Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa
File:                     323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa (raw, json)
Hash identifier:          S9SnI5ZnwqfAZRZ0eYE3gF74i9060x13XMXGVorflP8=
Subject key identifier:   4E:ED:91:A5:DE:6E:4A:04:65:7C:5E:50:00:77:ED:83:FD:C1:84:25
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       71B86367CC4CD667C70BAA9EDC0FC416571609A4
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:30 +0000
ROA not before:           Tue 05 Dec 2023 14:39:30 +0000
ROA not after:            Tue 03 Dec 2024 14:44:30 +0000
asID:                     52765
IP address blocks:        2804:b54:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b8:63:67:cc:4c:d6:67:c7:0b:aa:9e:dc:0f:c4:16:57:16:09:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:30 2023 GMT
            Not After : Dec  3 14:44:30 2024 GMT
        Subject: CN=4EED91A5DE6E4A04657C5E500077ED83FDC18425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c1:44:63:5f:88:3c:a9:3b:10:50:b0:f7:65:
                    2a:19:c7:a6:92:94:a3:16:31:c3:39:90:ff:f4:7b:
                    28:e2:7d:44:e1:7b:ad:2b:d5:8f:66:1a:44:7b:3d:
                    76:bc:6e:c1:83:55:fc:f7:de:f8:d8:23:f2:28:08:
                    bb:02:03:f2:48:41:de:c6:7d:b3:99:df:61:27:be:
                    4a:09:f3:fb:61:5d:70:92:5d:93:54:b3:bd:77:ef:
                    a9:f8:42:5a:bd:ea:91:ee:67:c7:0d:75:84:21:33:
                    1b:2a:14:e6:18:b4:8b:b7:cd:16:7a:44:2d:03:fa:
                    45:81:a6:ab:bf:c8:aa:cc:24:9d:e0:48:7b:7b:3f:
                    d2:57:37:a9:0e:92:39:70:b2:09:50:b1:86:ff:86:
                    39:1a:f3:50:af:9e:d5:90:65:a1:3e:ed:c8:7e:e9:
                    17:06:fb:cd:e8:77:3f:a1:c4:1f:4f:7a:9d:40:26:
                    1c:15:be:a8:13:d2:79:d7:29:de:09:43:1f:2d:39:
                    a6:cf:aa:c9:51:7d:d8:ae:5d:e7:dd:3a:6a:6b:c7:
                    2f:eb:63:41:9d:40:ec:e3:05:f9:d9:63:ac:f4:36:
                    86:ee:12:eb:6e:0b:b0:5f:71:9d:34:5c:dc:65:00:
                    29:c2:a3:93:8b:fe:8c:c7:e1:99:d9:38:04:7c:fb:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:ED:91:A5:DE:6E:4A:04:65:7C:5E:50:00:77:ED:83:FD:C1:84:25
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:a0:e5:3d:2d:6e:4e:ed:77:be:29:b1:41:bc:48:23:b2:
         6f:14:33:f2:f2:5d:e2:67:57:0f:2c:b3:5c:29:0e:99:66:b3:
         1f:14:10:5f:8f:b3:06:e5:a5:fe:b9:d7:c0:40:a2:d1:09:4d:
         d2:4a:ed:ff:ef:6b:91:e3:b9:ae:5e:e0:6e:77:84:be:16:e8:
         a7:f7:ce:c4:b7:68:0a:32:78:a2:08:ee:82:2e:21:b4:6d:7f:
         ec:76:21:16:49:e5:6d:37:6b:2f:7b:6a:82:11:69:39:be:8a:
         b8:7f:75:47:70:09:47:69:ce:0f:11:2a:02:67:0b:03:ae:8c:
         1e:ec:b8:90:5a:ec:6f:cb:15:9e:72:4e:6a:70:c8:62:2d:84:
         73:20:78:50:d4:6b:c6:76:02:f1:b4:0d:a5:07:d4:45:c6:be:
         55:f2:8c:d2:46:d0:c5:7e:c1:d4:50:29:17:84:8e:8a:f2:0d:
         04:ad:ee:e6:06:1b:b2:84:e3:f6:ea:a2:8f:84:83:96:f4:f4:
         86:9c:6d:51:cd:e6:fd:cd:28:73:fa:f9:8b:07:90:54:95:df:
         60:8e:21:01:a6:f2:18:8a:c4:c0:25:e7:8e:79:6d:78:4d:28:
         5b:2f:a5:dc:16:5f:e4:25:e4:b8:ba:3a:f8:2a:79:d1:ad:62:
         f4:3e:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org