Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3330303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a3330303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          clS00C3WkBh0bfI5TwDstoYvtu8PIPfBNb0mix9ugzQ=
Subject key identifier:   7A:09:24:9B:CB:0C:9E:26:36:C6:95:FC:2E:F1:6F:94:95:99:CB:8B
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       0DC608BDA5672130C02C9EE29A0AAA3BF73DC185
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3330303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     263924
IP address blocks:        2804:27d4:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:08:bd:a5:67:21:30:c0:2c:9e:e2:9a:0a:aa:3b:f7:3d:c1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=7A09249BCB0C9E2636C695FC2EF16F949599CB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:87:05:f4:36:b2:de:24:84:af:db:1e:a6:fa:
                    87:dc:53:23:e2:f8:df:f5:3e:b6:0d:14:13:86:c3:
                    6e:d7:60:27:ff:7e:c9:98:00:5b:99:67:19:7b:f3:
                    57:c5:75:1c:b2:28:4f:72:6a:d0:22:8a:f8:8e:e9:
                    6c:b6:49:a7:18:4b:7c:29:d9:da:c7:09:0c:2f:c8:
                    e8:a0:cc:ac:fc:6d:94:70:72:d6:db:98:c6:0e:c9:
                    cc:d9:f0:3a:61:03:23:19:24:fc:40:c9:d3:1e:49:
                    85:34:c0:43:49:0a:67:16:bb:a7:8e:bb:bb:be:39:
                    a1:9f:06:cf:eb:5f:a4:e5:b3:ca:88:64:e2:7c:6f:
                    dd:65:39:13:42:81:94:81:33:4a:98:49:e1:39:1b:
                    bf:dd:02:37:cc:e1:c8:0c:48:44:49:99:3b:42:67:
                    ee:87:4c:ce:59:92:7c:bc:25:eb:5a:0f:80:9e:a6:
                    3c:6a:c7:1d:dd:c8:b0:35:09:6d:28:38:76:72:d1:
                    ea:9f:68:b8:5b:d7:7b:48:da:5c:91:6a:bf:cd:60:
                    59:dd:1b:ec:c5:ab:f4:46:2e:96:6d:f8:5e:1a:c5:
                    7b:f5:11:24:cf:dc:86:03:8e:15:d2:db:73:ea:19:
                    5f:1c:32:ef:42:24:38:fd:a1:26:d9:34:1b:78:e4:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:24:9B:CB:0C:9E:26:36:C6:95:FC:2E:F1:6F:94:95:99:CB:8B
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3330303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:4c:e8:43:88:08:15:4c:7e:04:91:01:c9:a3:d4:d7:c5:
         65:1e:54:ab:09:77:46:b4:ec:d2:6f:09:cf:55:32:17:69:64:
         9d:ea:03:20:49:54:19:15:bd:4d:b1:4f:65:b8:4a:70:6a:19:
         d4:63:a2:7f:6b:fc:73:fd:22:77:11:79:4d:a3:8e:fa:d6:ce:
         f1:48:84:65:5b:cf:fa:e0:60:ed:9b:81:92:01:e9:27:56:61:
         5a:e1:a2:da:42:e8:19:99:4c:d3:3d:62:87:c7:f3:b3:01:c3:
         dd:f6:31:26:af:78:ea:ca:53:c0:3a:47:51:dd:fc:91:19:a4:
         c4:b0:f8:41:d0:48:3b:fc:69:ad:89:b6:5f:e2:0f:fc:90:df:
         72:06:89:0c:be:9f:51:05:00:5c:2b:14:4a:7a:61:98:72:78:
         57:26:6d:93:2a:0c:c6:ca:ad:d3:be:51:75:00:17:da:2e:64:
         8a:c4:67:50:ca:b7:87:65:37:9c:d8:ed:37:30:fa:b2:c5:b9:
         2c:01:87:07:a2:1f:d2:1d:36:c9:00:4d:2e:d3:5a:5a:46:6c:
         ed:6b:a1:03:57:e8:f7:8f:b0:8c:b2:74:0a:63:af:3c:7a:ea:
         4e:ee:8f:29:65:99:6d:2d:92:bd:17:8f:ce:e1:8f:43:80:13:
         9c:f9:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org