Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3131312e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3233332e3131312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          SBCnaTPZoTXQW1kKF814YDDcDDls9XfQSX5KBbsjATI=
Subject key identifier:   67:34:D0:AD:97:08:9A:BD:7C:55:26:25:A7:0F:41:10:52:C7:77:83
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       01241B538BD003E68CEDCD96DA5A6E7654E28F74
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3131312e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:11 +0000
ROA not before:           Fri 22 Dec 2023 20:20:11 +0000
ROA not after:            Fri 20 Dec 2024 20:25:11 +0000
asID:                     263073
IP address blocks:        186.233.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:1b:53:8b:d0:03:e6:8c:ed:cd:96:da:5a:6e:76:54:e2:8f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:11 2023 GMT
            Not After : Dec 20 20:25:11 2024 GMT
        Subject: CN=6734D0AD97089ABD7C552625A70F411052C77783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:95:c9:69:70:6c:d0:47:96:22:9e:3c:48:
                    92:f5:00:48:7e:98:fa:33:d4:f5:84:c2:e3:71:d0:
                    74:27:a7:dc:a9:ed:4d:92:50:01:5d:a6:ac:59:86:
                    1b:ea:58:cf:21:75:d5:79:ad:3e:6d:1b:da:6f:be:
                    8c:4f:04:ff:2c:02:11:49:5b:06:9f:be:e1:18:23:
                    48:a2:6b:c6:fb:4e:88:20:b2:e5:4c:19:cc:e6:f7:
                    b3:2b:a8:d5:9d:13:c4:38:63:f7:5d:e9:8d:1b:cf:
                    49:1a:78:42:d6:a8:da:63:23:22:8f:63:18:35:d6:
                    14:83:6d:0f:c1:03:18:7e:3f:31:d9:76:a5:9a:ba:
                    f7:96:dc:a2:17:3d:17:31:00:5f:88:3b:e6:c0:53:
                    32:68:41:9d:cb:4a:d1:11:e4:c7:49:9b:1d:a0:93:
                    94:2f:36:91:82:df:61:6a:9c:2c:4b:75:15:a0:1c:
                    44:73:81:bf:64:75:5e:13:ad:b0:af:54:5b:a4:d1:
                    e2:0e:a0:94:bf:9d:99:90:b9:a7:e7:13:0b:f6:3f:
                    c6:c9:a2:9a:9b:83:77:00:88:77:3e:b4:60:b5:1f:
                    7a:1d:6d:83:39:3d:e1:3c:47:71:f3:18:84:b2:44:
                    c6:46:f4:74:26:df:ed:03:73:c8:58:44:6c:80:db:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:D0:AD:97:08:9A:BD:7C:55:26:25:A7:0F:41:10:52:C7:77:83
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3131312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:a6:9d:b8:84:ea:6d:4a:77:d2:04:01:60:f8:fa:cd:d1:
         42:dd:78:73:c2:6d:9e:1e:97:9b:56:45:86:5e:5a:89:4c:96:
         69:9d:5f:4c:85:90:32:df:96:f1:8b:5b:1a:4c:02:a4:4f:c6:
         d4:ff:9d:84:d1:82:0d:7f:3d:d5:7e:97:41:d8:70:97:c3:20:
         8b:68:46:05:df:62:db:ed:7c:9d:72:75:2f:c0:5a:a9:70:1a:
         ba:0f:03:94:bf:d9:14:d5:4f:f8:92:4b:8e:42:04:83:46:1a:
         92:0a:bf:f1:96:70:77:a2:f5:bf:c4:bc:6b:3b:e4:a7:78:a1:
         00:eb:6a:52:75:28:8e:be:b0:60:ec:b9:98:d6:ff:49:80:45:
         d4:3d:07:a7:cf:22:d6:f3:4e:94:d0:5c:80:da:b8:88:13:80:
         3b:18:12:7a:42:9d:4f:0e:e4:7a:71:07:5f:63:21:a3:3a:79:
         0c:b3:e1:88:d0:23:35:2b:a2:7e:76:12:d6:e2:a7:b3:da:e1:
         ae:cf:ed:9d:bc:5d:1d:f4:7c:fb:d4:04:e5:79:d3:61:31:ca:
         aa:a7:c0:65:a3:46:2a:fd:ca:68:ca:0a:0f:30:02:a3:21:e6:
         3c:68:9c:59:a6:34:52:5e:30:11:30:7f:c0:4d:cf:0d:96:39:
         1c:88:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:17 2025 by rpki-client