Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33332d3333203d3e20323633393234.roa
File:                     323830343a323764343a3a2f33332d3333203d3e20323633393234.roa (raw, json)
Hash identifier:          wfNV6+nEHO4ah8xG3y4tdy4FQHPFUBoY4++os8iPMJQ=
Subject key identifier:   08:F6:09:3F:D7:0D:9E:DA:AC:B1:A1:00:23:4A:7F:7F:C7:34:04:2D
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       678A8027D976FCF2FC3B312A1020473475AB1727
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33332d3333203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     263924
IP address blocks:        2804:27d4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8a:80:27:d9:76:fc:f2:fc:3b:31:2a:10:20:47:34:75:ab:17:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=08F6093FD70D9EDAACB1A100234A7F7FC734042D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:93:d0:7e:b1:f1:71:23:ec:ae:c3:48:a9:
                    3b:a4:ff:0f:ac:64:c4:81:39:89:ac:96:23:bb:61:
                    f8:72:6c:d5:8b:4b:49:c5:1b:45:3d:82:d1:a9:05:
                    08:54:89:33:79:b7:f7:cc:98:fc:9b:c9:db:1b:e6:
                    52:7d:14:e7:be:32:bc:0d:43:e3:8e:46:60:2a:22:
                    cd:62:8f:38:b3:36:5e:2f:59:2e:fc:02:c6:1c:ad:
                    53:67:c5:ea:2b:26:de:a6:5b:32:98:a2:4f:f3:99:
                    98:91:fc:a7:15:60:05:73:2e:ce:23:37:d7:03:2e:
                    8f:9f:ad:dc:4c:b7:4c:2f:6a:24:4d:c7:01:8b:cb:
                    7b:3d:ed:97:7a:e6:b9:62:0f:fe:59:b0:a4:e6:2c:
                    d4:e0:78:e7:d0:23:39:d4:4c:5f:ef:22:5a:28:ae:
                    3e:83:1d:56:f6:86:43:30:81:0f:dd:45:ea:44:13:
                    16:fd:78:1d:2f:2d:e9:7d:68:3f:58:73:23:19:c1:
                    bb:88:a3:a2:a7:4f:bf:29:57:21:23:7a:5d:f6:bc:
                    99:cd:db:42:7f:bb:38:e4:df:ac:d8:89:f8:2d:4e:
                    68:a1:75:06:18:99:f3:e8:72:0d:76:06:b1:cd:66:
                    b3:0a:af:95:35:ec:1a:85:4a:75:d1:5d:d1:7e:cb:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F6:09:3F:D7:0D:9E:DA:AC:B1:A1:00:23:4A:7F:7F:C7:34:04:2D
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33332d3333203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:48:e8:4c:3c:d6:7a:d1:6d:2f:44:c8:52:a2:fa:4c:66:
         0d:a7:30:f4:9c:38:d5:e9:5f:38:2d:8f:40:da:d9:87:d4:ce:
         38:b5:18:8d:2d:de:6e:2a:47:02:f4:22:54:9e:f8:1b:26:e1:
         7f:54:4b:9b:a7:63:19:27:46:33:dc:0f:12:89:43:28:76:83:
         7a:7a:72:50:cf:3f:70:d9:af:2c:dc:18:3c:ed:c1:48:7f:5e:
         5d:ca:b3:6c:99:7d:6c:01:ec:52:20:de:9c:94:c6:62:4f:91:
         59:9e:c0:46:00:7e:69:9b:14:fb:f8:d7:17:1c:40:f1:08:41:
         91:a7:5d:b0:9b:82:1d:f6:7a:9c:05:d4:4f:9e:70:b4:06:7f:
         4e:1d:2b:03:17:6b:da:19:f1:70:03:31:d4:8e:7d:97:59:4c:
         4c:47:e3:48:6e:60:0d:3e:1c:6d:ab:b7:d5:b2:df:99:a9:53:
         2a:d6:3c:42:46:22:b2:1f:36:c1:db:f5:9c:b1:aa:80:ff:cc:
         2f:2c:4c:34:79:a9:8b:4e:e0:fc:32:32:b1:8f:54:0e:07:ed:
         a3:dc:8a:48:fd:05:9b:3a:0c:72:21:99:7d:1d:e3:cb:63:94:
         1e:2f:38:7c:26:ce:44:50:d0:04:a1:26:42:6d:6f:ad:5e:b4:
         54:af:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org