Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa
File:                     3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          ZZKlvinH/pH4BiidvcCcTKrJKApJ2EQWcCCdoRwGBzw=
Subject key identifier:   C5:21:C0:AE:3D:F9:39:2C:7D:E3:F1:12:9F:D4:7E:06:82:99:99:B1
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       6E83D58B4DBEC855AD4408D39B4A79B3B721551C
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:06 +0000
ROA not before:           Fri 22 Dec 2023 20:20:06 +0000
ROA not after:            Fri 20 Dec 2024 20:25:06 +0000
asID:                     263073
IP address blocks:        186.233.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:83:d5:8b:4d:be:c8:55:ad:44:08:d3:9b:4a:79:b3:b7:21:55:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:06 2023 GMT
            Not After : Dec 20 20:25:06 2024 GMT
        Subject: CN=C521C0AE3DF9392C7DE3F1129FD47E06829999B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:18:3a:ac:da:f6:07:9b:6f:62:ae:53:8c:
                    76:de:f3:51:cb:d7:1f:d7:ab:a2:d0:e3:f8:10:08:
                    63:31:e2:06:07:25:2e:4d:e2:11:79:d1:59:0f:5e:
                    2a:d1:75:43:09:43:ae:6b:5e:fd:cb:f7:3f:4f:70:
                    00:3d:0a:b3:96:74:30:b3:a4:e3:81:f4:21:73:0d:
                    b9:b3:f6:b1:7c:0d:62:b0:97:7f:49:d6:9d:b3:2c:
                    21:f4:01:f5:ac:9b:e2:f1:9a:24:0c:87:5e:45:37:
                    a6:6f:80:45:d6:71:bc:4c:e3:95:4a:e8:d8:77:a9:
                    b3:f5:62:70:2c:62:58:4a:62:a5:ea:a3:34:e2:c0:
                    69:d4:7f:fe:0b:7c:ee:15:5f:cb:af:30:2f:01:89:
                    72:8c:25:34:e9:88:e1:25:a6:17:a4:b8:04:fb:51:
                    44:14:75:38:33:1b:0e:6d:e5:70:c5:cd:f4:8e:d4:
                    7b:6c:4c:94:45:a6:03:f8:e7:b3:75:4a:c9:2a:45:
                    94:58:41:3e:2d:cd:93:7b:54:cc:40:d3:94:51:d3:
                    9c:a3:de:2f:f3:99:bb:da:b2:39:2f:da:ee:50:d7:
                    10:2b:92:8b:ff:67:c2:2a:d5:74:82:da:e5:80:7e:
                    da:d9:ae:85:d9:e3:b5:cf:59:37:44:ed:09:2f:06:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:C0:AE:3D:F9:39:2C:7D:E3:F1:12:9F:D4:7E:06:82:99:99:B1
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:b8:f3:95:fd:9b:65:ea:45:36:84:90:e4:f5:90:67:a5:
         71:09:de:d8:e2:31:72:35:6b:bf:a2:df:8f:fe:78:51:f6:21:
         54:01:55:f5:fa:01:15:c9:91:d1:f9:5f:2a:44:0a:6e:6c:ae:
         74:ab:6e:4f:2e:a5:9c:1a:38:fa:04:d7:75:3e:28:25:74:db:
         16:a1:32:a8:cb:69:09:91:68:29:3e:cb:38:21:f5:09:18:a5:
         17:ed:fe:25:fa:5d:6e:7c:a4:f0:a1:a4:96:e1:e4:5f:a1:7c:
         a6:e2:a5:cc:32:50:1f:6b:65:50:d6:9c:94:17:6b:ba:5e:7c:
         35:c6:6f:52:5d:d4:27:0e:c4:33:9a:31:55:72:41:78:35:35:
         90:8c:4a:52:af:a8:3d:06:11:a1:5f:61:74:5c:5d:7c:dc:89:
         81:fd:91:d4:95:6a:d1:ae:8f:bc:80:b0:59:64:2f:8b:8a:89:
         c0:c0:20:79:41:a9:a7:4e:bb:1e:42:df:57:ca:a4:e2:13:5a:
         94:97:d9:b4:c7:cb:2c:51:4f:85:ef:a7:45:d1:6b:b9:58:57:
         1b:73:88:e6:b3:eb:fc:5c:00:da:b4:8d:56:f4:17:f6:13:7c:
         29:f7:e8:6a:d6:f5:f1:33:a3:45:85:83:4e:f2:d1:cb:d8:2f:
         ab:f7:12:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUboPVi02+yFWtRAjTm0p5s7chVRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDZaFw0yNDEyMjAyMDI1MDZaMDMxMTAvBgNV
BAMTKEM1MjFDMEFFM0RGOTM5MkM3REUzRjExMjlGRDQ3RTA2ODI5OTk5QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1hg6rNr2B5tvYq5TjHbe81HL
1x/Xq6LQ4/gQCGMx4gYHJS5N4hF50VkPXirRdUMJQ65rXv3L9z9PcAA9CrOWdDCz
pOOB9CFzDbmz9rF8DWKwl39J1p2zLCH0AfWsm+LxmiQMh15FN6ZvgEXWcbxM45VK
6Nh3qbP1YnAsYlhKYqXqozTiwGnUf/4LfO4VX8uvMC8BiXKMJTTpiOElphekuAT7
UUQUdTgzGw5t5XDFzfSO1HtsTJRFpgP457N1SskqRZRYQT4tzZN7VMxA05RR05yj
3i/zmbvasjkv2u5Q1xArkov/Z8Iq1XSC2uWAftrZroXZ47XPWTdE7QkvBpn3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxSHArj35OSx94/ESn9R+BoKZmbEwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrpbDANBgkqhkiG9w0BAQsFAAOCAQEAMPq4
85X9m2XqRTaEkOT1kGelcQne2OIxcjVrv6Lfj/54UfYhVAFV9foBFcmR0flfKkQK
bmyudKtuTy6lnBo4+gTXdT4oJXTbFqEyqMtpCZFoKT7LOCH1CRilF+3+Jfpdbnyk
8KGkluHkX6F8puKlzDJQH2tlUNaclBdrul58NcZvUl3UJw7EM5oxVXJBeDU1kIxK
Uq+oPQYRoV9hdFxdfNyJgf2R1JVq0a6PvICwWWQvi4qJwMAgeUGpp067HkLfV8qk
4hNalJfZtMfLLFFPhe+nRdFruVhXG3OI5rPr/FwA2rSNVvQX9hN8Kffoatb18TOj
RYWDTvLRy9gvq/cSFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org