Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3830303a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a3830303a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          U6FNoLcO+utK6RHDlzvotaUt7ZG0qXdMmw1P4AAPi20=
Subject key identifier:   D8:B2:E2:15:DD:91:C1:F1:3B:24:54:95:0B:3B:37:2F:55:5D:A1:0E
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       16B7C527311A8DC6DEC7B82189AD419E8B360B89
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3830303a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:09 +0000
ROA not before:           Fri 22 Dec 2023 20:20:09 +0000
ROA not after:            Fri 20 Dec 2024 20:25:09 +0000
asID:                     263073
IP address blocks:        2804:954:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:c5:27:31:1a:8d:c6:de:c7:b8:21:89:ad:41:9e:8b:36:0b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:09 2023 GMT
            Not After : Dec 20 20:25:09 2024 GMT
        Subject: CN=D8B2E215DD91C1F13B2454950B3B372F555DA10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:14:a5:e5:f5:00:fe:99:cd:2e:3b:09:34:
                    20:ac:a5:b6:16:b4:69:06:26:6c:70:da:28:5d:fb:
                    83:15:85:3c:32:b9:6a:22:bf:8a:9b:e2:19:7f:92:
                    b2:43:fc:58:98:0b:de:08:08:0b:0e:38:73:1a:c5:
                    40:a4:87:df:f2:33:88:a1:df:fe:c8:df:10:42:4c:
                    e2:af:77:99:ed:fa:65:6d:15:d5:66:a1:4e:41:a8:
                    ad:6c:0d:6b:48:62:1e:af:c5:af:d8:ad:6c:11:d5:
                    4a:95:72:0d:0c:fe:92:7c:22:59:5c:2f:2e:2a:e9:
                    6c:1b:a7:fe:b5:ca:a1:de:12:6e:26:52:3a:80:7f:
                    b3:87:97:f6:c0:82:09:b3:df:14:78:65:54:16:2f:
                    fe:17:df:0c:26:b4:9f:a7:b0:8d:fd:a2:5c:3a:d2:
                    34:6c:cd:c6:1a:a2:c0:d4:2f:1c:ed:6c:2f:b0:45:
                    99:1b:65:c0:f0:b1:82:1e:d3:62:f3:41:c7:b8:e1:
                    fd:eb:ec:ff:89:6a:d7:f5:87:0b:7f:c1:d1:45:c6:
                    32:58:0b:1f:3a:56:3d:0c:f9:16:92:fc:b9:13:3f:
                    20:13:74:9e:fe:04:04:9a:de:fa:ca:7b:11:98:b7:
                    fe:a9:de:04:e2:6a:da:eb:92:f6:5f:59:fb:e2:95:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:E2:15:DD:91:C1:F1:3B:24:54:95:0B:3B:37:2F:55:5D:A1:0E
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3830303a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:f7:27:02:4c:7a:6c:e2:3e:1b:c9:de:52:6a:c1:ad:f9:
         67:dd:ee:b1:15:52:16:04:d2:02:2d:56:89:5b:d4:d4:35:4e:
         2a:0f:2c:26:63:f2:0b:23:40:c2:a5:5d:98:95:78:e3:cd:35:
         75:ed:1d:f6:a5:e4:d4:a5:43:6d:85:d0:43:5e:5a:b3:52:f4:
         fc:06:de:41:37:ca:91:49:79:52:c2:86:5f:d0:c9:81:24:8a:
         c3:02:78:a3:1a:90:fe:f6:3f:b8:90:e6:1c:26:59:09:16:d8:
         6c:88:41:09:dc:d4:c5:3a:b4:7d:10:71:c1:a2:74:e9:18:fa:
         3d:32:97:44:c8:77:4e:b9:3f:69:e1:e1:a8:6f:21:46:25:96:
         e2:75:71:c0:10:c6:01:5c:4f:a7:bb:bc:4c:59:52:33:64:30:
         27:98:57:69:5f:ed:7a:ab:50:50:a9:45:38:b2:cb:ff:17:9c:
         60:e0:05:68:a4:8e:ba:65:9d:62:fa:bd:a3:a1:59:7a:07:78:
         f1:4b:87:36:17:00:f8:fc:0b:e5:f0:18:61:03:93:b4:8b:80:
         bf:f4:76:31:88:47:29:34:5e:2e:87:d1:75:e5:5c:d6:2c:4f:
         20:6f:30:6c:c3:98:c1:89:bb:f7:85:3f:c7:64:c7:87:e5:1e:
         60:4c:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org