Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          VAoXOITGLSmjmcM8/2suFgj/F1imXMLSloNPyH1WTl0=
Subject key identifier:   CF:E8:F1:B3:3D:57:1D:7E:DA:81:0E:63:51:1B:AE:CA:9D:28:1F:64
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       4DD0744D4447C53330969B588FB7CF9D4717BAA9
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:29 +0000
ROA not before:           Fri 08 Mar 2024 19:04:29 +0000
ROA not after:            Fri 07 Mar 2025 19:09:29 +0000
asID:                     52858
IP address blocks:        2804:774:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d0:74:4d:44:47:c5:33:30:96:9b:58:8f:b7:cf:9d:47:17:ba:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:29 2024 GMT
            Not After : Mar  7 19:09:29 2025 GMT
        Subject: CN=CFE8F1B33D571D7EDA810E63511BAECA9D281F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:16:78:14:68:2e:d2:8b:90:20:f9:ad:3c:
                    91:06:18:10:51:0f:48:85:74:c4:31:94:dc:27:0f:
                    d8:96:e2:92:48:3a:c6:bd:98:ce:fc:95:83:1b:c0:
                    21:88:54:16:a2:b9:1f:b8:84:99:60:e4:75:62:6b:
                    46:83:7d:52:47:6b:9c:5e:69:91:13:da:80:86:cc:
                    60:e7:30:fa:ab:ac:5c:06:c7:58:7d:8c:31:7b:c9:
                    5b:61:85:31:94:60:76:a6:0e:75:17:8e:b9:62:de:
                    b7:13:36:6b:73:bd:c8:94:c7:6c:3b:c5:df:0a:81:
                    49:5d:de:05:b4:2a:ef:7b:e8:81:57:a3:aa:31:61:
                    bf:07:7a:5a:b5:8f:32:9c:38:66:93:41:8d:e3:9e:
                    22:16:33:83:e3:0a:68:f6:d1:fa:c2:e5:3b:fc:05:
                    8e:ec:9a:72:bf:5e:1c:b6:ec:ea:63:99:c7:e3:6d:
                    a0:5b:56:12:6a:31:37:4d:65:90:59:cd:b9:1d:34:
                    a1:eb:db:65:19:99:85:39:b9:b6:9c:f4:be:23:95:
                    97:7b:70:82:91:d3:86:ff:84:75:61:67:57:ee:bd:
                    8a:94:be:25:08:ac:53:a2:a7:17:1d:84:e7:43:dd:
                    dc:26:75:57:64:90:42:1e:3b:8b:e0:c7:94:2e:82:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:F1:B3:3D:57:1D:7E:DA:81:0E:63:51:1B:AE:CA:9D:28:1F:64
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:37:4f:c2:da:1c:9a:12:06:db:60:9e:18:05:09:03:7a:98:
         c8:51:82:e0:46:1f:45:a8:be:66:54:de:d5:52:6d:94:69:3d:
         c1:64:16:4b:ef:53:a0:be:e9:26:14:6b:c5:ba:84:4b:20:b5:
         3f:6f:14:a3:02:dc:60:1f:38:05:44:10:4c:84:50:6f:89:ef:
         73:42:72:69:90:98:07:56:68:7e:e4:70:57:cc:f2:37:b7:6f:
         6e:39:3b:7d:06:9f:0e:82:58:3d:80:bb:b0:d5:34:d8:74:11:
         df:1c:35:35:31:07:c6:f0:18:a1:30:60:f3:50:4d:b2:1c:af:
         b5:5a:3b:df:b6:e2:3a:d8:9d:e6:23:a2:f6:93:a5:e2:f4:79:
         aa:b9:74:de:e2:48:8a:f2:d6:3c:88:ee:75:8b:13:02:53:5f:
         80:f8:73:66:af:12:34:c7:8a:a7:f5:a0:62:59:88:18:ed:d2:
         68:11:89:5a:7e:9a:b0:ed:12:6e:3f:65:60:86:01:07:ed:83:
         aa:23:78:91:39:df:5c:df:58:1b:8c:55:3c:4c:f3:7b:92:70:
         4e:8d:2d:4e:52:ce:15:f1:ea:e7:be:90:c3:e7:f3:10:98:fe:
         46:a5:bc:81:2a:d4:d0:39:a3:59:0d:de:f1:88:ce:7e:b3:d7:
         9d:2c:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org