Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a3230303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          SR+YFeJMfE81B4Dv92kU0IgZKx3JI2Fq55NSon6nIRE=
Subject key identifier:   9E:A6:72:60:EA:D4:79:D3:F7:BF:D1:78:B0:2E:81:1A:6F:61:E4:76
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       281D36700072174CE9468DE43E03A17B6F3C79D0
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:25 +0000
ROA not before:           Tue 10 Oct 2023 03:06:25 +0000
ROA not after:            Tue 08 Oct 2024 03:11:25 +0000
asID:                     264491
IP address blocks:        2804:2074:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1d:36:70:00:72:17:4c:e9:46:8d:e4:3e:03:a1:7b:6f:3c:79:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:25 2023 GMT
            Not After : Oct  8 03:11:25 2024 GMT
        Subject: CN=9EA67260EAD479D3F7BFD178B02E811A6F61E476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:84:fa:e8:da:22:d4:3d:72:3e:00:86:4f:
                    77:ec:08:c3:f3:bc:fa:29:61:c2:11:1d:a1:0c:1c:
                    73:c7:70:5c:b2:8d:ff:df:de:4b:55:49:a1:14:e6:
                    32:f8:eb:fa:c6:9c:ce:11:41:33:b0:5b:b0:12:29:
                    ff:e9:bd:c9:9b:70:39:5a:5b:ba:8e:85:00:88:68:
                    01:16:2e:ab:d0:0d:79:63:40:04:e6:9b:63:ce:35:
                    cc:9f:ad:f3:3b:b2:c3:86:7e:c0:fa:a3:ef:3f:fd:
                    15:74:0f:04:a6:4b:0f:75:53:3b:f2:f8:b7:8d:f1:
                    97:1e:fc:39:85:d8:f8:c5:ce:24:61:cf:a9:bd:c2:
                    bb:58:7c:32:de:63:07:a5:e5:96:7e:64:8e:30:79:
                    42:b7:40:57:8a:4a:91:26:37:8d:d1:47:a1:30:fb:
                    f0:35:d7:27:9f:d8:8f:e1:ee:7d:bf:bb:d5:c8:6e:
                    07:76:9f:50:61:37:fc:7c:fd:54:41:b4:b5:0d:be:
                    7f:b4:96:8d:13:24:46:ca:8d:34:47:ed:e6:56:84:
                    bb:7c:ca:03:39:eb:fb:71:7d:fd:23:75:31:e2:db:
                    95:04:90:2b:de:57:81:13:6b:3d:d7:80:63:33:50:
                    e3:0f:6b:65:6e:01:cc:1c:21:82:69:d0:ab:8f:f8:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:72:60:EA:D4:79:D3:F7:BF:D1:78:B0:2E:81:1A:6F:61:E4:76
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:91:e8:f1:a7:d4:ac:ea:f7:02:99:22:a8:3d:68:63:88:84:
         1d:76:b2:e5:df:ac:83:b6:d1:9a:b4:0d:76:20:9e:c5:ca:67:
         88:bd:61:15:f6:c5:fd:4e:1f:f5:65:1f:5a:94:29:5b:2c:fc:
         8c:57:36:2b:8d:86:0d:df:3f:5c:92:5a:28:3e:32:42:c3:49:
         78:c5:b3:03:0f:9a:cb:43:66:7d:41:f7:fd:16:73:51:3c:58:
         da:c8:a0:d9:11:ad:58:de:d7:14:3a:29:27:7c:9a:fd:c7:bc:
         64:42:21:20:04:cd:a5:11:f6:72:2a:0d:65:06:03:3a:7e:41:
         a8:39:41:d0:12:d2:2c:9e:35:dd:50:18:86:25:2b:1b:2d:8b:
         bf:89:03:32:01:2c:05:92:cc:c1:93:c4:10:f1:75:58:3e:7b:
         e1:a9:3f:62:07:77:49:f6:9d:c6:f9:c5:36:a4:5e:ba:14:52:
         c1:91:86:48:bb:1e:76:34:7c:f9:e6:b5:35:62:23:d8:56:46:
         18:e4:8b:cd:68:95:41:c7:2a:6e:a3:ea:04:64:73:fc:af:53:
         db:d8:8a:c9:f3:73:76:66:53:40:b3:1f:a2:93:35:44:b8:19:
         59:77:0e:61:63:6d:07:4d:d6:f2:7c:8d:11:df:85:2d:de:c4:
         a2:79:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org