Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa
File:                     3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa (raw, json)
Hash identifier:          9LXYdtaoGq3Jnh8kQfSiz+oqOy8HcYXnR1gBMK4n9wE=
Subject key identifier:   D7:99:B7:0B:61:59:EC:9F:2B:F4:F2:84:C2:46:AD:BF:C9:45:A5:E8
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       507FD56EF5DC95F2BDC52975F510F0A16B68EF43
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:05 +0000
ROA not before:           Fri 22 Dec 2023 20:20:05 +0000
ROA not after:            Fri 20 Dec 2024 20:25:05 +0000
asID:                     263073
IP address blocks:        186.224.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7f:d5:6e:f5:dc:95:f2:bd:c5:29:75:f5:10:f0:a1:6b:68:ef:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:05 2023 GMT
            Not After : Dec 20 20:25:05 2024 GMT
        Subject: CN=D799B70B6159EC9F2BF4F284C246ADBFC945A5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:c8:6e:29:6d:2f:37:4b:0a:36:06:d0:d2:
                    b0:ea:9f:bb:e8:51:d5:36:68:98:77:41:b5:00:a7:
                    2c:dc:4c:77:07:9e:ce:28:24:42:c2:66:78:f5:30:
                    df:ee:cf:2d:9c:26:38:a7:ca:dc:bd:82:45:4e:7d:
                    46:de:e7:ec:d4:c0:81:b4:cf:20:c6:c5:cd:80:b5:
                    48:b0:f2:62:de:99:08:ee:84:3d:15:f4:a8:ef:a1:
                    1b:05:3a:42:fc:96:ed:4a:00:10:df:38:30:38:58:
                    c0:c5:14:62:50:6d:ef:67:7a:53:1f:60:d9:90:3f:
                    9f:ef:99:eb:5b:78:b0:cf:fa:b3:1a:1e:a1:35:b1:
                    fc:c8:5c:9a:a5:65:cc:b6:57:3a:db:23:78:e7:80:
                    6b:e6:4c:0f:54:85:94:c3:57:3f:ad:9d:ac:7a:76:
                    cc:a0:3d:18:27:c2:ce:9b:f7:e8:f9:cd:7e:cc:92:
                    c2:c3:ce:90:f4:25:58:f0:23:bc:bb:48:d5:6d:64:
                    3f:d4:a3:50:fa:c8:94:c3:79:15:26:79:19:fd:72:
                    3a:57:96:2e:2a:4b:11:dd:b0:c8:8c:3d:9d:4e:43:
                    0c:61:36:51:06:e9:44:30:8c:08:93:e5:da:e3:4f:
                    2a:93:fe:ef:7b:29:90:6b:c4:e9:58:cb:18:e1:46:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:B7:0B:61:59:EC:9F:2B:F4:F2:84:C2:46:AD:BF:C9:45:A5:E8
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:f7:8e:dd:d4:5e:55:ae:82:f2:2a:92:bb:34:ec:98:e1:
         9c:23:3e:b5:75:18:62:df:f4:9d:fb:2d:19:a8:a4:2e:fb:77:
         30:62:dd:8b:9b:05:7a:4a:3e:73:e3:97:d4:ed:e0:ee:4c:28:
         62:c5:86:80:70:5e:b9:8a:1d:1d:f4:cd:88:93:c3:51:7a:6c:
         18:b8:47:e7:01:53:79:5b:c8:ef:9d:20:54:4b:e8:20:26:29:
         2e:c4:19:2b:00:20:2d:3a:75:6e:7d:34:4e:99:0b:88:a2:4b:
         15:53:06:ea:34:ae:75:1d:6b:44:ba:b8:ff:02:0e:e9:bc:ce:
         1b:0c:4f:72:ea:32:1f:4b:4e:b5:03:04:b4:65:75:b0:1c:5f:
         4c:e2:f8:ae:59:be:d9:cc:58:5d:74:6b:e0:d4:55:c0:50:f3:
         a6:0b:08:8e:55:2e:fc:66:82:25:91:34:c6:af:7b:d4:af:22:
         b7:ff:11:02:5a:f6:39:e9:4c:6f:ab:08:38:ee:d3:2c:3c:ba:
         a7:5e:1d:73:91:e9:c3:85:3d:33:18:56:1b:17:91:90:ec:1a:
         3d:f9:0f:5c:bb:66:0d:e5:1c:a8:a0:24:f7:9d:67:21:bf:fe:
         e5:57:0f:00:6d:35:d0:a5:4e:12:58:fb:dd:b5:c3:a4:03:69:
         ae:2d:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org