Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          hnqbeHlbneOLaF/9Z3JkUbSdZNW45e8OesrD0cYmJcg=
Subject key identifier:   E1:83:2D:AC:84:A1:9D:FB:B9:6D:45:84:52:B7:14:3F:8C:B6:57:53
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       5E87871F49BC05D2BB9638BB358AF25DD792788F
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:07 +0000
ROA not before:           Fri 22 Dec 2023 20:20:07 +0000
ROA not after:            Fri 20 Dec 2024 20:25:07 +0000
asID:                     263073
IP address blocks:        2804:954:fb00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:87:87:1f:49:bc:05:d2:bb:96:38:bb:35:8a:f2:5d:d7:92:78:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:07 2023 GMT
            Not After : Dec 20 20:25:07 2024 GMT
        Subject: CN=E1832DAC84A19DFBB96D458452B7143F8CB65753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:f4:ef:bf:d8:52:5e:f3:ad:36:27:ad:85:
                    f7:ed:5a:c3:17:c2:38:83:ec:4c:fe:32:8f:c5:ba:
                    12:d5:c0:3b:7f:83:18:d2:28:ac:51:c2:c1:47:1f:
                    d9:50:96:c1:fb:3a:12:b0:34:02:5a:f3:80:57:48:
                    e5:63:bb:4d:12:aa:65:7a:ef:73:37:1a:77:d5:cf:
                    a7:5a:a3:76:28:62:35:60:17:4b:87:52:93:ef:d1:
                    6c:b1:21:16:f5:31:0a:8e:6f:a1:25:10:ba:9b:f0:
                    1c:bc:e9:79:03:d6:2a:3f:aa:45:cb:7b:a8:ac:11:
                    f3:33:5b:47:d6:25:8d:3c:d2:89:b2:f6:c2:35:b9:
                    ab:3a:fe:60:76:a9:0c:c7:52:01:cc:1b:60:e2:89:
                    aa:41:6a:04:63:14:f9:b7:9c:41:c7:b8:39:38:3e:
                    e3:97:3e:59:46:83:93:d9:f3:20:29:d4:49:f2:9f:
                    16:b6:13:14:5a:80:59:00:93:3e:11:1b:21:41:ed:
                    9b:dd:ed:2e:34:f4:9a:89:a3:80:85:08:d3:36:f0:
                    8f:36:16:92:56:c1:ba:30:36:f2:39:07:98:49:7a:
                    87:99:bf:07:55:f6:e3:14:7b:51:02:26:dc:76:b7:
                    2c:71:33:9b:f9:80:3e:ee:9e:62:c5:0f:fd:e0:23:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:2D:AC:84:A1:9D:FB:B9:6D:45:84:52:B7:14:3F:8C:B6:57:53
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:83:21:0d:78:f7:61:aa:e0:d4:7a:86:b0:78:07:e1:81:
         22:b3:17:3b:f8:30:5b:45:92:ee:50:a2:a9:0b:d7:37:f4:69:
         1f:65:f5:81:4f:f1:ab:a0:48:d2:22:b2:5a:0e:3e:d6:f7:20:
         c6:dc:23:63:c9:db:4c:fe:25:0b:39:86:78:2c:be:7a:bb:bf:
         d2:56:8a:29:50:49:7d:dd:dc:52:e3:cd:0b:96:59:31:2c:82:
         b9:43:e2:88:21:7b:91:3c:07:e7:dd:b2:97:dc:19:5d:0e:9f:
         fb:4b:66:88:23:53:f4:fc:13:3b:65:92:41:40:bf:0b:a3:da:
         9f:42:d4:a2:5e:df:17:d3:85:b9:2d:b4:85:1d:88:91:0c:7d:
         fc:fb:b8:de:a8:ee:be:44:f9:78:3b:7d:a6:bb:a5:86:a1:44:
         28:0e:0a:cb:3b:d3:7f:bf:bf:df:ac:c5:77:d9:71:c2:3b:4f:
         8a:b7:2d:71:fe:31:d8:d5:14:1b:cb:ea:77:69:ca:a2:08:c3:
         29:df:57:f2:9f:a3:fb:fe:a2:6a:3b:45:bb:36:da:31:8a:12:
         86:84:14:c6:27:39:df:a5:f7:b0:bb:6d:b0:9b:7b:fe:26:20:
         af:26:e3:7a:89:12:81:aa:13:22:1e:a5:60:7e:6f:0e:d5:ef:
         07:7a:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org