Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3230303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a3230303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          fSVAn7dBpmP+7FWW8s0DFyutj0HpWVwoJFPN5NerhZw=
Subject key identifier:   D8:64:D4:29:5C:DE:33:29:C7:E3:35:BE:22:93:F8:3B:40:37:A6:25
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       09A1E01C220970DA1B2BA3DB33D362A6E43D6A09
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3230303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:25 +0000
ROA not before:           Tue 10 Oct 2023 03:06:25 +0000
ROA not after:            Tue 08 Oct 2024 03:11:25 +0000
asID:                     263924
IP address blocks:        2804:27d4:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a1:e0:1c:22:09:70:da:1b:2b:a3:db:33:d3:62:a6:e4:3d:6a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:25 2023 GMT
            Not After : Oct  8 03:11:25 2024 GMT
        Subject: CN=D864D4295CDE3329C7E335BE2293F83B4037A625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:f3:06:99:48:87:08:ec:2d:d6:9c:07:4b:
                    76:fa:5b:84:cb:df:c9:bb:1f:1b:6f:28:8a:63:83:
                    0c:fc:aa:98:31:c6:a8:7c:98:ca:a8:f7:29:fa:33:
                    11:67:bc:f0:48:9c:c6:83:d0:8e:eb:a1:2a:93:89:
                    0b:a5:04:07:87:20:67:17:60:1c:af:10:46:eb:bd:
                    21:e0:95:b0:c7:a1:4d:d4:67:a8:a2:ba:99:b7:75:
                    a3:e1:44:2d:a8:7d:5a:b5:ae:a2:b3:1e:89:95:da:
                    31:9a:ba:6c:c4:d7:72:bc:82:bf:28:7e:e6:cd:15:
                    e0:8f:34:66:7e:8d:e2:6c:81:2c:7b:a7:46:39:46:
                    3e:e9:c6:a5:09:bd:f9:af:71:fc:30:45:28:5e:bf:
                    3c:ad:b4:63:f9:ba:e9:95:38:7a:cc:e1:58:dd:c1:
                    3d:22:d3:05:18:84:62:09:0a:af:40:a6:c8:c2:3f:
                    f8:5f:7e:6d:45:9e:0e:d4:32:e6:51:4e:36:d1:7e:
                    bb:76:9e:b4:fa:fc:5c:e0:b9:e2:03:e6:f4:fb:20:
                    3b:a5:60:4f:d7:50:a5:f3:8c:1d:38:8b:12:5e:d7:
                    23:d2:26:db:9e:3e:ab:35:e7:50:96:cb:e1:ae:54:
                    ca:78:76:cb:9c:2c:c1:a1:a3:32:5c:fe:fd:bb:f9:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:D4:29:5C:DE:33:29:C7:E3:35:BE:22:93:F8:3B:40:37:A6:25
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3230303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:14:42:a7:b5:5a:bb:4c:b2:a1:e8:5f:47:7a:15:bf:85:
         2e:8c:e9:d0:fe:59:1d:6b:b3:ee:7b:7a:1a:df:54:83:00:7d:
         be:a3:d1:ad:c8:ff:b8:92:3e:be:3c:4b:8f:4d:2d:f8:5e:86:
         2f:d9:f9:13:f4:f5:fe:a4:48:d8:72:ad:76:14:4b:eb:ec:42:
         a2:8b:ca:15:e7:15:60:ee:2b:0b:09:02:8e:fd:c7:fc:ad:fd:
         9d:7b:bd:4b:2a:e3:8d:c1:84:95:d7:af:60:b3:00:7a:2c:d9:
         28:fc:29:a0:5e:29:32:7c:23:e2:ca:13:f8:5a:89:11:02:b1:
         e5:02:a3:bb:57:0f:f0:f8:4a:7d:ec:61:78:49:8a:9e:1b:a0:
         98:51:4a:6f:3f:41:ed:2f:0c:f8:5e:4f:8f:b8:42:5f:ba:ee:
         d4:e4:e2:c2:25:a1:46:d5:07:ab:b2:af:56:11:d7:ca:16:5f:
         bb:2d:fc:28:13:8c:8e:e9:c7:23:15:bc:a9:c8:a0:32:39:51:
         64:41:58:26:26:ff:43:f8:15:0e:17:b8:ef:57:03:96:1a:4b:
         67:9a:18:ac:72:92:f1:c1:1e:08:ad:70:2b:f8:4f:b9:d0:8a:
         07:37:15:71:99:07:94:fe:cf:15:b0:c9:2e:63:5a:36:9d:3f:
         d7:6a:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org