Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383730303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383730303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          dKtb7k4H6LSPZqKQlxmSGCLRf2dJXi+3GUPsvHBceNU=
Subject key identifier:   7F:C9:B7:AF:BD:D1:0D:3F:13:18:FD:D6:9D:FD:DD:7E:4E:D6:B5:44
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       14A8446E62CFD9E6A62D694D912FA8ABC5E1089C
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383730303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:43 +0000
ROA not before:           Fri 08 Mar 2024 19:04:43 +0000
ROA not after:            Fri 07 Mar 2025 19:09:43 +0000
asID:                     52858
IP address blocks:        2804:774:8700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a8:44:6e:62:cf:d9:e6:a6:2d:69:4d:91:2f:a8:ab:c5:e1:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:43 2024 GMT
            Not After : Mar  7 19:09:43 2025 GMT
        Subject: CN=7FC9B7AFBDD10D3F1318FDD69DFDDD7E4ED6B544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:28:1f:0f:fd:24:81:6c:b3:11:1d:d6:5b:
                    d7:e2:85:69:2e:bc:9c:9e:2d:8c:8c:d6:c4:d7:b1:
                    c9:c1:43:57:8e:50:d4:c4:34:aa:f5:c0:0e:8e:51:
                    34:be:f6:f5:d5:3f:a8:c0:b8:98:5e:7b:4b:15:d0:
                    68:77:17:5a:8c:24:15:11:91:3d:d2:dc:bf:7e:03:
                    4b:80:21:8b:7f:a3:13:f9:4e:71:12:92:d7:bf:fa:
                    6c:ba:0c:0f:6f:45:92:fc:2f:8b:6d:2b:75:f6:a5:
                    7b:4d:65:a4:84:ec:b9:14:b3:e3:71:56:3f:90:34:
                    e1:95:a1:c8:1b:fd:67:70:10:68:68:d9:08:9d:6c:
                    8c:e6:00:e0:b0:0e:31:8c:db:e3:fb:5f:98:88:1f:
                    72:2f:12:a2:38:e4:6a:46:e5:e1:ce:0b:4a:6d:58:
                    da:15:22:bc:26:09:a9:49:2d:d0:37:2b:66:7a:04:
                    9e:77:61:00:b0:7f:54:80:33:30:a6:ae:7c:73:37:
                    88:79:e6:94:e2:9c:8a:b5:d4:38:84:6b:3a:86:83:
                    03:e8:0a:95:5f:2f:45:7c:97:06:2b:54:4a:fc:7f:
                    68:32:5a:30:a5:d3:11:90:a8:40:de:2e:06:c4:2c:
                    72:db:47:d5:3f:7b:ec:47:41:bf:88:1b:4d:13:fb:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:B7:AF:BD:D1:0D:3F:13:18:FD:D6:9D:FD:DD:7E:4E:D6:B5:44
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383730303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:95:c7:c8:28:c7:97:0e:67:48:b6:cd:79:cb:a7:6e:76:
         b0:f4:b5:cf:4b:29:91:81:3b:d7:18:7b:7f:4e:58:9d:ef:8a:
         ff:30:73:20:92:f3:c3:ce:e7:3c:40:68:1b:08:5a:7c:7e:27:
         63:22:49:68:3a:bf:a4:a1:61:fb:1d:35:dc:f7:19:4a:cf:c7:
         ed:58:2d:47:fc:ba:82:44:71:8c:9f:b7:c9:55:19:b9:7e:26:
         bd:3f:40:ea:00:22:71:88:3e:91:64:aa:dc:35:ce:65:cd:ae:
         88:21:c8:84:54:ab:52:b7:e3:3e:33:98:c7:7b:71:37:4f:9b:
         22:6a:46:d6:0d:1f:2d:6c:12:d6:fe:d4:cf:4a:33:81:4f:6b:
         fa:99:11:de:89:cb:40:3e:6f:f9:69:fe:b6:fe:56:7a:d5:6b:
         7f:c9:2d:0b:9d:7b:ad:7e:83:d6:31:87:72:d4:3a:df:60:e4:
         f4:ae:39:40:38:a2:f8:19:c3:ba:59:82:16:52:d5:25:bf:0e:
         cb:e1:ad:69:f0:0c:1a:9e:d9:d5:fa:4c:b3:5c:02:49:ce:4d:
         32:4a:d3:2f:c8:f9:78:ec:96:18:92:3f:d0:1b:2c:e4:b6:99:
         d3:45:cf:a8:a4:dc:f7:f6:06:6e:ba:e3:a8:a9:72:eb:85:81:
         a5:93:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:05 2025 by rpki-client