Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          IkG7MgdH1wqeWV9R9QMlmIOrNjYZO/shkPtDlCROcIw=
Subject key identifier:   19:22:CC:69:9C:8F:5A:8B:AA:27:AE:97:7A:36:FF:8A:05:20:58:49
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       7F4194807455145D05159765EE403E4957746A16
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:52:26 +0000
ROA not before:           Mon 13 Mar 2023 15:47:26 +0000
ROA not after:            Mon 11 Mar 2024 15:52:26 +0000
asID:                     267451
IP address blocks:        2804:41b4:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:41:94:80:74:55:14:5d:05:15:97:65:ee:40:3e:49:57:74:6a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:47:26 2023 GMT
            Not After : Mar 11 15:52:26 2024 GMT
        Subject: CN=1922CC699C8F5A8BAA27AE977A36FF8A05205849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:dc:71:51:0d:5a:95:a7:ee:29:23:48:a0:
                    9f:84:a4:86:f2:88:16:2a:e3:dd:77:84:f6:be:95:
                    f8:7c:96:56:22:c1:93:4e:eb:be:59:cd:a8:ec:5c:
                    f7:dc:18:79:db:b4:52:26:35:97:8d:e5:93:92:fe:
                    0c:75:09:e3:84:0b:40:0d:d5:4b:73:0e:49:a6:4e:
                    00:24:f5:b8:64:b5:b9:2a:37:1b:ec:8a:8b:1b:f7:
                    51:0c:e3:3b:af:86:44:9a:7a:63:df:66:0b:5f:f0:
                    4a:b3:51:c6:c1:6e:35:03:0f:8a:86:cb:21:5b:8b:
                    33:7a:35:36:ce:82:1b:5f:52:16:13:d0:f9:5d:b3:
                    e7:c0:32:5e:95:a2:fe:64:15:bd:03:f7:73:2a:6b:
                    5f:50:a0:c2:13:c6:dc:72:fc:5d:a5:09:0c:bd:cb:
                    ae:49:df:21:af:fb:5f:36:6f:64:ff:15:bd:a4:69:
                    78:22:6f:0c:71:57:ef:18:7e:9a:54:ef:c8:87:ba:
                    dc:cd:64:09:58:fd:d0:65:03:d1:18:28:3c:2c:4e:
                    b3:c8:9e:46:cc:a2:a7:be:ce:d3:0d:93:33:9a:61:
                    30:b4:33:70:cc:1e:b8:f1:a9:cc:2b:12:25:5b:0a:
                    be:61:85:54:1f:78:f4:4d:1c:58:31:16:fc:0a:4f:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:CC:69:9C:8F:5A:8B:AA:27:AE:97:7A:36:FF:8A:05:20:58:49
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:89:62:74:e3:67:52:73:cc:78:bd:db:ef:d0:21:c6:59:69:
         af:f1:db:b2:f0:27:d2:a8:00:32:3a:41:e2:ba:fa:92:55:62:
         26:28:c2:1d:d4:dd:85:53:f4:74:25:cc:65:bd:da:08:3b:3e:
         bd:61:53:86:af:8b:ea:8c:c7:f6:bb:ba:4c:14:23:6e:56:43:
         83:40:a4:c9:7a:88:cf:28:6b:82:e0:24:c2:95:65:2b:7a:fa:
         ef:2c:e1:c2:b0:5a:8e:a6:b7:cb:6b:70:d8:ee:5d:d9:cf:4c:
         d5:64:c3:58:0b:4b:70:33:a4:34:ac:1d:5d:e1:e6:34:8b:7e:
         88:4e:c3:30:e5:73:9a:69:1e:35:d6:48:6b:93:49:e5:38:91:
         ef:2a:77:00:35:ae:3d:15:e6:9c:48:2e:40:91:16:04:78:86:
         a9:5d:cb:96:7b:9d:36:af:62:bc:2e:38:38:ea:21:9a:cf:0c:
         96:52:63:37:50:12:95:cf:10:2b:7b:13:d3:b2:43:11:ec:28:
         16:e9:0a:e5:1c:4d:c1:a4:f9:e9:96:d5:ae:7a:92:27:74:ac:
         de:7e:fd:0b:8f:a5:71:ea:23:2c:f2:10:bb:d4:91:82:04:e6:
         b9:c5:99:83:3b:ec:40:96:bd:53:a6:1a:24:27:63:e0:7f:fd:
         db:31:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org