Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666530303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666530303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          g8nzKhzpqdEZWAJwhi1271Of9TJWk8pM9fAONRG24mY=
Subject key identifier:   3F:71:FC:A6:02:76:45:78:4E:1F:5E:45:73:D8:A1:D6:F3:6F:03:EE
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       6A89089FB703F96A2A8509DB1506C12B596DF11E
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666530303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:05 +0000
ROA not before:           Fri 22 Dec 2023 20:20:05 +0000
ROA not after:            Fri 20 Dec 2024 20:25:05 +0000
asID:                     263073
IP address blocks:        2804:954:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:89:08:9f:b7:03:f9:6a:2a:85:09:db:15:06:c1:2b:59:6d:f1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:05 2023 GMT
            Not After : Dec 20 20:25:05 2024 GMT
        Subject: CN=3F71FCA6027645784E1F5E4573D8A1D6F36F03EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:8d:3e:fb:55:e4:d2:55:af:3c:46:3e:0c:
                    bf:8b:99:a8:2f:0b:0c:6f:88:c7:c6:72:a0:a7:60:
                    31:81:b1:b3:76:30:20:4a:83:08:bd:d1:ff:1c:9a:
                    fc:ce:fa:41:2f:6e:b3:24:99:df:fa:01:78:35:1b:
                    35:0a:83:fb:73:6c:7d:e4:43:73:44:a5:4e:52:7c:
                    4b:48:4a:a3:5e:fd:6f:9a:77:5b:8c:88:d7:82:e2:
                    b0:e5:4b:68:7a:b2:e5:3c:16:c2:32:66:57:ac:2d:
                    21:36:ea:ae:98:39:7a:8f:62:65:37:d6:68:4b:36:
                    24:27:6f:f7:89:69:d5:7c:99:10:5c:8c:81:49:f8:
                    ba:a8:dd:18:fd:f5:38:ce:8f:19:a5:b9:17:c9:e2:
                    2a:b7:89:9e:60:dc:3f:97:cf:22:d9:d2:fd:f6:7b:
                    f1:bd:ca:cd:cd:b9:f4:f5:f9:21:3d:83:d7:9d:d8:
                    5f:e4:5a:c2:e5:8b:fc:c9:62:13:f5:13:90:ec:9d:
                    c7:9f:4e:70:eb:49:85:e1:47:55:1d:c4:3f:b6:a8:
                    1a:82:ce:ce:b1:b4:34:8a:25:12:f6:b6:e5:ef:d6:
                    71:9b:40:08:23:52:90:4a:a1:55:bd:38:15:7f:c1:
                    28:da:58:06:f4:7a:3e:3c:48:15:05:bc:61:cc:6f:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:FC:A6:02:76:45:78:4E:1F:5E:45:73:D8:A1:D6:F3:6F:03:EE
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a666530303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:35:60:76:eb:bf:6a:9e:fb:b6:ac:36:03:e9:56:93:c7:d1:
         ad:a3:1a:a1:cb:f5:23:30:2a:c8:49:48:ac:93:51:9a:ec:41:
         07:b8:f6:6f:f1:ee:a1:62:f1:15:cb:a9:2d:98:a2:ff:51:53:
         92:b6:b3:9f:e4:40:c0:8e:09:6d:54:4e:9b:04:23:84:18:5d:
         66:11:2c:3a:17:67:c0:04:92:76:d3:37:be:cb:96:5f:09:dc:
         28:52:be:9d:91:34:06:2e:56:21:30:ff:1a:3d:fc:32:da:44:
         0f:5f:9c:98:05:b7:50:7e:c7:81:96:f4:80:53:62:f0:aa:52:
         dc:59:65:7f:01:e5:2f:df:2f:29:fe:65:9b:e6:9b:c7:e0:c4:
         8b:3f:4b:53:3b:99:5f:e4:96:a4:9a:7b:47:a2:a5:16:a8:83:
         ba:86:0c:23:46:3a:b3:75:ab:e9:b5:b9:7a:34:94:da:37:57:
         a7:8b:e3:57:0e:2c:53:5c:13:06:1f:c0:73:5b:e6:af:31:06:
         a9:51:e7:1a:8b:f1:a4:83:46:bb:07:98:7b:b7:62:0a:95:af:
         80:95:32:57:e7:ea:13:ae:1f:ea:83:bd:c6:c8:f3:4a:59:43:
         93:54:51:7a:2d:2b:ce:be:6f:a6:b4:ea:17:f5:78:e0:28:e5:
         1b:07:0a:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaokIn7cD+WoqhQnbFQbBK1lt8R4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGM0JFMUE4ODUwQzE1QThFNUMyQ0E2NEQ3RDZCQUYx
RENDOUNDNDAeFw0yMzEyMjIyMDIwMDVaFw0yNDEyMjAyMDI1MDVaMDMxMTAvBgNV
BAMTKDNGNzFGQ0E2MDI3NjQ1Nzg0RTFGNUU0NTczRDhBMUQ2RjM2RjAzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdI0++1Xk0lWvPEY+DL+Lmagv
CwxviMfGcqCnYDGBsbN2MCBKgwi90f8cmvzO+kEvbrMkmd/6AXg1GzUKg/tzbH3k
Q3NEpU5SfEtISqNe/W+ad1uMiNeC4rDlS2h6suU8FsIyZlesLSE26q6YOXqPYmU3
1mhLNiQnb/eJadV8mRBcjIFJ+Lqo3Rj99TjOjxmluRfJ4iq3iZ5g3D+XzyLZ0v32
e/G9ys3NufT1+SE9g9ed2F/kWsLli/zJYhP1E5DsncefTnDrSYXhR1UdxD+2qBqC
zs6xtDSKJRL2tuXv1nGbQAgjUpBKoVW9OBV/wSjaWAb0ej48SBUFvGHMb2B5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUP3H8pgJ2RXhOH15Fc9ih1vNvA+4wHwYDVR0j
BBgwFoAUP/O+GohQwVqOXCymTX1rrx3MnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC8zRkYzQkUxQTg4NTBDMTVBOEU1QzJDQTY0RDdENkJBRjFEQ0M5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRjNCRTFBODg1MEMxNUE4
RTVDMkNBNjREN0Q2QkFGMURDQzlDQzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzIzODMwMzQzYTM5MzUzNDNhNjY2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAlU/jANBgkqhkiG9w0BAQsFAAOC
AQEANDVgduu/ap77tqw2A+lWk8fRraMaocv1IzAqyElIrJNRmuxBB7j2b/HuoWLx
FcupLZii/1FTkrazn+RAwI4JbVROmwQjhBhdZhEsOhdnwASSdtM3vsuWXwncKFK+
nZE0Bi5WITD/Gj38MtpED1+cmAW3UH7HgZb0gFNi8KpS3FllfwHlL98vKf5lm+ab
x+DEiz9LUzuZX+SWpJp7R6KlFqiDuoYMI0Y6s3Wr6bW5ejSU2jdXp4vjVw4sU1wT
Bh/Ac1vmrzEGqVHnGovxpINGuweYe7diCpWvgJUyV+fqE64f6oO9xsjzSllDk1RR
ei0rzr5vprTqF/V44CjlGwcKcg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org