Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          nb/++n+ZVUT2NRZtw3Xvc/M6Tf9FCp4Pm1FgkzhNFzA=
Subject key identifier:   7B:3A:20:56:9D:11:48:E3:AD:A8:36:2D:9D:49:A8:8B:BB:D8:53:D4
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       3F5003657F54A58FE852BEABC3EC0AC192957A90
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:06 +0000
ROA not before:           Fri 22 Dec 2023 20:20:06 +0000
ROA not after:            Fri 20 Dec 2024 20:25:06 +0000
asID:                     263073
IP address blocks:        2804:954::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:50:03:65:7f:54:a5:8f:e8:52:be:ab:c3:ec:0a:c1:92:95:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:06 2023 GMT
            Not After : Dec 20 20:25:06 2024 GMT
        Subject: CN=7B3A20569D1148E3ADA8362D9D49A88BBBD853D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:b9:24:69:bb:ca:10:30:0e:b2:3c:ff:1d:
                    de:c5:34:2f:5b:b8:f4:a1:d7:db:ed:00:e2:d8:20:
                    63:b4:dc:6f:28:c1:74:62:0b:69:0e:90:46:b8:34:
                    eb:39:d9:df:d9:e4:93:3e:dc:6f:e2:8c:16:cf:4d:
                    22:be:c2:15:74:eb:ea:94:3e:67:66:ab:0b:36:ae:
                    cf:d6:17:8f:2b:95:59:83:81:d9:11:9e:0f:e9:57:
                    13:b8:b0:cd:36:a0:5f:18:6b:10:45:0c:6d:b6:e5:
                    23:06:4e:ed:9c:33:df:ab:72:cb:82:a5:10:31:70:
                    a8:a4:ca:28:93:94:b7:fa:43:23:fb:4a:a5:cb:5b:
                    c8:9d:cb:17:25:1f:96:30:77:85:68:54:eb:c8:72:
                    ce:ba:83:ab:70:26:79:bc:2b:25:3d:99:5a:f7:71:
                    73:92:53:71:6a:ab:fe:83:63:0c:40:61:8d:f9:2b:
                    33:94:e0:a9:94:b6:52:4c:e4:af:39:92:89:be:76:
                    8a:06:9e:d8:43:bb:27:00:ab:41:f5:67:7e:0e:06:
                    c2:bc:74:b9:d1:52:f2:35:8d:74:8e:70:61:da:e0:
                    b4:e9:9d:02:0c:f2:36:b8:44:fd:0f:b2:dc:48:0a:
                    93:aa:7b:16:b8:0e:21:00:8b:7d:78:e0:9e:a7:48:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3A:20:56:9D:11:48:E3:AD:A8:36:2D:9D:49:A8:8B:BB:D8:53:D4
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:97:68:cc:f4:7d:b4:19:7e:45:88:c2:15:84:f0:12:01:4c:
         27:db:8b:42:a1:ed:ca:f2:7e:79:30:8c:d9:31:67:fe:b3:38:
         00:a3:eb:7f:0c:e2:8c:58:58:95:cf:4b:01:d4:e4:44:83:25:
         38:da:c8:c6:4a:f1:65:ca:39:25:3f:b0:06:1b:8f:d4:c7:47:
         41:9d:a0:3a:0b:21:76:c2:19:bf:74:0c:ab:4c:3c:e7:d2:12:
         27:bd:d4:8f:45:fd:3e:e8:0c:68:1f:4b:cf:16:7e:5c:37:41:
         b0:ad:3d:f2:75:8a:e3:f3:3f:0e:e8:1c:dc:b6:82:c5:bf:9a:
         b2:05:87:e9:b7:44:4c:51:f9:e2:06:0d:62:65:65:f2:fd:98:
         69:6b:e1:df:9c:b9:1c:e6:df:22:26:ee:cc:ca:1e:3b:38:7d:
         89:f3:a2:36:f2:be:98:51:1f:eb:ef:3f:4c:1f:57:89:14:8b:
         50:8e:63:e3:f9:f9:11:17:dd:98:00:b2:80:fd:a1:c9:f0:fc:
         4c:b7:da:fa:35:c1:51:74:bc:75:d6:77:d9:d2:9d:0a:80:8b:
         a8:c4:fe:13:11:fb:46:37:8c:bb:e2:27:6e:32:a9:c3:e2:2b:
         4a:f6:8a:28:cc:65:62:ae:85:ad:73:50:6f:9b:71:48:c0:bf:
         4e:ff:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org