Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          nBYWyLLRkDsz3Cjy54R6FTKc5j0d481XroVAKj9B4lw=
Subject key identifier:   2C:03:7E:44:7A:0F:3F:C8:BF:0F:57:5B:1E:BA:B5:F1:04:E0:76:12
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5B9E4B4EBA2BC4DE1323C3994642951BCA565152
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:08 +0000
ROA not before:           Fri 22 Dec 2023 20:20:08 +0000
ROA not after:            Fri 20 Dec 2024 20:25:08 +0000
asID:                     263073
IP address blocks:        186.233.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9e:4b:4e:ba:2b:c4:de:13:23:c3:99:46:42:95:1b:ca:56:51:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:08 2023 GMT
            Not After : Dec 20 20:25:08 2024 GMT
        Subject: CN=2C037E447A0F3FC8BF0F575B1EBAB5F104E07612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:c5:55:17:5a:47:a9:7a:d6:a5:68:63:61:
                    5e:08:d3:15:bf:e9:44:2d:d0:01:ef:94:f6:3d:50:
                    39:ca:22:39:6d:c7:5b:c7:26:1e:88:15:3f:e3:55:
                    68:ac:22:eb:e4:40:f8:a1:0b:61:5e:05:14:74:73:
                    f9:69:77:a3:73:4b:24:4b:00:4a:b2:ea:cb:4f:d7:
                    13:dd:e8:01:19:44:ff:82:81:15:b7:73:dd:91:d6:
                    c5:ac:6c:03:e7:53:1c:f3:44:55:f4:dd:6b:03:f0:
                    48:3e:5f:a9:a5:e8:a2:c8:91:7d:ce:ce:f4:72:a0:
                    39:a9:92:43:15:a7:ca:7e:f2:e8:66:11:de:0a:ae:
                    f9:a0:45:e1:89:8a:68:99:d8:99:0b:b8:eb:c6:39:
                    68:02:29:24:42:11:7a:95:60:9c:b4:99:9a:79:96:
                    85:b1:4b:30:2b:27:30:1d:ed:c8:8b:5c:41:77:50:
                    00:b9:3d:b5:67:c7:a5:3f:44:de:81:07:52:52:e3:
                    e0:fd:bf:5f:e1:59:5c:18:fa:46:04:a8:00:80:7e:
                    09:43:2e:bb:ea:4a:0c:a4:f9:46:b1:43:bb:e3:0d:
                    4e:66:03:42:1f:77:e6:cc:dc:2c:d5:3a:f3:c9:88:
                    c5:f0:4f:0f:49:ff:de:ac:da:a7:99:e8:1d:23:4b:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:7E:44:7A:0F:3F:C8:BF:0F:57:5B:1E:BA:B5:F1:04:E0:76:12
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:41:d8:91:cf:ff:ca:6d:eb:01:15:e2:8d:7c:2d:5d:99:bd:
         cd:47:6b:83:9b:f8:0a:d7:94:85:d3:59:50:5e:20:64:4e:00:
         02:2b:22:09:5c:f5:d7:ff:14:5e:53:25:1e:4f:06:3e:46:27:
         b9:33:09:90:9b:c5:b7:a5:ba:ec:dd:8e:55:a6:95:42:67:24:
         2c:4e:ea:0c:84:dc:f0:00:6e:95:f1:3d:2f:50:dd:76:1d:bb:
         23:9e:4e:bf:97:9f:53:7f:c5:21:be:44:c2:df:8c:7d:36:d7:
         3e:1e:b5:6e:b2:60:90:d2:62:b0:3e:2a:53:b1:06:cb:1a:47:
         e1:85:f9:80:e3:c5:89:90:e7:ce:e6:69:b9:0b:42:ca:63:a4:
         a3:5d:80:b1:4e:a2:1b:09:85:17:47:1f:54:b1:8b:be:c1:6a:
         d0:3c:c2:5d:6d:c6:b2:f1:d2:db:1e:70:e9:13:e5:d2:25:ca:
         9b:39:bb:dd:00:50:db:98:b4:54:46:2d:a6:ea:25:25:87:81:
         db:29:bc:0c:dd:56:8c:c9:75:5f:1e:b5:17:5d:51:e4:18:3e:
         0f:ec:9d:44:aa:d9:2f:e1:15:10:24:a5:d6:f0:65:8c:cb:65:
         c2:04:ae:3c:ca:74:06:a4:d8:88:8a:77:0b:2b:6c:f1:0b:27:
         a7:01:54:39
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW55LTrorxN4TI8OZRkKVG8pWUVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDhaFw0yNDEyMjAyMDI1MDhaMDMxMTAvBgNV
BAMTKDJDMDM3RTQ0N0EwRjNGQzhCRjBGNTc1QjFFQkFCNUYxMDRFMDc2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaocVVF1pHqXrWpWhjYV4I0xW/
6UQt0AHvlPY9UDnKIjltx1vHJh6IFT/jVWisIuvkQPihC2FeBRR0c/lpd6NzSyRL
AEqy6stP1xPd6AEZRP+CgRW3c92R1sWsbAPnUxzzRFX03WsD8Eg+X6ml6KLIkX3O
zvRyoDmpkkMVp8p+8uhmEd4KrvmgReGJimiZ2JkLuOvGOWgCKSRCEXqVYJy0mZp5
loWxSzArJzAd7ciLXEF3UAC5PbVnx6U/RN6BB1JS4+D9v1/hWVwY+kYEqACAfglD
LrvqSgyk+UaxQ7vjDU5mA0Ifd+bM3CzVOvPJiMXwTw9J/96s2qeZ6B0jS0BLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULAN+RHoPP8i/D1dbHrq18QTgdhIwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrpaDANBgkqhkiG9w0BAQsFAAOCAQEAgUHY
kc//ym3rARXijXwtXZm9zUdrg5v4CteUhdNZUF4gZE4AAisiCVz11/8UXlMlHk8G
PkYnuTMJkJvFt6W67N2OVaaVQmckLE7qDITc8ABulfE9L1Dddh27I55Ov5efU3/F
Ib5Ewt+MfTbXPh61brJgkNJisD4qU7EGyxpH4YX5gOPFiZDnzuZpuQtCymOko12A
sU6iGwmFF0cfVLGLvsFq0DzCXW3GsvHS2x5w6RPl0iXKmzm73QBQ25i0VEYtpuol
JYeB2ym8DN1WjMl1Xx61F11R5Bg+D+ydRKrZL+EVECSl1vBljMtlwgSuPMp0BqTY
iIp3Cyts8QsnpwFUOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org