Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383430303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383430303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          cnIo3ONuTbtp/S0B7YMKhj9Eom/divR/Ap1Y5BZPQfE=
Subject key identifier:   E3:2B:79:86:9B:AB:DA:3A:36:D1:34:3F:04:8B:96:F9:9A:7E:69:C5
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       50CAF1A33C7B430F8C9758BC5868AA02A238F835
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383430303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:39 +0000
ROA not before:           Fri 08 Mar 2024 19:04:39 +0000
ROA not after:            Fri 07 Mar 2025 19:09:39 +0000
asID:                     52858
IP address blocks:        2804:774:8400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ca:f1:a3:3c:7b:43:0f:8c:97:58:bc:58:68:aa:02:a2:38:f8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:39 2024 GMT
            Not After : Mar  7 19:09:39 2025 GMT
        Subject: CN=E32B79869BABDA3A36D1343F048B96F99A7E69C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:af:5c:6a:e2:1b:4e:34:5f:f6:c2:9c:c4:
                    f5:84:fe:99:5a:60:76:51:08:db:16:1a:29:9d:8a:
                    7a:e5:76:fa:b3:1d:95:cb:5c:03:b3:53:46:97:c1:
                    9a:87:c5:b7:5d:90:4c:ef:0a:54:ab:58:dd:c0:26:
                    00:74:7b:18:ae:5e:49:4d:5f:e3:f6:c9:f3:a9:e6:
                    e0:c0:a8:b7:e4:30:be:bb:43:39:f2:9b:75:f1:c5:
                    fe:4c:aa:d8:1c:da:71:8b:73:41:96:2f:a8:12:9c:
                    f9:63:79:9b:11:9f:ce:4f:23:32:0c:d1:e2:dd:c7:
                    c1:c5:48:13:93:94:3e:97:2e:c3:8f:9a:d7:c6:f2:
                    47:3e:5e:5a:a1:84:57:f0:0b:45:74:65:db:e2:c2:
                    f4:b3:16:5c:1d:67:ff:be:45:f4:e4:cf:4b:e8:e3:
                    76:9e:dd:bb:f5:b3:7b:df:43:26:c3:d1:70:af:70:
                    91:cc:f1:3f:81:56:d5:36:d0:7b:bc:c1:a3:d5:48:
                    bc:9e:a9:cc:3a:bc:8e:21:3a:5d:c2:f0:4c:17:cc:
                    bc:2e:dc:55:b2:54:18:96:cc:d8:e6:ea:76:df:b4:
                    45:aa:10:04:cc:8b:85:a6:c6:fe:be:2d:d0:db:eb:
                    b2:c7:a1:9e:0b:f4:db:68:72:26:59:72:88:7d:46:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:79:86:9B:AB:DA:3A:36:D1:34:3F:04:8B:96:F9:9A:7E:69:C5
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383430303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:83:15:7b:8c:01:9e:ca:39:6e:02:43:8a:8f:da:bb:ef:c7:
         bf:4a:0d:cc:3f:b3:81:3a:65:1f:53:6b:24:68:9c:c0:a7:9c:
         d6:6a:fc:0c:08:6b:57:23:25:02:1e:ce:49:46:c4:38:8e:3a:
         89:df:dc:84:5a:88:f2:d7:f5:6e:2e:2d:eb:c4:1e:23:a8:cb:
         5e:09:07:ea:9a:5c:20:53:b5:92:16:75:87:ca:e6:fb:5e:4f:
         a9:98:b7:a1:ab:59:67:2e:a4:a8:f0:b3:95:d5:91:e6:25:ce:
         cd:43:97:c1:71:83:7a:c0:df:74:05:61:f1:6b:12:54:c2:00:
         ab:80:9d:1d:14:b7:8f:2b:ee:72:76:d4:27:6b:ae:42:45:5a:
         64:45:c3:3c:32:59:d5:40:23:38:69:15:13:51:0f:bd:d2:f4:
         7a:aa:28:1a:f9:ac:cf:fd:f8:be:46:34:a1:ed:28:ef:64:cd:
         ca:99:90:8c:16:56:7f:c9:21:fc:18:a2:32:b0:c1:a7:8b:34:
         11:62:e0:13:cd:be:c0:f2:24:ec:16:c9:48:7f:cc:9b:af:60:
         b2:75:ef:04:db:f8:26:84:c5:5d:dc:7a:14:df:8e:4f:ab:af:
         7e:ad:1b:c7:f7:52:a1:bc:06:52:95:67:64:cb:fa:97:6c:1a:
         6f:2b:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org