Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a363030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a363030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          VK1L/x8TpszpT7mVn1a+ieGc0lBop/5CQrAQPEXXjlo=
Subject key identifier:   BF:0B:21:96:A0:F1:36:CD:34:8E:F2:B0:39:11:42:CE:FA:EC:5A:F6
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       07AF1FE0A4929E9161C2ADB19CDF5B845E0EAC28
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a363030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:54:34 +0000
ROA not before:           Mon 13 Mar 2023 15:49:34 +0000
ROA not after:            Mon 11 Mar 2024 15:54:34 +0000
asID:                     267451
IP address blocks:        2804:41b4:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:af:1f:e0:a4:92:9e:91:61:c2:ad:b1:9c:df:5b:84:5e:0e:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:49:34 2023 GMT
            Not After : Mar 11 15:54:34 2024 GMT
        Subject: CN=BF0B2196A0F136CD348EF2B0391142CEFAEC5AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:52:74:8e:c4:da:f9:36:1f:6f:6a:a8:3c:
                    19:db:e9:ee:e1:a8:18:72:8d:26:bd:b0:87:4c:b2:
                    6b:26:cd:c7:47:ae:00:1d:3d:bc:65:0b:a8:b8:b2:
                    73:01:11:47:3f:40:c9:0c:ab:c9:07:42:df:b1:bb:
                    3a:63:2a:96:71:82:fb:f0:10:b0:69:c6:76:ce:df:
                    f0:97:a1:10:c8:0a:e3:4c:74:19:2d:ca:e6:c8:77:
                    f2:71:fb:39:70:62:b7:bb:41:cd:8e:a5:0b:c4:01:
                    6f:6d:ea:09:cd:9e:fc:93:f4:5e:97:f9:4b:fe:05:
                    5f:4d:c5:f3:4e:30:5e:73:65:4e:a6:2c:22:ed:51:
                    47:41:d4:96:26:d0:1a:e6:fc:8b:5e:72:8b:08:2b:
                    e2:5e:b7:49:0f:b3:0d:63:6b:fb:ff:37:f0:d0:76:
                    9d:f1:01:93:1b:53:36:eb:e2:2a:6d:9f:a7:b8:db:
                    14:8d:6e:46:29:21:8b:bf:2a:90:2c:68:24:da:37:
                    98:21:7e:d5:36:77:4c:36:57:35:bb:25:10:9a:9f:
                    9f:7c:3d:7e:87:6d:8d:91:0d:cc:1e:1b:fa:07:d7:
                    41:66:5c:d8:3b:db:fa:b4:b7:42:30:83:f7:b3:8c:
                    ab:e2:da:4a:de:39:0a:bd:93:ee:e9:31:fc:91:31:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:21:96:A0:F1:36:CD:34:8E:F2:B0:39:11:42:CE:FA:EC:5A:F6
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a363030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:7a:06:9b:76:e9:04:69:ff:06:94:10:5d:38:71:ca:87:
         a8:59:f1:5d:df:a4:4e:17:fe:be:29:46:1c:b0:8d:7f:36:b2:
         2e:72:75:a3:96:b1:72:ca:b9:75:06:f3:91:6f:21:1d:65:f5:
         71:80:5d:cc:7c:b5:96:7e:1c:0d:1d:7b:c5:79:89:e8:3e:6b:
         ec:e9:fe:be:a2:57:f1:87:20:2b:0b:32:7e:6a:8b:39:0e:7a:
         65:43:49:ad:32:7e:4e:8d:f7:6e:ac:1a:e8:e1:90:79:c9:f4:
         4c:08:5c:26:ab:ea:ae:22:22:a2:c3:fe:fb:56:53:ad:4d:31:
         36:10:12:3e:98:55:e1:cc:42:9d:d2:e5:00:dd:6c:06:e5:0d:
         e2:0b:1b:51:d3:fc:0e:d5:ed:2b:0f:28:e7:b9:53:05:28:17:
         71:f1:f3:7e:95:c6:48:a5:6a:31:80:f6:3c:30:96:0a:39:69:
         89:a3:7d:43:d0:f6:f7:76:67:1a:2b:21:a7:b4:85:ca:78:65:
         c9:f3:cf:ec:a6:90:9a:b9:05:6b:a4:13:93:2d:f0:44:db:f3:
         65:13:9b:0f:e0:9c:ec:ed:86:f8:33:3d:04:4b:24:8a:dd:3b:
         7c:37:6b:6f:ec:77:8b:de:d7:9e:2f:8e:50:ac:5d:0b:d5:53:
         7f:a8:29:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org