Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          8EzGHNbKF09StqoZu3P0mpxKxkc12kQG8p0iRj9ooyk=
Subject key identifier:   86:49:9E:4E:46:88:60:7C:F7:BC:B0:FD:62:E5:45:E8:58:8F:FA:98
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       43E2CE3CBCEBAD521681644C96BB470C12B5C4C1
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     264491
IP address blocks:        2804:2074:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e2:ce:3c:bc:eb:ad:52:16:81:64:4c:96:bb:47:0c:12:b5:c4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=86499E4E4688607CF7BCB0FD62E545E8588FFA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:2d:95:7a:ed:c1:a3:8c:70:d6:e5:11:1a:
                    93:ab:d3:64:64:38:4e:82:d7:7e:99:51:43:71:65:
                    b9:1b:19:1f:9b:7e:0e:e2:06:fc:27:95:62:7f:d6:
                    77:e1:c7:e9:8d:df:70:e5:b9:eb:b0:e1:59:1c:4d:
                    90:8d:37:6a:b9:fb:18:e4:63:df:07:11:f8:90:0e:
                    36:8a:a5:e0:2e:ac:95:89:d1:d6:31:d4:36:2a:82:
                    94:0f:08:3d:32:62:8d:e7:86:7b:ef:28:f1:fc:a1:
                    fe:eb:21:fd:c0:b4:17:c1:99:42:c4:80:7a:4a:ae:
                    fa:08:c7:2f:fd:9c:af:80:09:95:87:87:da:45:4e:
                    07:b8:bf:07:34:79:73:d9:cf:e5:8f:07:b2:1d:8b:
                    11:b6:56:63:4e:c2:51:2e:ae:e8:ae:95:1b:5f:e0:
                    36:88:61:d3:69:26:ab:bf:db:7a:3f:c0:ba:0c:64:
                    3a:a4:c7:16:de:7f:90:6e:dd:f4:c7:34:e6:72:ee:
                    78:0b:31:5a:87:3d:38:a2:bf:4c:f7:2d:81:09:d0:
                    92:3a:4e:f8:d5:6b:06:ac:17:75:d2:4c:e9:a4:11:
                    7c:02:35:e1:93:24:f6:38:91:23:47:8c:f6:b9:51:
                    02:8a:ae:c3:91:e8:37:a7:49:bf:a5:b1:cd:70:ca:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:9E:4E:46:88:60:7C:F7:BC:B0:FD:62:E5:45:E8:58:8F:FA:98
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:48:ff:18:55:6e:57:2d:93:77:94:fc:90:f1:89:b6:f7:
         e2:4a:12:55:62:63:cc:98:5c:7d:07:14:5c:1f:88:58:b0:9b:
         af:c4:6a:1b:b0:76:73:84:85:76:89:c4:81:69:7a:29:a6:ee:
         8e:ef:f0:ae:97:02:42:f9:d7:9f:8e:33:04:1f:12:96:70:b3:
         a5:76:a6:24:ec:ae:50:3d:6d:59:8f:1d:e1:03:70:00:d7:03:
         ab:9f:95:35:d1:85:64:22:b0:74:7f:4e:97:ea:fa:cb:fc:a3:
         5f:b7:c7:a1:e3:00:2c:07:83:d5:50:9a:49:a1:69:4b:e6:9e:
         78:3e:a4:48:62:c6:81:19:b1:b6:d2:6c:bb:94:0e:b0:cc:d6:
         60:ec:16:cd:9d:53:1a:fe:2d:a7:29:68:eb:f3:63:e1:98:9b:
         c6:22:fc:4d:24:b8:b7:20:de:1e:c6:65:20:f4:95:85:79:89:
         8f:19:31:a6:53:bc:74:13:a2:4c:59:c0:72:e9:51:77:00:0d:
         11:25:f1:36:89:e2:9e:56:1b:aa:00:db:b0:0d:bd:ec:43:12:
         ff:98:0d:ea:66:ff:73:19:f0:0c:45:07:ce:96:6b:5b:72:b7:
         8d:9b:17:44:a4:c5:29:17:86:4b:b7:69:37:5f:64:a9:e6:94:
         9c:d8:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org