Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          rUIHMQ5qQKVNFjvypLal2v+4QSJ1OFrWNYuLpLR37aA=
Subject key identifier:   7D:05:D5:A4:6C:B7:E2:4F:A7:20:42:DF:36:D8:5C:A9:74:F0:16:12
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       6DE6D8CD8D9E3326D8068B13565CD39AC6F3CBDE
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:32 +0000
ROA not before:           Fri 08 Mar 2024 19:04:32 +0000
ROA not after:            Fri 07 Mar 2025 19:09:32 +0000
asID:                     52858
IP address blocks:        2804:774:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e6:d8:cd:8d:9e:33:26:d8:06:8b:13:56:5c:d3:9a:c6:f3:cb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:32 2024 GMT
            Not After : Mar  7 19:09:32 2025 GMT
        Subject: CN=7D05D5A46CB7E24FA72042DF36D85CA974F01612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:24:c7:69:b4:2c:a0:24:06:78:4a:38:9e:
                    4c:02:78:62:ce:f1:36:46:ee:bb:75:e7:45:ea:f0:
                    78:2f:ac:d0:cb:e6:d4:7e:0f:00:7b:ae:ca:57:e4:
                    8b:65:14:4b:a1:b7:1d:66:91:eb:6e:77:41:a8:92:
                    c8:0e:79:89:2f:75:30:88:43:7a:04:57:1a:e6:0a:
                    e8:5e:b4:3e:d1:09:aa:cf:d7:4a:3c:9c:fb:81:f8:
                    75:fd:b2:ae:ae:13:9b:bd:6f:7c:8e:cb:e5:3d:eb:
                    01:f2:98:16:11:1e:0e:43:2b:22:92:38:d1:ae:20:
                    11:cb:45:f6:1b:57:cb:fe:87:27:2c:45:02:d6:d8:
                    99:6d:2c:29:8d:fa:b1:93:30:48:39:90:9e:fd:2c:
                    c2:b0:35:7e:3c:3a:c2:e9:70:ac:ab:c0:87:fe:38:
                    d9:7a:c7:34:70:7b:be:19:ba:de:55:b9:c4:90:72:
                    b4:53:20:3d:a2:67:30:42:04:36:27:d9:74:21:43:
                    99:71:9f:c6:ba:56:b3:d8:46:f2:c1:5f:ae:7c:21:
                    e2:9d:bc:89:01:3d:0a:2e:1e:af:59:b6:5b:d3:9f:
                    4c:61:96:b7:ba:3f:6c:08:97:a4:fb:5f:95:c6:df:
                    ba:af:e9:bb:3e:18:03:1a:16:9d:2d:b7:99:ec:4d:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:D5:A4:6C:B7:E2:4F:A7:20:42:DF:36:D8:5C:A9:74:F0:16:12
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:8a:a7:32:31:51:4a:22:49:5b:93:8f:ea:81:dd:1f:cc:48:
         90:7d:16:47:f4:62:58:b4:5c:eb:b3:87:65:ef:36:ea:ad:24:
         38:1e:23:a8:a7:07:aa:9a:78:3d:41:e3:5f:92:49:9e:ee:43:
         f0:15:6f:45:07:d0:03:b7:8b:12:4d:3b:91:3a:d9:0d:55:c3:
         8a:df:22:a1:a9:49:c7:90:32:40:5e:6e:7a:49:72:32:94:ec:
         d2:0a:a7:6d:10:e2:f3:d6:70:f6:cb:16:59:54:4c:17:ec:40:
         b0:16:26:08:9f:2c:26:50:e2:c4:ef:a9:7b:01:d4:ae:58:2a:
         a2:7f:46:ee:7a:83:67:21:f6:84:a9:70:44:4d:08:36:78:46:
         36:9e:c1:36:b6:eb:28:7b:ea:33:b2:9d:a5:c8:ae:c4:6a:b4:
         64:c3:78:0f:1e:71:c5:07:9b:c1:ca:0b:ff:9f:68:65:9e:b9:
         ac:fc:24:84:da:29:07:91:8c:1e:65:bc:4c:af:88:0a:9f:b5:
         f2:0a:65:f7:ca:e6:b5:49:61:3a:d6:09:c5:fb:da:fb:ba:f6:
         b2:58:90:78:cd:ee:b2:4d:1e:cb:31:38:70:23:23:6b:b6:db:
         2f:74:dd:45:95:b2:ff:fe:d0:4a:a8:2f:bb:55:e2:6f:0f:48:
         e1:8a:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:47:30 2025 by rpki-client