Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a386230303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a386230303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          Y9ogAnW194RnLiPWXRhfDLFyXQxdlDdR1xKKGtV2bPg=
Subject key identifier:   D2:5C:28:92:D1:DA:33:1A:48:28:FB:34:E3:AE:EB:E9:5D:EB:9F:4C
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       5E5614BDA00C4C242AB1563B3FC9B3440DF69168
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a386230303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:47 +0000
ROA not before:           Fri 08 Mar 2024 19:04:47 +0000
ROA not after:            Fri 07 Mar 2025 19:09:47 +0000
asID:                     52858
IP address blocks:        2804:774:8b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:14:bd:a0:0c:4c:24:2a:b1:56:3b:3f:c9:b3:44:0d:f6:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:47 2024 GMT
            Not After : Mar  7 19:09:47 2025 GMT
        Subject: CN=D25C2892D1DA331A4828FB34E3AEEBE95DEB9F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:5b:88:03:2f:5a:9a:21:4c:a1:ea:23:f9:
                    b3:e8:5b:61:76:00:8d:53:4f:c0:f2:0f:8d:54:b1:
                    22:ed:da:4d:3d:61:af:69:97:cc:8b:bd:2b:00:dc:
                    80:c2:f7:be:1b:19:52:08:28:6b:14:4b:5e:c2:f5:
                    ea:2f:77:5c:d4:3e:0e:ef:8f:50:e5:c7:7b:a7:d9:
                    19:d8:d0:32:1c:ff:b3:74:cd:93:ea:8c:97:ff:b7:
                    de:ba:63:5b:b3:dd:4a:62:23:a3:14:87:71:f7:75:
                    b4:93:1d:8c:10:6e:fc:b3:a2:a6:f8:b6:b1:8c:ac:
                    01:7b:47:5b:e9:90:e6:70:50:f5:c0:f8:a7:96:50:
                    9d:be:5d:9d:a5:38:03:0e:db:1e:b4:95:a1:b2:15:
                    2b:9f:31:ce:98:5e:89:40:32:7b:54:a8:28:3a:9b:
                    4a:22:f4:d6:22:9c:62:41:66:88:96:e6:67:36:35:
                    7b:df:87:bb:d8:4c:59:30:e7:4f:66:78:99:05:2d:
                    d0:14:ff:18:68:1a:85:14:c6:6e:c1:c5:53:22:50:
                    f7:4d:88:6f:d6:21:5a:e3:fa:c0:a2:ef:79:24:cc:
                    83:c1:81:eb:82:7c:f5:8a:d6:0c:66:91:46:a1:06:
                    fa:f7:50:4e:4a:ab:9e:82:b2:15:75:6c:69:7d:3c:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5C:28:92:D1:DA:33:1A:48:28:FB:34:E3:AE:EB:E9:5D:EB:9F:4C
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a386230303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:cf:1a:c3:c7:b0:74:34:63:e2:19:ca:c8:c4:ab:87:d7:
         ec:a8:4d:0a:d2:cf:b4:85:92:70:2c:12:12:92:3a:e9:47:55:
         41:73:a1:d3:41:11:48:e6:9c:96:f6:9c:ee:ea:25:c0:48:0c:
         57:38:71:34:0f:b2:e1:9c:fa:4d:c2:8d:63:a8:64:b8:dd:b9:
         a2:5f:a8:0d:ba:fe:32:0f:d9:55:77:8b:52:80:b9:22:b8:23:
         2b:66:9d:5c:07:66:02:e6:95:eb:3d:2b:89:90:93:1c:17:b2:
         57:a5:10:be:8e:d9:ca:ce:11:c9:c5:ee:4e:23:e8:19:de:0d:
         aa:04:ed:d5:32:44:50:10:d6:9c:e7:b2:fd:af:2c:76:ed:40:
         f3:aa:22:a5:83:a0:e2:df:24:38:7f:41:ed:1c:ea:db:e2:e1:
         8a:52:e2:1b:e4:f5:80:26:43:80:c9:26:d2:f7:13:9e:19:ca:
         b2:a9:8a:f7:a6:19:1f:f2:40:ea:ea:4e:4e:27:da:e0:bd:bf:
         04:3e:54:8b:28:62:58:7f:bc:68:71:ce:28:5b:d3:0b:84:26:
         a1:85:71:d8:9c:81:8d:fd:ed:40:f5:99:c1:04:6d:b2:39:51:
         4a:d2:35:30:5e:40:0e:2f:23:45:0c:c6:43:56:be:bb:2a:3e:
         ab:07:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org