:ca:1c:90:c5:5f:83:12:a5:
                    a6:08:5c:cb:18:80:29:0c:f3:1a:84:f7:40:ae:43:
                    9e:69:a6:3f:7d:5b:82:77:75:10:ce:45:41:e6:ea:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:D6:E4:3E:CA:7E:E1:58:24:79:12:1F:6F:20:60:72:9F:25:41
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32312d3231203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:17:f8:cd:c0:18:7e:05:4d:be:7a:b7:b4:e5:df:60:d9:a0:
         c5:a0:17:c5:a4:30:5b:c4:0b:6b:0b:07:a6:cc:ab:3d:4b:55:
         76:2c:32:fa:8a:a0:da:6a:51:fb:f4:d4:d2:30:7c:e2:e7:05:
         bd:38:4d:ea:16:06:b6:d2:03:a1:ee:c6:30:a6:a1:7b:15:ec:
         76:43:3b:cc:83:12:3e:81:18:7f:09:2c:c9:63:63:f4:4f:d8:
         49:ce:09:b4:a4:76:ec:84:e1:e3:bd:c3:c8:e2:34:11:eb:41:
         ec:2e:5d:23:61:74:25:a4:b9:4e:13:93:8c:52:83:fc:da:5c:
         5d:4b:8c:8d:8c:b8:9d:7a:ac:ec:e3:37:bf:d9:e7:56:e7:af:
         48:0f:2a:65:18:21:51:10:86:5b:76:3d:57:4f:5a:7f:97:e1:
         70:90:9e:2d:49:43:c2:eb:7e:ff:75:61:dd:3c:d4:24:91:ec:
         2d:0d:a4:bc:22:7f:04:df:96:37:82:10:4d:4d:05:0b:35:91:
         c1:f7:63:13:0b:33:33:c5:a6:ac:25:e0:90:1e:be:a6:d9:4a:
         66:f9:94:3e:cf:d7:e0:94:90:51:3c:1b:62:a7:06:19:8f:ec:
         bc:87:82:1d:4e:fa:e3:55:6a:d0:49:ef:09:2b:60:38:49:8b:
         58:f1:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org