Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          QvgHcXTC25U0wfJIg4okwdWsX2zrH2gab7pM4KNrBYc=
Subject key identifier:   13:48:E9:84:8D:1F:62:F4:04:00:98:59:B1:B9:91:1C:48:03:7C:04
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       24151DA8FDF838911B6D25E0A94E6E92B0B60C7B
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:49 +0000
ROA not before:           Fri 08 Mar 2024 19:04:49 +0000
ROA not after:            Fri 07 Mar 2025 19:09:49 +0000
asID:                     52858
IP address blocks:        2804:774:a000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:15:1d:a8:fd:f8:38:91:1b:6d:25:e0:a9:4e:6e:92:b0:b6:0c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:49 2024 GMT
            Not After : Mar  7 19:09:49 2025 GMT
        Subject: CN=1348E9848D1F62F404009859B1B9911C48037C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:b1:9e:18:7a:28:17:99:01:9b:8a:2e:d5:
                    8a:59:cb:57:8a:32:7b:e9:9f:88:6b:a0:ca:50:a7:
                    38:b5:67:16:92:da:28:02:97:8a:b6:fb:05:75:45:
                    ba:ef:f7:ba:5c:43:82:52:e3:b2:d6:59:5e:fd:6f:
                    40:c3:bf:02:5f:2f:c2:3e:1a:9e:00:e4:8a:ab:e5:
                    57:65:a0:58:ae:d8:79:e3:04:5b:1c:b9:fe:03:6d:
                    d8:e0:e1:25:f0:32:ad:11:63:5b:10:4d:69:ad:16:
                    61:55:4b:50:1e:0b:1d:b0:ce:df:bd:89:78:0f:0a:
                    35:c7:d0:1e:5d:96:ef:3e:ff:fe:62:4b:22:07:44:
                    a5:cb:ef:40:e3:9c:a8:87:3c:ed:35:df:3f:0c:82:
                    21:93:c0:d0:5f:ed:7f:59:ae:6d:1c:50:f6:ab:35:
                    7b:2a:10:21:5c:1a:70:3e:b9:0e:c8:54:ac:44:63:
                    a8:e0:c4:bd:42:6e:56:e4:fb:c9:04:27:1e:f9:b1:
                    59:00:cc:af:17:d3:ce:69:9a:0f:2c:e2:3e:fd:44:
                    1a:a0:86:9a:98:13:3a:f4:b3:56:a1:be:80:3f:ad:
                    75:ef:4b:0b:b1:2c:be:df:17:d9:5e:b0:7b:bc:78:
                    ad:f9:69:22:8d:ec:ee:7f:b1:77:6c:4d:52:ac:04:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:E9:84:8D:1F:62:F4:04:00:98:59:B1:B9:91:1C:48:03:7C:04
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a613030303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:69:b9:fb:5d:a5:aa:d9:10:36:b9:bf:ad:e2:76:7b:12:27:
         80:4d:7e:01:28:ea:b0:8f:e9:31:4d:11:e8:74:5c:9e:8c:52:
         de:a8:53:da:95:a6:6e:92:60:6b:9b:a6:99:2f:bc:e6:20:44:
         37:0e:b0:12:94:c9:c6:b4:de:46:d5:98:3b:4a:c8:86:5a:4e:
         e1:cd:1a:b8:6b:8f:0b:96:0c:ca:17:5e:36:a2:96:61:75:fe:
         e5:46:4c:e0:19:8d:ea:35:8b:2f:80:ce:6e:c9:f4:2c:f5:ce:
         15:d4:eb:d5:7e:11:37:56:c0:a2:3d:be:44:86:82:a5:dc:a3:
         ed:15:3a:5c:f1:7d:e6:90:8b:b1:db:21:88:7a:8c:a3:6b:8f:
         b3:a2:60:84:45:80:79:7b:26:6f:6c:93:92:9c:ae:db:91:1b:
         ee:e5:b3:04:6b:c6:31:eb:ca:d2:06:af:5a:eb:52:9a:84:ac:
         72:90:0e:f8:c1:b8:93:38:db:47:f1:33:85:92:55:8c:56:13:
         4a:77:b4:61:9a:61:1d:19:4d:b1:b2:09:01:f5:5a:c9:3e:a1:
         48:b3:84:2e:52:4e:82:47:bb:bb:64:46:a0:fe:56:80:26:c8:
         eb:60:08:d7:d3:21:f4:d5:9a:be:6f:b2:ca:88:0f:44:fb:08:
         91:47:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:53 2025 by rpki-client