Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a313030303a3a2f33362d3336203d3e20323633303733.roa
File:                     323830343a3935343a313030303a3a2f33362d3336203d3e20323633303733.roa (raw, json)
Hash identifier:          6OiqbYl3kIOm4+ALXRen8GU2iZ8ODIFa0COY3wZMi14=
Subject key identifier:   37:8B:C1:06:1B:D3:BE:7C:27:61:42:42:96:1D:B3:5F:6E:8E:59:FA
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       0F80C082C900D044E0B5748DB9F5D4CB942882EB
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a313030303a3a2f33362d3336203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:09 +0000
ROA not before:           Fri 22 Dec 2023 20:20:09 +0000
ROA not after:            Fri 20 Dec 2024 20:25:09 +0000
asID:                     263073
IP address blocks:        2804:954:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:80:c0:82:c9:00:d0:44:e0:b5:74:8d:b9:f5:d4:cb:94:28:82:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:09 2023 GMT
            Not After : Dec 20 20:25:09 2024 GMT
        Subject: CN=378BC1061BD3BE7C27614242961DB35F6E8E59FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:e9:f7:61:7c:d9:dc:e8:53:27:02:32:4b:
                    54:b5:de:a3:33:19:bd:3f:07:73:2b:71:e0:4e:aa:
                    28:0f:49:14:55:8f:09:f8:1b:26:a4:9b:7c:78:7e:
                    6c:92:a8:68:a3:a2:56:23:a1:d8:3c:27:8b:31:1e:
                    e6:79:d6:ad:24:6e:65:ab:d3:78:52:c7:b9:f9:a2:
                    84:eb:aa:f3:8e:8b:89:9e:27:ce:e2:8a:b5:c2:7b:
                    c5:3c:82:32:9b:91:64:cc:ba:1a:1a:65:8f:ca:fa:
                    25:3b:65:42:71:aa:c5:87:e6:32:6c:a0:e1:46:5a:
                    6c:19:e5:17:30:d2:59:55:a8:30:c4:c8:6f:14:a0:
                    7f:3c:ea:17:d0:13:df:70:16:72:47:fa:18:25:d3:
                    26:90:85:08:02:23:a9:aa:23:c4:7d:fe:ea:36:03:
                    e1:a5:99:b4:3f:f0:8b:f7:77:49:21:9b:62:25:85:
                    53:0e:11:b7:c7:de:62:e3:3e:b5:56:1e:f9:64:ff:
                    b9:ca:5f:ba:1f:b8:65:63:69:14:c2:a4:94:ae:5b:
                    48:44:66:5e:25:76:db:05:d5:7d:b0:51:6b:9f:46:
                    bb:e1:b3:e9:63:b3:49:45:07:e9:8a:ff:02:98:24:
                    f4:a9:ed:50:40:3d:eb:ee:3d:4d:f4:40:79:03:3e:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8B:C1:06:1B:D3:BE:7C:27:61:42:42:96:1D:B3:5F:6E:8E:59:FA
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a313030303a3a2f33362d3336203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:89:6c:04:f7:61:e4:48:07:b2:81:99:a7:b2:f3:d3:4f:
         bf:7a:85:e8:19:af:46:77:5f:8f:cf:bc:16:43:36:95:fe:68:
         6c:79:6a:e3:ae:9d:0b:a1:dc:50:16:00:8f:58:1f:2a:59:21:
         5d:43:e5:73:b1:67:7c:b4:f4:9f:c8:25:ca:ab:7b:d7:18:54:
         86:36:52:36:6e:2b:63:89:d1:92:9d:63:0a:d5:59:4f:5f:09:
         52:95:5d:38:4e:01:4c:79:b3:6f:29:f4:2e:0b:b4:86:b8:26:
         2f:b8:1d:d3:a3:b0:4e:06:2e:72:d4:d3:c3:a3:8b:25:72:d7:
         03:d4:f2:14:26:5e:ff:d7:db:82:06:ff:c5:7f:ac:1a:f3:b0:
         4c:d6:a9:72:8d:4f:aa:d5:30:ee:e6:f7:75:8d:2b:52:3e:af:
         64:b2:92:dc:9a:78:72:5a:60:82:17:79:28:d0:2c:66:86:59:
         fd:de:5a:29:d9:5e:50:c9:1b:b6:d1:ee:3f:7d:cc:1f:09:c0:
         d4:f5:56:94:ce:71:90:6a:40:7f:1c:42:86:33:88:cb:94:39:
         12:f2:e1:ce:8d:c1:a5:ca:15:35:c2:22:28:4e:99:70:0a:62:
         db:d1:cb:b1:32:ca:95:cf:f6:c8:3b:df:65:49:05:2d:c7:dd:
         26:f1:34:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD4DAgskA0ETgtXSNufXUy5QoguswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDlaFw0yNDEyMjAyMDI1MDlaMDMxMTAvBgNV
BAMTKDM3OEJDMTA2MUJEM0JFN0MyNzYxNDI0Mjk2MURCMzVGNkU4RTU5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcun3YXzZ3OhTJwIyS1S13qMz
Gb0/B3MrceBOqigPSRRVjwn4Gyakm3x4fmySqGijolYjodg8J4sxHuZ51q0kbmWr
03hSx7n5ooTrqvOOi4meJ87iirXCe8U8gjKbkWTMuhoaZY/K+iU7ZUJxqsWH5jJs
oOFGWmwZ5Rcw0llVqDDEyG8UoH886hfQE99wFnJH+hgl0yaQhQgCI6mqI8R9/uo2
A+GlmbQ/8Iv3d0khm2IlhVMOEbfH3mLjPrVWHvlk/7nKX7ofuGVjaRTCpJSuW0hE
Zl4ldtsF1X2wUWufRrvhs+ljs0lFB+mK/wKYJPSp7VBAPevuPU30QHkDPtuXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN4vBBhvTvnwnYUJClh2zX26OWfowHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzIzODMwMzQzYTM5MzUzNDNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAlUEDANBgkqhkiG9w0BAQsFAAOC
AQEAoH2JbAT3YeRIB7KBmaey89NPv3qF6BmvRndfj8+8FkM2lf5obHlq466dC6Hc
UBYAj1gfKlkhXUPlc7FnfLT0n8glyqt71xhUhjZSNm4rY4nRkp1jCtVZT18JUpVd
OE4BTHmzbyn0Lgu0hrgmL7gd06OwTgYuctTTw6OLJXLXA9TyFCZe/9fbggb/xX+s
GvOwTNapco1PqtUw7ub3dY0rUj6vZLKS3Jp4clpgghd5KNAsZoZZ/d5aKdleUMkb
ttHuP33MHwnA1PVWlM5xkGpAfxxChjOIy5Q5EvLhzo3BpcoVNcIiKE6ZcApi29HL
sTLKlc/2yDvfZUkFLcfdJvE0qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org