Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          pHKz0/6acqu8Ogk2YxqoZM16P/AkmFc8NdMZH4lVGlo=
Subject key identifier:   D9:4F:D5:AB:8B:F9:DD:68:E1:90:E0:A1:4C:91:FF:8B:14:78:B2:67
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       617180A5D7972E71594926CEBE143A25016653FF
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:13 +0000
ROA not before:           Fri 22 Dec 2023 20:20:13 +0000
ROA not after:            Fri 20 Dec 2024 20:25:13 +0000
asID:                     263073
IP address blocks:        2804:954:22::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:80:a5:d7:97:2e:71:59:49:26:ce:be:14:3a:25:01:66:53:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:13 2023 GMT
            Not After : Dec 20 20:25:13 2024 GMT
        Subject: CN=D94FD5AB8BF9DD68E190E0A14C91FF8B1478B267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:00:03:e9:fc:98:ab:98:26:75:52:71:66:
                    41:bb:f0:fa:06:3e:b8:04:7a:d6:39:70:5c:e1:da:
                    5a:53:e5:c9:db:32:cc:c0:77:41:56:43:5c:a4:96:
                    d2:39:13:d0:b8:ff:f6:ce:2e:ca:68:df:29:e7:ed:
                    4d:8b:93:fa:b9:dc:2a:2d:ce:4e:c6:ee:f5:f0:9c:
                    f5:28:38:a7:bc:64:b5:c8:a8:0b:56:03:cb:60:d5:
                    ea:53:b5:bc:5a:ed:82:64:f8:c1:4a:2a:27:11:5f:
                    d9:f5:2f:69:79:d9:92:fb:9e:88:8c:6f:70:da:d8:
                    87:46:fd:fa:ad:b1:84:2e:36:e8:ef:0e:57:d0:8f:
                    c3:1b:83:40:02:42:62:e0:19:d1:f7:fa:d6:07:1b:
                    71:a1:4c:52:95:2e:f3:4a:e3:60:08:28:03:d8:0e:
                    b2:f8:f3:01:6b:78:74:dd:09:8b:a8:8e:12:a3:0e:
                    96:aa:e1:a4:89:15:0a:f1:97:1e:30:f4:eb:25:1c:
                    c1:1e:15:55:9c:88:73:d5:b2:bd:43:91:d7:74:23:
                    00:62:8e:7d:3e:71:93:98:2a:ee:8c:0f:d6:ac:14:
                    82:93:82:f5:18:20:1b:83:2e:e6:7b:03:23:a0:a9:
                    99:15:6a:4a:94:27:ce:2a:b0:15:5c:1d:18:8a:b4:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:D5:AB:8B:F9:DD:68:E1:90:E0:A1:4C:91:FF:8B:14:78:B2:67
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ce:ee:83:9f:9b:1c:cd:b3:8e:c1:58:eb:dd:95:4a:b8:1f:
         d0:b6:3d:13:bc:f5:7a:11:b3:5c:e2:74:44:b3:e8:7c:86:65:
         dc:28:8d:29:73:64:3b:46:57:ec:6c:c1:2b:12:c0:1c:08:18:
         05:3b:b0:bf:cf:96:86:48:a2:17:80:18:2c:84:83:d4:94:bb:
         15:df:80:fb:72:81:ca:49:e4:ac:78:cd:4c:4e:d0:31:4c:a8:
         04:38:03:8d:1b:ed:e9:37:21:92:62:2a:9b:3e:bc:32:c3:bb:
         d8:5f:d7:ae:34:b7:e6:46:ee:1b:79:cd:f0:fc:01:ee:45:82:
         a1:bf:fb:ab:70:2f:3e:16:6a:9a:af:bf:fa:f2:c0:2f:02:db:
         37:cb:c0:ce:8a:53:cb:5c:3f:15:f7:7a:45:6e:a2:44:0c:e6:
         62:be:78:b5:68:64:3a:ad:e8:ec:f9:85:80:03:e5:c6:56:63:
         01:48:15:c7:e8:4d:aa:b2:00:ae:b8:8f:66:30:8a:f7:05:77:
         1a:99:7b:3f:96:fb:e0:37:af:df:11:e3:78:15:17:1b:e9:27:
         1b:71:cb:2a:2d:a8:a6:ad:36:51:65:cb:10:86:ce:16:25:ec:
         cd:52:2a:52:2c:98:f4:83:f3:56:63:39:0c:ab:63:c6:27:d2:
         a8:4f:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org