Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          LKLJb/+xEjWec95vMSnlFlt4OrCV5v29kP2HaWR4El8=
Subject key identifier:   18:DA:C2:A1:51:D3:55:EE:AE:1E:2B:43:9B:BE:50:9D:1C:1D:50:EF
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       0ABCF82A5137A7B3F58F153186E13B0164FFA8DE
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:34 +0000
ROA not before:           Fri 08 Mar 2024 19:04:34 +0000
ROA not after:            Fri 07 Mar 2025 19:09:34 +0000
asID:                     52858
IP address blocks:        2804:774:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bc:f8:2a:51:37:a7:b3:f5:8f:15:31:86:e1:3b:01:64:ff:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:34 2024 GMT
            Not After : Mar  7 19:09:34 2025 GMT
        Subject: CN=18DAC2A151D355EEAE1E2B439BBE509D1C1D50EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:c8:78:5d:53:62:d7:6a:20:03:99:91:76:
                    f8:90:0d:6e:82:18:50:9e:e6:23:54:53:0d:0e:ee:
                    83:14:88:c9:f3:44:84:cb:67:f0:ee:ad:b4:85:00:
                    c0:d8:26:5a:08:ef:29:c0:ea:0a:59:55:04:20:8d:
                    ad:5e:52:12:c0:c5:9a:3f:8c:37:fb:9a:f7:ec:06:
                    fb:0f:ef:dc:2a:13:27:bf:dc:ad:cc:01:fa:c7:cb:
                    6c:1f:c0:d2:e4:3b:7b:64:58:98:ac:86:c3:35:da:
                    a5:6e:58:92:be:bc:2b:b1:91:d6:7d:8c:f6:63:3e:
                    df:8d:24:71:08:f4:64:17:64:2c:45:4d:3f:83:de:
                    15:ee:10:97:17:53:65:91:da:b5:f4:d2:47:80:9b:
                    a1:9e:b1:b4:67:3a:d9:e2:92:1d:29:74:05:2f:af:
                    26:54:b8:4e:25:98:1e:32:fb:26:e4:5e:d1:55:3b:
                    80:9d:b9:24:c7:9a:88:55:96:16:67:16:d3:03:15:
                    5f:4f:b3:62:da:21:b0:b0:a9:c8:48:c3:8d:28:eb:
                    c2:23:1f:31:28:35:78:25:69:55:0a:15:73:22:18:
                    d0:fd:d9:0d:fd:1c:f1:2f:c7:45:9b:f5:05:43:d6:
                    a1:71:ed:6e:53:31:03:f9:1b:78:8d:07:60:f5:4f:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DA:C2:A1:51:D3:55:EE:AE:1E:2B:43:9B:BE:50:9D:1C:1D:50:EF
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:db:a1:7f:65:9a:16:5e:66:47:26:59:0f:03:80:d0:0e:
         c4:cc:3f:d2:1a:9f:08:d8:a8:db:e9:27:cd:9d:aa:4f:33:c8:
         82:79:08:5a:af:0e:d6:fc:ba:ba:bf:a9:8c:23:84:a2:17:b3:
         a0:78:b8:f5:ee:0b:c0:2b:07:26:62:c7:95:21:01:60:61:d5:
         21:4e:6d:99:75:b4:37:89:0b:1b:bb:d3:66:62:54:dc:09:9b:
         c8:cb:a6:de:4b:a8:40:a4:8f:2f:68:a5:71:ac:cc:df:9f:3b:
         b2:01:e7:50:7c:c3:50:48:7f:84:df:86:da:f3:a4:2e:74:85:
         ba:c8:e9:eb:89:df:93:bf:53:01:c9:c2:ce:f0:b7:93:5f:f9:
         92:ae:77:f1:97:19:1c:fa:c3:e8:0d:0d:6e:66:cb:94:4d:fb:
         15:26:5e:66:77:44:1a:25:a1:6a:a9:f0:63:13:c3:a7:63:2e:
         49:fc:46:32:ea:5a:94:56:ff:82:32:f5:c5:20:aa:9e:e8:6e:
         b7:b4:e5:ae:18:19:e4:7b:47:53:38:0a:f6:ea:cb:a8:96:bb:
         89:68:20:c1:72:33:f4:65:e8:02:1b:2b:df:a8:97:b0:94:2a:
         86:94:8c:97:d0:30:18:49:ee:2f:6c:47:ba:04:67:d4:35:03:
         9d:ac:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org