Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          9CkP02k5W4riCwfEeXNXbW6W0Rcc9EEChZts/vkNads=
Subject key identifier:   85:E7:AC:53:58:8E:58:AB:C0:F4:2A:CD:42:5F:A7:7F:96:E2:4A:E5
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       0B13B86016513F1093BF078F01F6F57D4C8992B5
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:07 +0000
ROA not before:           Fri 22 Dec 2023 20:20:07 +0000
ROA not after:            Fri 20 Dec 2024 20:25:07 +0000
asID:                     263073
IP address blocks:        186.233.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:13:b8:60:16:51:3f:10:93:bf:07:8f:01:f6:f5:7d:4c:89:92:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:07 2023 GMT
            Not After : Dec 20 20:25:07 2024 GMT
        Subject: CN=85E7AC53588E58ABC0F42ACD425FA77F96E24AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:d6:24:96:08:9f:43:f9:5b:0d:46:80:39:
                    bd:95:c2:ac:db:13:20:29:19:d4:02:90:b4:c0:7f:
                    a4:cb:c3:3e:ee:44:84:fb:28:63:de:86:ed:29:6b:
                    6c:cb:8c:db:26:5b:f1:2e:52:7e:3a:31:88:e5:8e:
                    4a:56:37:90:ce:b1:03:c9:0d:0e:45:1a:08:6d:fc:
                    9c:56:98:11:ea:54:23:58:13:9d:11:3f:73:be:c0:
                    6b:84:31:ce:97:15:61:45:41:74:93:20:e7:6f:3f:
                    8b:15:92:50:f7:fb:df:2b:21:2d:90:c3:09:dd:71:
                    9a:c6:c4:dc:1e:a9:3a:9f:2b:ff:dc:bb:c9:87:f2:
                    86:af:e0:18:6a:5d:a7:7f:7f:86:d8:b2:56:ef:62:
                    c5:57:f6:67:b5:c1:bd:22:86:03:fd:0c:f3:a8:03:
                    ce:e0:e1:68:59:51:77:ba:8d:25:95:93:fa:26:e1:
                    b8:45:b4:8f:fd:bc:e2:fd:f2:34:e5:c4:f7:0c:a1:
                    9d:0c:e5:4e:5c:4f:e9:48:00:e8:13:48:f6:65:41:
                    41:5a:11:1a:55:13:c8:a9:4e:c6:9b:8c:af:c3:fe:
                    42:d9:45:af:cb:d7:61:ec:f5:c3:38:d6:05:e5:66:
                    7b:59:f2:3c:3c:ac:40:ce:2b:f4:de:11:62:fc:db:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:AC:53:58:8E:58:AB:C0:F4:2A:CD:42:5F:A7:7F:96:E2:4A:E5
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cc:48:2d:5d:b5:4e:b4:c3:f7:19:3a:7a:cc:00:54:d1:51:
         41:6b:b1:f0:91:36:58:1e:14:4c:ab:d6:01:54:6d:0c:b3:ce:
         08:11:98:04:3c:2e:22:ba:4e:94:9b:77:38:ac:d5:be:bc:3e:
         d3:f9:6b:1d:71:b8:cc:6b:4f:a6:42:d1:1e:c4:ea:13:e6:aa:
         bc:23:63:fe:79:d5:d0:1e:61:c0:06:a6:8d:ff:41:f6:c5:00:
         d4:01:ba:da:76:0a:6c:c8:51:4e:ab:c0:10:24:2b:81:9a:12:
         6e:3c:30:53:a0:fc:c5:48:d3:d9:1d:37:33:3e:e9:6e:cd:2b:
         0a:27:8a:50:f0:0f:93:a6:82:ba:1c:ad:13:2d:f3:c8:2f:8f:
         28:85:7c:05:98:c7:04:6c:9e:b4:83:75:9f:7a:f4:d3:5f:fe:
         ea:bc:02:20:5c:60:52:d5:25:a8:75:b7:a3:da:23:95:9d:24:
         21:cc:bf:b0:af:4b:30:4b:60:de:5f:5e:89:b0:cf:3f:37:58:
         bc:da:40:31:f5:2a:5d:02:f3:e5:f7:df:aa:ae:6a:06:53:bd:
         d4:e4:ab:39:e1:c1:77:80:55:84:69:c9:ad:38:82:d7:32:a1:
         0c:28:29:65:4e:88:28:f2:b4:43:b6:37:ae:17:96:4d:99:77:
         ca:be:dd:32
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCxO4YBZRPxCTvwePAfb1fUyJkrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDdaFw0yNDEyMjAyMDI1MDdaMDMxMTAvBgNV
BAMTKDg1RTdBQzUzNTg4RTU4QUJDMEY0MkFDRDQyNUZBNzdGOTZFMjRBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmG9YklgifQ/lbDUaAOb2Vwqzb
EyApGdQCkLTAf6TLwz7uRIT7KGPehu0pa2zLjNsmW/EuUn46MYjljkpWN5DOsQPJ
DQ5FGght/JxWmBHqVCNYE50RP3O+wGuEMc6XFWFFQXSTIOdvP4sVklD3+98rIS2Q
wwndcZrGxNweqTqfK//cu8mH8oav4BhqXad/f4bYslbvYsVX9me1wb0ihgP9DPOo
A87g4WhZUXe6jSWVk/om4bhFtI/9vOL98jTlxPcMoZ0M5U5cT+lIAOgTSPZlQUFa
ERpVE8ipTsabjK/D/kLZRa/L12Hs9cM41gXlZntZ8jw8rEDOK/TeEWL823RbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUheesU1iOWKvA9CrNQl+nf5biSuUwHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrpbTANBgkqhkiG9w0BAQsFAAOCAQEAR8xI
LV21TrTD9xk6eswAVNFRQWux8JE2WB4UTKvWAVRtDLPOCBGYBDwuIrpOlJt3OKzV
vrw+0/lrHXG4zGtPpkLRHsTqE+aqvCNj/nnV0B5hwAamjf9B9sUA1AG62nYKbMhR
TqvAECQrgZoSbjwwU6D8xUjT2R03Mz7pbs0rCieKUPAPk6aCuhytEy3zyC+PKIV8
BZjHBGyetIN1n3r001/+6rwCIFxgUtUlqHW3o9ojlZ0kIcy/sK9LMEtg3l9eibDP
PzdYvNpAMfUqXQLz5fffqq5qBlO91OSrOeHBd4BVhGnJrTiC1zKhDCgpZU6IKPK0
Q7Y3rheWTZl3yr7dMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org