Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          qeqRw5acjrKLNi6ls1txPdzHzpW2CJbf71rm6sta3x0=
Subject key identifier:   3D:ED:49:3D:F7:18:E4:11:83:8D:CB:F4:3A:AB:D4:78:D5:22:C3:31
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       68FE445F9C1EF5FCD1552FA32CB923B21A2B8EE4
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:54:51 +0000
ROA not before:           Mon 13 Mar 2023 15:49:51 +0000
ROA not after:            Mon 11 Mar 2024 15:54:51 +0000
asID:                     267451
IP address blocks:        2804:41b4:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fe:44:5f:9c:1e:f5:fc:d1:55:2f:a3:2c:b9:23:b2:1a:2b:8e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:49:51 2023 GMT
            Not After : Mar 11 15:54:51 2024 GMT
        Subject: CN=3DED493DF718E411838DCBF43AABD478D522C331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:5d:b8:cb:49:36:1a:9e:6d:1e:d2:d2:41:
                    78:a9:4d:83:62:e6:d2:65:6e:d5:a8:44:3d:89:3f:
                    80:85:8f:8f:f0:d1:f7:da:73:81:73:5f:78:40:5e:
                    c5:24:46:01:22:3f:d4:b2:36:c9:50:dd:20:54:2f:
                    10:ee:5a:9b:1c:7f:8a:1c:02:e9:71:be:2b:46:ea:
                    ff:a1:17:5b:e5:2e:23:89:7c:d7:1f:c7:18:e3:4c:
                    6a:65:00:ff:80:23:6b:cd:cf:22:06:d3:c5:47:57:
                    fd:8a:44:91:89:20:3e:b5:47:2a:fc:be:18:7c:a9:
                    0b:ab:8f:9c:28:0b:7b:b5:5e:f3:33:19:ab:05:93:
                    3f:bf:07:84:eb:25:2c:a6:ea:dd:1d:d8:0b:ef:4a:
                    25:67:75:c7:10:0f:11:61:08:87:89:f6:51:8a:ba:
                    b6:e9:b8:f9:22:ad:56:53:5d:ba:eb:a2:41:75:40:
                    3b:20:b5:a9:9a:49:ce:e7:41:2c:81:9e:06:cc:f6:
                    33:ce:64:f9:42:3c:fc:ae:47:ed:f2:ca:41:a8:43:
                    1b:70:74:dd:d2:14:86:af:50:27:6f:07:03:48:7f:
                    b0:13:fe:b8:e5:5a:1b:5d:13:1d:7d:99:5a:f8:59:
                    1d:ae:66:b3:03:54:52:f7:b4:f2:23:12:9a:38:7c:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:49:3D:F7:18:E4:11:83:8D:CB:F4:3A:AB:D4:78:D5:22:C3:31
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a393030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:0d:f0:d5:20:de:be:ac:d9:9d:05:be:5c:f2:01:dc:9c:
         00:80:c5:29:e7:76:9a:1d:7a:60:8c:42:22:24:ab:87:68:13:
         d9:d1:e1:83:99:7c:0d:d9:87:5d:97:35:a9:fe:c8:df:23:50:
         8c:76:b7:18:12:27:78:96:4f:d2:2d:35:74:ed:2b:7b:81:20:
         66:49:7c:7a:d8:d0:43:29:bd:77:59:4e:2b:80:3b:0b:14:6c:
         45:87:e5:5d:c1:50:41:2b:e5:0d:bb:22:30:59:63:a4:b7:ad:
         a9:e0:27:63:a2:1a:c9:21:ea:d4:45:f8:af:0d:09:49:19:ef:
         9c:17:b7:e9:ec:3b:87:74:59:bc:a6:36:99:a8:83:7d:a6:5c:
         36:f9:51:47:db:15:11:3d:27:94:f7:96:c3:9b:b8:42:e3:fd:
         71:aa:ed:1b:d6:6f:ff:4f:f1:f4:39:23:c4:ae:db:47:ae:18:
         e1:1a:e9:30:43:b1:fc:79:e6:55:a1:ed:6e:a7:7f:23:44:09:
         0f:6f:43:74:c9:35:a8:f2:0a:0e:4d:46:77:25:cb:a9:5e:2c:
         fb:12:96:ed:b2:86:64:76:0c:a3:9c:a4:9d:40:05:6b:5f:86:
         c3:1f:a8:00:d5:03:30:f3:6b:18:f7:91:1a:7f:d3:40:6d:d0:
         77:9c:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:01 2025 by rpki-client