Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          7dmbxbw2zrPsn2GGjNswuqwS404QHjq9OrsSXo/hP08=
Subject key identifier:   98:D1:EB:F0:B3:2A:4F:E8:60:FB:F8:29:B6:ED:2C:E6:54:59:E6:5A
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       714A7062584B22E4D6385049439F58E78C071AE5
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:37 +0000
ROA not before:           Fri 08 Mar 2024 19:04:37 +0000
ROA not after:            Fri 07 Mar 2025 19:09:37 +0000
asID:                     52858
IP address blocks:        2804:774:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4a:70:62:58:4b:22:e4:d6:38:50:49:43:9f:58:e7:8c:07:1a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:37 2024 GMT
            Not After : Mar  7 19:09:37 2025 GMT
        Subject: CN=98D1EBF0B32A4FE860FBF829B6ED2CE65459E65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:b8:df:cb:6f:ed:da:c8:b6:c8:bd:d5:df:
                    44:59:22:6e:e8:0a:c2:30:11:33:47:0d:c8:bb:1e:
                    b7:76:24:ad:b7:60:58:aa:fc:f7:91:7c:ca:99:06:
                    23:a6:50:8e:92:9f:a6:19:9e:b4:77:ef:39:a9:71:
                    85:72:db:40:e1:4c:11:3d:2c:dd:80:6a:88:d7:ce:
                    f8:c2:3a:aa:62:6f:75:4e:02:94:8b:e5:11:ad:28:
                    a3:c6:f6:a2:aa:21:fd:8e:37:e6:58:e9:79:45:89:
                    c6:03:ff:43:75:6c:47:51:61:fd:a9:08:2a:e8:0e:
                    64:2e:65:49:ed:32:ba:e9:67:54:88:dd:29:3b:8f:
                    ae:f4:6f:16:60:be:42:ed:ed:ce:fc:2c:57:e1:2d:
                    ec:13:3a:02:55:27:03:0a:b7:94:50:2b:dd:3d:9f:
                    35:68:e7:40:14:90:1e:94:7e:b7:87:fe:58:06:1e:
                    e4:bc:d2:e7:c9:37:a9:30:3b:8a:21:ee:a0:8c:3a:
                    d0:97:df:06:d4:11:6b:14:64:10:52:e9:98:82:58:
                    74:45:cd:49:7d:c5:1f:0a:62:a0:9b:2b:d8:a1:64:
                    3d:0a:de:f7:79:62:fb:da:0a:9b:ac:18:e1:a1:2b:
                    ee:ff:12:92:2e:c2:99:74:77:c4:fd:26:e1:4d:60:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:EB:F0:B3:2A:4F:E8:60:FB:F8:29:B6:ED:2C:E6:54:59:E6:5A
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:10:c6:63:57:61:a2:fb:7c:da:ab:56:a6:70:00:f6:48:56:
         7e:b6:8e:11:d1:b9:ed:1a:2e:39:cd:cf:44:aa:4d:e8:b4:c9:
         fe:e0:e1:76:7d:a3:0d:9e:06:13:56:0f:1b:02:50:7a:57:2c:
         d0:a3:b8:b3:a6:79:fd:14:0c:6e:a6:1f:9d:d1:91:b2:a1:57:
         28:7c:a1:c6:32:ed:68:0d:9c:af:14:c6:36:90:e0:d7:99:e1:
         4c:df:d9:fa:fe:5f:8a:da:e1:12:5c:44:16:6a:ea:2a:82:ae:
         dc:6d:e3:08:a5:3d:33:2b:7c:cc:44:77:61:bb:53:6e:42:32:
         58:ea:5f:6a:32:d9:84:e9:e1:d1:37:8a:04:41:5d:fe:14:48:
         45:92:e4:ce:38:6d:ac:de:9a:b7:d0:cc:59:ae:ac:58:21:69:
         84:09:f2:71:6b:f8:2c:88:5c:4e:cf:0e:3f:94:1f:b8:b4:fc:
         79:d7:75:2e:bd:00:41:71:88:8c:5d:18:d9:fb:02:b4:67:45:
         b9:a0:75:7d:9d:b8:23:b6:57:85:64:a2:21:2c:4e:81:c1:a7:
         fa:c4:0c:7d:12:64:d0:28:c9:70:a0:93:94:e5:c8:72:c4:1c:
         40:61:97:42:5e:d6:4a:b9:21:e1:ec:d2:a4:8f:80:44:8a:b9:
         f7:f3:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org