Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa
File:                     323830343a336534343a3a2f33322d3332203d3e20323636353834.roa (raw, json)
Hash identifier:          1k2349O4ehgARnM6fYCXE+Lm73uOHSaM1Fjcei7Ioj4=
Subject key identifier:   30:B9:ED:E5:C0:5B:7A:75:41:5E:A8:2F:69:D2:7D:E2:15:E8:F7:87
Certificate issuer:       /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial:       7EF496AF24988B5B87D12FA5BFE3CCCB0B214C5D
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa
Signing time:             Tue 02 Jan 2024 19:03:26 +0000
ROA not before:           Tue 02 Jan 2024 18:58:26 +0000
ROA not after:            Tue 31 Dec 2024 19:03:26 +0000
asID:                     266584
IP address blocks:        2804:3e44::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f4:96:af:24:98:8b:5b:87:d1:2f:a5:bf:e3:cc:cb:0b:21:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
        Validity
            Not Before: Jan  2 18:58:26 2024 GMT
            Not After : Dec 31 19:03:26 2024 GMT
        Subject: CN=30B9EDE5C05B7A75415EA82F69D27DE215E8F787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:92:a3:c7:bf:3c:27:d3:83:57:a6:58:2f:
                    60:2a:af:9d:81:0e:17:32:c3:4e:de:a6:b0:a9:7b:
                    ed:df:7d:bc:bc:35:98:0a:36:fa:a4:84:55:c6:a6:
                    45:01:2a:49:0b:47:46:85:ba:cd:56:78:53:b3:09:
                    b0:64:44:01:cf:8c:5f:a1:e6:0e:04:56:35:c6:d3:
                    92:ca:e7:86:19:fb:37:a3:e6:da:67:2d:8f:e9:54:
                    e8:cd:fc:53:0f:9b:d1:56:c2:37:e9:42:a7:82:89:
                    cc:28:a3:f9:37:ff:60:44:b4:fc:15:0a:8e:80:7a:
                    d4:9f:bb:c8:f4:3c:cf:ac:31:71:83:6d:20:2e:02:
                    9d:82:d4:3a:5b:6f:7d:d6:66:02:9f:28:8e:d0:d6:
                    15:cc:05:1c:5d:7a:6a:b8:1c:b8:b8:cc:91:03:df:
                    28:0b:bc:26:aa:d2:b9:5a:08:83:45:be:55:a5:cf:
                    dc:51:c5:28:05:53:d0:0f:31:57:d2:74:38:a8:1f:
                    05:77:f7:18:c9:fb:61:07:a5:1b:94:3c:98:57:80:
                    e7:fc:ab:db:15:21:1a:a0:a7:ef:25:62:c8:38:81:
                    1f:d1:43:cc:60:0f:9a:bf:40:00:5c:e0:77:ae:9e:
                    94:62:ed:c7:80:d3:58:e7:da:b0:ed:1f:ae:51:61:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:ED:E5:C0:5B:7A:75:41:5E:A8:2F:69:D2:7D:E2:15:E8:F7:87
            X509v3 Authority Key Identifier:
                keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:6e:7c:9e:48:15:1b:70:90:d1:81:f0:27:e6:15:bf:8a:
         96:cf:aa:f1:72:17:1f:6e:95:80:78:d6:89:47:cb:7b:0f:0a:
         a2:39:a8:da:5a:79:d2:9a:69:ea:e0:cb:8c:d8:cf:c3:2d:bc:
         fd:a3:d1:33:8a:9e:0e:65:c6:07:b9:de:1c:f7:95:28:e9:ba:
         31:a3:1a:7b:a8:dc:da:ba:d5:88:06:bc:dd:ec:e1:b3:b0:b0:
         1a:67:05:cc:80:13:bb:67:f3:3e:61:8f:6a:0f:48:c1:e9:72:
         d5:73:b6:36:2c:d2:2f:97:26:af:36:5f:79:a1:1f:5f:a0:5c:
         19:66:72:6f:ba:37:03:1c:27:eb:11:2f:60:b4:ed:96:cf:f1:
         a9:5b:96:75:ff:38:19:d8:5f:d4:21:c5:e3:54:db:fd:da:4b:
         d7:f9:54:10:96:72:11:dc:d4:0f:14:f7:59:33:4a:c3:d1:8a:
         53:d1:e3:9f:53:21:b7:67:84:3e:af:ce:03:81:b1:3b:26:64:
         50:63:ab:d4:d9:0d:6b:2e:d7:83:ed:7d:f8:28:76:99:eb:5e:
         05:f7:2f:ef:1d:20:dc:cf:04:54:a3:85:8f:f6:3d:5c:9a:72:
         21:9f:15:d1:f8:7a:5b:e7:13:b6:25:9b:ad:b3:34:e9:66:42:
         74:71:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org