Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3430363a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a3430363a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          OKjS8kl/1AgFKKBYqaXdz0K0Q27c+xZm3k/Ump7Zr8Q=
Subject key identifier:   DF:4B:45:48:85:E6:2E:8C:FC:91:2B:6C:DF:3D:15:D0:1A:2B:4A:03
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       67EFBC3CF8DEC2A05A17E34866146BE0106FEDDB
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3430363a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:11 +0000
ROA not before:           Fri 22 Dec 2023 20:20:11 +0000
ROA not after:            Fri 20 Dec 2024 20:25:11 +0000
asID:                     263073
IP address blocks:        2804:954:406::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ef:bc:3c:f8:de:c2:a0:5a:17:e3:48:66:14:6b:e0:10:6f:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:11 2023 GMT
            Not After : Dec 20 20:25:11 2024 GMT
        Subject: CN=DF4B454885E62E8CFC912B6CDF3D15D01A2B4A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:fa:aa:aa:27:13:97:4b:f1:3d:60:a2:ab:
                    09:ab:06:1a:41:f8:bc:15:7a:11:31:0a:1b:15:d2:
                    b3:6c:e3:eb:76:5a:ab:82:d9:9b:c2:23:07:fe:ec:
                    70:b2:75:f9:f2:54:53:f8:91:f1:7d:db:dd:6b:d4:
                    38:24:99:80:26:6b:5f:90:8b:5a:69:99:cf:4d:d6:
                    f3:86:ba:67:e4:00:65:b6:33:34:59:3e:44:53:37:
                    72:7b:9e:01:55:5f:04:59:7e:70:c7:0d:bf:9b:46:
                    cc:c4:c3:dc:70:ec:2a:00:21:28:5a:44:4a:81:d0:
                    d1:30:a7:2b:a1:4e:ff:31:c4:cb:62:ad:ab:bc:2f:
                    be:18:91:31:75:09:0a:ad:e4:a4:e9:81:d6:f7:19:
                    41:4c:11:2a:47:92:ad:70:df:ba:69:e7:be:83:92:
                    ce:6c:9f:49:3f:91:aa:f1:f5:7c:f4:0f:ca:87:89:
                    46:c2:a5:ef:93:fb:8c:8b:5f:74:03:fd:7e:88:2b:
                    10:86:8a:10:f9:b7:df:af:06:6b:eb:9e:74:1f:f7:
                    f9:65:f0:96:f6:2c:20:2d:25:af:c9:b6:a1:0d:3c:
                    3d:e8:c5:82:2c:30:1b:bd:8e:6b:83:75:e5:0b:f6:
                    ea:b5:71:23:22:2e:8c:e6:d5:40:29:02:91:c2:47:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:45:48:85:E6:2E:8C:FC:91:2B:6C:DF:3D:15:D0:1A:2B:4A:03
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3430363a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:55:ba:fd:69:7c:58:7f:41:f0:59:44:96:33:b2:6c:fb:
         97:60:23:db:00:8f:b1:f6:f9:28:20:78:95:cb:3d:b7:49:83:
         ad:f6:fd:f0:2d:bd:32:f1:d0:c6:6b:58:73:94:b9:50:62:f0:
         3c:d7:a7:33:5c:d0:ed:8b:9f:83:7c:b7:b7:ba:28:bd:13:bc:
         49:57:9c:68:e4:8b:7d:2c:3b:3d:8b:37:8c:21:94:16:7e:38:
         30:64:2f:64:38:88:92:a9:0a:1d:6e:52:58:8d:21:86:f4:ad:
         9c:63:a0:14:6e:fc:76:5c:e4:8b:23:d3:2c:a8:60:52:f7:04:
         9d:89:ad:07:73:7a:55:33:75:d1:23:1d:7c:60:08:44:ba:d4:
         2d:87:50:9f:ba:0a:e7:cd:29:82:b9:40:cd:04:35:1b:6a:27:
         4c:ae:fd:dd:7c:8c:b6:b1:45:36:c3:b4:58:58:26:cb:74:3b:
         a3:19:3f:d4:b2:37:a9:8e:b2:a0:03:14:37:8c:e7:60:b1:fd:
         72:e6:b6:08:5f:b0:1f:e8:24:7d:77:7d:c3:59:2d:c5:24:20:
         d0:8f:e3:41:81:20:de:c3:6a:20:0a:e7:e2:3d:4b:a7:f4:79:
         fc:1b:77:43:96:0a:60:1a:91:52:15:0c:1d:40:45:6a:d5:24:
         55:6e:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org