Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666430303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666430303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          ySG9/2qQT1wlpQIENJP5YuZV4wDG/7W7jelWkzU6HuI=
Subject key identifier:   16:A1:25:8B:78:24:7A:E8:42:D1:05:D7:39:21:E4:54:83:6E:B9:D1
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       2B9E2653AE4713CDEEA75FDD993A93315EACBB04
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666430303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:06 +0000
ROA not before:           Fri 22 Dec 2023 20:20:06 +0000
ROA not after:            Fri 20 Dec 2024 20:25:06 +0000
asID:                     263073
IP address blocks:        2804:954:fd00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:26:53:ae:47:13:cd:ee:a7:5f:dd:99:3a:93:31:5e:ac:bb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:06 2023 GMT
            Not After : Dec 20 20:25:06 2024 GMT
        Subject: CN=16A1258B78247AE842D105D73921E454836EB9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:6c:78:54:6d:67:d6:58:e2:d9:92:d3:34:
                    58:97:44:83:47:57:12:3a:46:84:a0:11:90:5d:d4:
                    bf:36:dc:53:50:94:12:58:03:f9:5c:43:96:a5:8e:
                    fc:e9:42:cc:37:f2:ee:35:d5:52:f9:4d:1e:b7:f2:
                    e6:4e:25:f0:86:4d:de:ee:58:5b:0a:54:89:45:0c:
                    32:1d:55:47:17:26:26:ab:92:b6:d1:0f:78:46:74:
                    45:a0:6d:dd:42:64:86:97:24:23:f6:aa:be:d6:f4:
                    d0:df:67:79:0e:19:09:e8:db:21:9d:72:2c:38:47:
                    1f:45:d6:a1:cb:18:10:33:db:01:04:ad:15:8f:26:
                    d7:70:37:10:8d:37:e6:af:69:12:8d:b5:52:77:fc:
                    ca:62:29:ee:80:6b:87:4b:a1:ed:83:f4:4b:e6:ca:
                    a6:32:08:6a:09:1f:35:ec:5b:27:8a:b5:43:50:29:
                    20:11:d9:cf:b0:27:8a:bb:3c:ee:2f:c2:42:ed:42:
                    d6:0c:74:7f:e9:f6:e0:3f:6a:cc:42:a4:68:a1:2d:
                    4a:71:03:37:c2:d5:f0:e5:0c:8d:d3:07:23:58:6d:
                    50:6c:29:a0:b9:34:10:29:0a:f4:39:3e:b3:04:7d:
                    e7:73:f2:e4:25:2a:cd:b0:66:da:7b:14:25:59:29:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:25:8B:78:24:7A:E8:42:D1:05:D7:39:21:E4:54:83:6E:B9:D1
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666430303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:84:2e:73:67:eb:4b:e4:83:22:f0:55:cd:92:ae:ca:4b:cc:
         ca:44:61:55:27:90:4f:97:97:bd:b3:24:b5:ca:cd:27:33:06:
         12:05:28:98:97:c4:4c:06:40:20:c1:3c:ab:9c:93:74:a7:16:
         22:47:56:a4:16:53:7f:f1:b3:3f:c2:bc:1c:78:71:b6:b7:69:
         2c:58:d6:47:55:77:5d:15:19:34:cf:f1:e8:12:d8:34:04:da:
         08:b2:8b:7f:08:dd:46:ee:a2:4c:d9:45:69:f6:19:0f:df:ac:
         7a:be:30:4e:14:ce:dd:99:84:a0:6d:6a:b8:72:a4:2a:b9:8c:
         51:06:e5:56:23:85:38:5d:bb:93:74:4c:f5:5b:d5:7b:17:a3:
         cd:51:cc:9b:e2:e2:9b:25:42:6c:44:41:48:21:31:dc:8f:1c:
         7d:58:f5:74:67:61:dd:3d:16:fa:d8:0a:47:79:a4:c0:8c:09:
         7e:16:77:c3:dd:3a:b9:44:a1:e3:89:4f:5c:a0:60:07:db:61:
         f8:76:d0:f0:4b:58:49:c6:15:7d:2b:c1:46:81:4d:50:6a:c1:
         31:8b:9d:3c:df:a4:87:89:16:4f:80:b0:eb:d5:d5:7c:f3:4a:
         13:e7:10:57:d4:10:7f:75:b3:d6:1e:53:88:f2:a1:93:95:61:
         73:3c:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org