Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3337383a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          t4wq+5DoTbuw9pwZv2hEgu1Wso8I1M4wA3NeYqU6nB0=
Subject key identifier:   10:80:33:38:4E:E0:4A:01:70:D0:14:80:2E:45:47:AF:37:BA:2D:64
Certificate issuer:       /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial:       60237D3F4A7F270A0D91A3C288BB2DA717D05207
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
Signing time:             Wed 04 Oct 2023 14:00:00 +0000
ROA not before:           Wed 04 Oct 2023 13:55:00 +0000
ROA not after:            Fri 04 Oct 2024 14:00:00 +0000
asID:                     28283
IP address blocks:        2804:378::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:23:7d:3f:4a:7f:27:0a:0d:91:a3:c2:88:bb:2d:a7:17:d0:52:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Validity
            Not Before: Oct  4 13:55:00 2023 GMT
            Not After : Oct  4 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:43:93:e3:3f:f7:f6:95:d7:2b:23:13:14:
                    89:f9:ab:f3:c7:f8:d5:96:f4:03:e0:49:30:bd:29:
                    38:96:3e:8b:28:4b:57:43:f0:83:05:5c:85:6d:44:
                    b2:73:85:8e:55:24:7a:ce:b0:3c:23:a3:05:27:a2:
                    c1:d6:88:13:1b:cd:ff:54:1b:9b:b5:84:a6:47:f4:
                    6e:9a:f6:47:4e:c8:c0:5c:a4:02:5d:21:d2:22:e2:
                    44:01:f3:24:9b:e9:c7:b0:bc:6b:5e:8b:ad:a4:74:
                    08:85:dc:c8:a9:10:4a:01:9c:ee:77:43:3c:95:ad:
                    aa:37:69:ea:91:c2:b1:78:c0:c0:b2:f4:7a:47:69:
                    57:93:b6:0e:ff:67:16:f5:e4:ca:94:65:c8:84:77:
                    b7:ef:53:ab:bc:9f:66:e8:6b:5c:9d:79:35:57:37:
                    bf:8c:77:a9:db:69:b3:5d:cd:9e:a6:8c:88:cb:42:
                    61:1d:e4:29:66:b5:0b:38:38:39:d3:3a:76:ca:c8:
                    c3:9f:c3:36:60:0f:57:38:8e:b0:ae:83:e1:da:cd:
                    5b:d3:97:25:be:74:19:ce:e8:3c:43:83:4a:3c:6a:
                    0c:58:a4:61:e1:b2:dd:a1:14:d2:0f:d2:82:b1:4f:
                    c0:12:4a:df:44:a8:84:ed:ba:33:89:12:d1:5e:6d:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:33:38:4E:E0:4A:01:70:D0:14:80:2E:45:47:AF:37:BA:2D:64
            X509v3 Authority Key Identifier:
                keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/323830343a3337383a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:378::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:3e:c9:9e:e2:6c:0b:a5:96:47:51:e0:4e:9e:5f:d5:26:
         ec:c8:02:c3:6b:62:72:21:b4:c8:9a:fd:b3:7f:22:75:1f:c1:
         61:4a:cc:53:f5:df:59:85:21:60:48:8e:e7:81:45:92:99:66:
         73:0a:4c:1d:19:9d:66:b5:b1:1c:74:24:08:41:b9:0a:8e:cd:
         81:ce:a6:9c:15:3a:83:08:ae:0e:8a:f1:de:86:da:44:5e:df:
         1c:a5:92:e1:fb:e4:a4:2a:95:15:cb:54:8e:fe:ef:78:72:37:
         d8:78:2a:a4:33:ae:cf:6a:de:af:3a:74:46:1d:e6:45:2e:65:
         e4:fa:2e:af:cd:b4:8a:6f:76:00:c9:9b:97:d3:d7:52:05:9f:
         cf:10:9a:4e:c9:44:4f:03:ef:a9:3e:3d:a6:2e:e5:5b:c3:d2:
         e3:e0:68:a9:65:ce:3d:28:bb:34:d7:45:ad:3a:44:45:c7:56:
         1e:65:a5:89:a2:b1:94:3e:ef:5b:22:18:15:26:64:b2:2a:21:
         ff:31:a3:49:df:e3:76:6c:51:4e:25:5d:43:50:e0:c2:30:e9:
         fa:c2:fa:d3:df:00:d3:7d:a5:a7:9d:ef:83:a2:9e:b0:ea:54:
         a5:89:5f:01:c7:31:f1:12:6c:6b:8f:9a:4c:33:25:5f:b2:3b:
         a8:93:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org