Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          +LgcWQkAlBySfmlA2dXUR5Wzak4aQo/by4E668K4gSc=
Subject key identifier:   1B:B2:9E:07:E1:FE:2D:0E:FE:EB:40:81:BD:F1:62:4D:B6:33:81:E6
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       40C64231675392FBC5E74C27C4230F84CCC4BC68
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:52:30 +0000
ROA not before:           Mon 13 Mar 2023 15:47:30 +0000
ROA not after:            Mon 11 Mar 2024 15:52:30 +0000
asID:                     267451
IP address blocks:        2804:41b4:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c6:42:31:67:53:92:fb:c5:e7:4c:27:c4:23:0f:84:cc:c4:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:47:30 2023 GMT
            Not After : Mar 11 15:52:30 2024 GMT
        Subject: CN=1BB29E07E1FE2D0EFEEB4081BDF1624DB63381E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:68:55:aa:8e:74:d4:6b:e9:76:17:52:a7:
                    69:30:49:07:df:15:e1:47:53:e4:58:84:8f:3e:3d:
                    2b:b7:7c:88:b4:58:f5:fd:cd:d5:ea:08:5b:b6:5b:
                    bf:b0:09:6b:c2:29:1d:ce:c6:f3:66:bd:d0:92:c8:
                    b0:f4:a5:03:49:4f:dc:4a:d3:ca:69:c3:49:f1:f1:
                    a8:80:52:3b:39:e5:69:8d:a4:ca:15:41:20:0a:ae:
                    16:69:e3:8e:fd:68:e3:ec:5c:71:1e:16:a3:7c:0a:
                    65:7b:56:d7:3e:a8:48:3f:cb:51:5e:b7:7a:43:6d:
                    d7:44:bc:46:0b:ee:b5:bf:a2:f6:a6:a7:07:de:8e:
                    97:ec:4e:3b:79:7e:e7:7a:62:db:14:c7:de:e9:40:
                    b3:16:9e:f6:9a:6a:f9:2b:d6:f6:d7:29:2c:8f:d8:
                    ea:97:e2:c5:5c:5e:b7:e1:6a:3a:16:a8:9b:b4:87:
                    7f:d7:8e:34:1a:6c:8a:50:7b:59:4a:fc:f1:61:bc:
                    06:c4:ac:87:3a:7d:6f:d5:49:02:af:b9:35:2b:1b:
                    63:04:73:76:0b:75:0d:a4:d8:f2:07:82:e7:12:4f:
                    7e:b8:f2:d0:3e:dc:c8:dc:1e:30:0b:5a:cf:ba:c3:
                    ca:dc:b1:df:03:c4:53:99:8b:fb:7a:3d:fe:f6:7b:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:9E:07:E1:FE:2D:0E:FE:EB:40:81:BD:F1:62:4D:B6:33:81:E6
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a323030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:36:d1:ee:55:3c:a9:64:90:6c:84:76:e9:5f:4d:70:a9:
         f2:ed:73:c2:b3:69:6c:7b:08:3d:c1:8c:6d:87:57:59:d4:46:
         a9:8a:00:14:8b:b3:d0:b9:90:c3:db:d8:c8:cb:40:25:5e:b8:
         bb:14:18:72:35:c6:d2:24:37:06:b7:eb:8d:ce:2f:09:a5:19:
         c0:ef:94:d2:e1:97:9b:91:e8:c2:a7:28:21:3a:11:8e:2a:29:
         7f:bb:2d:be:18:cc:e9:ac:65:79:ce:e0:8b:25:86:41:8f:6c:
         64:32:ea:50:85:8a:fa:bc:35:67:4b:77:15:59:a4:4c:df:5a:
         db:09:8b:e7:6c:99:2c:6a:08:00:9c:0f:44:a6:f8:86:33:ea:
         47:45:06:1c:28:15:3c:98:a5:d0:d5:87:54:f7:b3:10:35:58:
         98:67:c3:b7:45:fd:e0:dd:1e:cd:b1:97:b7:e1:07:56:b9:3b:
         99:41:17:02:00:ac:b9:82:0a:cf:d0:11:4e:0c:7a:ea:de:d8:
         31:e8:9c:b9:ae:44:3a:56:9a:1e:8a:ef:11:d3:35:02:f6:95:
         4b:0d:e2:fc:30:f6:a5:3a:f0:b8:90:22:ae:40:11:e3:98:4b:
         29:71:d6:66:f7:95:f7:85:a5:16:f4:5e:31:1f:54:a2:62:f9:
         54:37:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:07:06 2025 by rpki-client