Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666330303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666330303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          BvJTweoL3mEEL4uwRdQXQHW/nSaYPb4XkEcA5kBZg2A=
Subject key identifier:   ED:FC:CC:FD:09:0F:25:30:A2:6A:8D:61:43:81:68:51:A6:7D:E4:C1
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       6120892E32AC956739860752E399FE011F0A78AD
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666330303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:04 +0000
ROA not before:           Fri 22 Dec 2023 20:20:04 +0000
ROA not after:            Fri 20 Dec 2024 20:25:04 +0000
asID:                     263073
IP address blocks:        2804:954:fc00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:89:2e:32:ac:95:67:39:86:07:52:e3:99:fe:01:1f:0a:78:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:04 2023 GMT
            Not After : Dec 20 20:25:04 2024 GMT
        Subject: CN=EDFCCCFD090F2530A26A8D6143816851A67DE4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:04:47:90:96:1c:3f:64:24:6f:c7:a9:49:
                    66:07:8d:61:ff:cf:aa:15:af:7d:fc:ea:e7:de:5a:
                    14:1d:d3:10:37:dd:e2:b3:4d:d7:b9:a8:27:dd:73:
                    ea:42:21:93:84:da:9b:4e:a6:22:2e:da:46:71:ca:
                    98:16:9d:dc:2f:4a:98:b9:77:aa:a2:aa:2e:5d:a3:
                    2b:ab:ac:4b:c1:c5:4b:48:74:8a:2d:c4:f5:7b:88:
                    f6:a9:0e:3a:0f:d6:2a:c4:00:a8:93:ca:61:d8:39:
                    df:c9:17:64:ea:9b:80:77:88:97:c3:5f:c1:89:a9:
                    cf:e5:76:4e:fc:f3:8f:30:fb:b3:e7:7d:2c:89:db:
                    b1:53:e2:fe:57:41:be:38:b9:8d:de:aa:42:22:43:
                    8f:50:18:0c:0b:6d:35:36:02:b5:3c:e1:e2:4e:84:
                    1a:16:ab:65:eb:6a:69:6d:39:5b:5b:2d:c1:61:6a:
                    a4:af:66:32:93:45:2d:c2:9f:5b:c4:cd:7c:09:2c:
                    1b:bb:2b:dd:de:99:b5:0e:8c:26:46:a4:4f:61:68:
                    53:10:9a:75:99:1a:9f:e1:95:59:33:16:0d:24:e6:
                    86:a2:5a:a9:dc:28:f0:70:50:48:2d:a5:3f:b2:ea:
                    80:d8:9c:ae:b8:bc:70:9a:08:cc:ab:d1:a0:d2:a8:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:CC:FD:09:0F:25:30:A2:6A:8D:61:43:81:68:51:A6:7D:E4:C1
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666330303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:49:de:97:73:90:24:98:79:e3:90:99:c0:48:ce:34:2a:
         80:93:b9:f5:23:4b:3b:90:56:a2:0e:9d:ac:95:00:bb:32:17:
         d5:30:c1:e1:7f:81:52:42:f2:fd:f9:d4:fe:44:25:bd:55:02:
         a6:3d:28:cf:89:85:5d:94:9b:2e:27:10:cb:ee:a2:b5:8f:6c:
         03:b9:6a:78:0b:58:aa:62:ce:84:9a:29:98:82:51:c1:12:9a:
         69:46:2e:af:be:f8:c3:18:3b:3d:ff:c7:7f:19:0f:58:94:be:
         54:2d:98:1a:51:c0:3f:40:96:66:d2:d1:89:e5:15:dc:c6:b6:
         06:ec:22:69:67:c8:83:b4:96:aa:8f:4d:da:89:26:ab:ad:a5:
         d9:f1:3e:05:0d:28:a7:04:fa:35:98:e9:ce:40:70:00:41:00:
         63:bf:2a:9a:77:37:bc:a0:dd:90:1c:51:1d:6b:f4:84:d1:53:
         26:20:df:5e:04:32:51:7f:6e:97:85:c6:0d:86:97:70:73:69:
         ef:db:84:34:20:85:e0:d5:bf:0b:74:b7:01:17:34:d5:41:ac:
         55:91:5b:b4:94:6e:9e:d2:db:ce:2f:44:69:3e:c1:77:8c:ae:
         44:0a:1c:78:a6:a9:77:27:1e:d8:e0:cd:cb:f8:fa:78:1b:e7:
         7d:e0:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org