Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          XU3LjGlKHlh6rE9K0C5IcfNtl9J6iv3x5TQJYim6vzk=
Subject key identifier:   48:80:18:05:93:43:18:EA:05:24:D7:54:8E:F7:D5:5A:C7:33:48:9F
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       2258937801A9B396E901B2287C4CC9903747722C
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:41 +0000
ROA not before:           Fri 08 Mar 2024 19:04:41 +0000
ROA not after:            Fri 07 Mar 2025 19:09:41 +0000
asID:                     52858
IP address blocks:        2804:774:8500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:58:93:78:01:a9:b3:96:e9:01:b2:28:7c:4c:c9:90:37:47:72:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:41 2024 GMT
            Not After : Mar  7 19:09:41 2025 GMT
        Subject: CN=48801805934318EA0524D7548EF7D55AC733489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:44:2f:ef:d4:0e:d6:28:d0:03:7b:82:96:
                    13:40:5e:71:00:e6:d0:d4:2d:f7:7c:aa:e7:55:02:
                    e7:b9:ad:96:0f:4f:e9:be:5f:00:36:66:3b:37:2f:
                    ba:a2:ea:4c:15:7d:14:41:89:33:30:af:6d:55:c9:
                    8c:74:bd:ab:d4:61:1d:b3:c1:84:5e:09:e8:76:de:
                    08:f3:5a:fa:bf:38:94:b2:6e:a2:10:86:35:a3:bd:
                    55:02:59:7e:59:33:3b:27:7a:27:21:4d:3c:17:fe:
                    cc:ab:72:54:b1:ff:79:f8:2e:1c:3c:04:fb:b0:48:
                    3d:33:9f:87:70:59:8a:4f:35:51:96:59:7e:08:88:
                    64:0a:7b:81:37:a5:a2:7c:b6:09:c9:2b:10:f0:06:
                    d0:fe:af:6d:35:a0:ea:a1:bd:16:47:04:81:de:bf:
                    0c:df:3c:9d:0c:96:2d:7f:f8:6c:6f:35:9c:e5:7d:
                    4d:a0:73:87:7c:73:b8:5a:2f:94:73:f5:c9:89:ad:
                    d7:4b:66:ac:aa:81:7e:7b:eb:af:4d:e8:da:54:6c:
                    7a:2f:11:2e:85:4c:79:3d:77:93:0a:8d:38:0d:23:
                    6c:ff:f8:fd:e7:a0:37:38:01:55:2d:0f:07:fe:87:
                    57:1f:a8:cb:58:b9:b8:c8:c7:1b:f7:4d:c7:57:ed:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:18:05:93:43:18:EA:05:24:D7:54:8E:F7:D5:5A:C7:33:48:9F
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a383530303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:76:62:4e:2f:51:90:cc:52:4e:ee:fc:2a:35:3a:d8:93:
         0c:8d:3f:28:1c:42:3b:d8:33:9b:0b:f6:10:81:2b:d8:93:99:
         55:ae:8b:f4:45:c3:ac:38:89:4c:73:03:d9:00:f3:e7:95:77:
         ce:cb:93:36:ca:c1:07:a8:dd:b4:dc:79:0d:5c:b0:63:28:ee:
         b4:2b:95:1c:cb:b8:bf:89:6b:31:d5:0c:c3:02:1f:0b:90:e3:
         4e:3f:e8:e9:71:51:94:b7:65:81:dc:f7:55:12:ac:3e:a6:09:
         d1:3f:e9:72:f6:c2:de:59:ad:12:ab:b9:ed:27:28:c9:bf:cf:
         16:d2:bd:95:b7:2a:5e:35:43:59:24:b5:ab:a4:42:58:92:8d:
         f2:30:b6:d5:be:9f:f3:61:2f:1c:50:52:ff:d2:69:18:91:0a:
         4b:be:91:c9:0c:d8:35:56:c9:cb:92:ce:61:4d:7c:6e:b4:e9:
         fb:8e:23:1b:cb:45:95:c4:a7:da:a8:10:7f:74:26:6c:59:c8:
         85:cb:63:aa:2e:7d:7b:13:fd:47:d9:ee:8a:4a:d9:f5:e7:0b:
         21:a4:cd:08:cb:f7:b4:27:4f:03:05:36:96:73:f4:88:7d:77:
         89:10:5b:91:8e:c7:73:88:5b:15:a8:1a:62:19:1d:4f:4a:e5:
         ba:59:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:00 2024 by rpki-client on console.sobornost.net