Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a383030303a3a2f33342d3336203d3e20323636353834.roa
File:                     323830343a336534343a383030303a3a2f33342d3336203d3e20323636353834.roa (raw, json)
Hash identifier:          HcrBodqv/GBcLRkk6ybkU2OHYFmkruiCnPgFzxMXP7o=
Subject key identifier:   09:13:AE:CC:C5:1F:34:26:1E:71:3F:71:2A:5C:5F:01:41:69:1A:43
Certificate issuer:       /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial:       7428EE09F22953DB20CFE1AADC5D7AE9FD144983
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a383030303a3a2f33342d3336203d3e20323636353834.roa
Signing time:             Tue 02 Jan 2024 19:02:59 +0000
ROA not before:           Tue 02 Jan 2024 18:57:59 +0000
ROA not after:            Tue 31 Dec 2024 19:02:59 +0000
asID:                     266584
IP address blocks:        2804:3e44:8000::/34 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:28:ee:09:f2:29:53:db:20:cf:e1:aa:dc:5d:7a:e9:fd:14:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
        Validity
            Not Before: Jan  2 18:57:59 2024 GMT
            Not After : Dec 31 19:02:59 2024 GMT
        Subject: CN=0913AECCC51F34261E713F712A5C5F0141691A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:ed:b5:83:de:a1:e9:c0:3d:f3:f6:44:ff:
                    72:78:1a:74:b6:b3:e8:61:32:08:30:e0:e3:eb:75:
                    84:e1:79:f9:a0:3c:ec:5b:4d:48:8f:68:85:85:f9:
                    82:54:b0:ef:53:bd:95:f5:6b:1b:ce:70:35:3a:92:
                    01:cb:c5:27:f3:1f:93:e6:1b:d6:a1:a9:5f:dd:5b:
                    2c:93:54:3f:3f:68:46:8e:79:b1:95:de:d4:b8:65:
                    21:8e:2d:c2:fb:60:35:4a:aa:50:57:07:fb:5b:a0:
                    b8:8e:a9:5b:eb:d2:81:6d:79:16:7d:2c:0c:cd:82:
                    c0:81:63:51:83:75:f0:2b:37:1f:03:67:e3:80:29:
                    89:4e:b5:7f:01:25:e5:07:7c:f9:57:b7:e0:c6:c0:
                    6b:8a:e5:e1:ae:79:e5:fc:13:46:b2:57:8b:42:bd:
                    36:82:be:73:15:67:b8:47:29:72:84:e3:f2:03:fe:
                    1c:3f:12:ec:bb:48:85:22:cc:86:a3:69:6e:c5:51:
                    9d:e7:3a:2c:56:4d:04:db:b6:99:c3:53:79:b2:0b:
                    37:16:79:fd:e6:2c:16:f0:fa:c8:ae:68:a9:20:4d:
                    34:cc:6b:e1:0c:d9:bf:c3:0a:e5:c3:ac:df:52:41:
                    d4:75:ad:73:6d:82:c2:b7:a8:27:3c:ee:3b:9a:4c:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:AE:CC:C5:1F:34:26:1E:71:3F:71:2A:5C:5F:01:41:69:1A:43
            X509v3 Authority Key Identifier:
                keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a383030303a3a2f33342d3336203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:18:07:01:db:f4:69:c0:81:95:fc:e7:79:58:e1:5d:76:42:
         3f:ca:67:53:e8:6a:de:05:45:cf:78:b1:47:e8:07:5d:17:dd:
         f9:a0:55:5b:73:ad:6f:16:43:91:ea:9f:40:dd:4d:67:4f:b9:
         f9:80:bd:35:00:de:f0:73:a6:b3:65:26:68:4f:03:53:42:b1:
         7c:4b:d9:bf:4b:19:8d:1d:f9:c9:45:45:12:04:9d:a5:32:50:
         6e:00:6a:7c:a6:53:be:fb:73:79:6b:9e:f7:d6:85:d1:99:bd:
         12:ff:7f:ec:66:f0:7d:f3:67:b4:59:9f:6f:44:18:58:2e:d8:
         82:e1:ec:00:25:c1:ab:f0:a9:15:ab:4c:1e:54:ed:db:4c:b6:
         1e:62:5d:f4:23:f2:e6:1e:09:cf:f1:cb:cf:2b:86:bc:29:da:
         d2:47:cb:69:c3:98:36:98:d1:73:fd:10:77:2b:04:cf:05:61:
         36:ca:86:c7:06:4f:d5:d8:5b:31:c2:f0:b9:58:75:e1:33:b5:
         d5:73:18:d7:7d:45:02:01:b9:58:c6:af:82:54:af:ef:4c:e5:
         50:cf:a0:5e:20:b1:1d:d3:8a:44:a2:7b:ff:05:49:0b:53:09:
         e8:50:d0:e7:4d:2c:29:2a:50:6b:8c:7e:87:3b:53:45:e8:e8:
         81:ea:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org