Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa
File:                     323830343a343162343a3a2f33322d3332203d3e20323637343531.roa (raw, json)
Hash identifier:          s0VjBYAHSC37V9HEO7BsacnEBmTDcCfiVf1YBwi8W28=
Subject key identifier:   11:9C:42:B2:51:64:7D:23:95:43:D2:B3:53:E7:59:EC:A6:B8:30:D3
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       41C14F580D1D956B51FF287ECEF97BE6B41023AF
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:52:18 +0000
ROA not before:           Mon 13 Mar 2023 15:47:18 +0000
ROA not after:            Mon 11 Mar 2024 15:52:18 +0000
asID:                     267451
IP address blocks:        2804:41b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:4f:58:0d:1d:95:6b:51:ff:28:7e:ce:f9:7b:e6:b4:10:23:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:47:18 2023 GMT
            Not After : Mar 11 15:52:18 2024 GMT
        Subject: CN=119C42B251647D239543D2B353E759ECA6B830D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:3a:fc:24:a4:b2:d0:26:bd:a9:a8:41:bc:
                    63:57:c9:55:34:74:cc:81:49:22:06:11:01:a5:78:
                    64:a6:58:9b:1a:52:3f:aa:fa:11:ae:5d:79:2d:3e:
                    50:27:1c:a2:80:f7:40:4a:a8:7c:83:6c:47:d9:34:
                    52:94:b0:ae:e9:b1:b7:3d:43:1a:ec:14:2b:7e:63:
                    2d:65:38:b6:c0:3a:60:c6:0c:8b:da:ed:86:0c:09:
                    2e:71:2b:97:c9:12:27:c9:6d:64:34:9d:26:33:16:
                    99:e3:9d:92:a5:c6:77:6b:a2:6f:a3:b6:ab:81:9b:
                    6f:31:9e:13:44:fe:a1:16:33:74:42:9e:1b:a9:62:
                    70:bb:64:00:2b:0d:b9:f8:c4:86:63:e9:46:8a:01:
                    ce:d2:a5:22:67:69:c2:f1:56:65:49:ed:4f:15:e9:
                    2f:de:7d:9c:e9:96:ef:11:b0:30:4e:64:bf:3a:b1:
                    d0:07:e1:47:75:7a:59:67:20:23:7f:06:0e:09:03:
                    39:96:ee:7c:a0:45:a0:34:91:cc:45:f1:e4:2b:68:
                    b8:47:4a:66:68:65:6c:d5:b3:d6:03:30:a3:94:34:
                    16:08:fd:9b:8c:e7:ec:06:40:c1:79:7a:a1:d4:43:
                    8c:b7:36:39:03:1c:d7:e9:84:f3:a1:e7:24:dc:1f:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:42:B2:51:64:7D:23:95:43:D2:B3:53:E7:59:EC:A6:B8:30:D3
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:38:f2:5d:6a:a6:6b:6f:8c:84:20:51:93:4b:ab:48:10:ee:
         74:26:ee:f8:e5:33:d3:e4:ff:b5:93:e7:0a:df:34:51:8c:96:
         ce:fa:ed:fe:b3:70:ac:c5:c1:84:96:a8:05:d4:ad:f5:57:30:
         fc:f7:ef:4a:bf:f3:2d:90:dd:2e:4b:e2:36:45:f6:a9:91:0b:
         a7:42:ee:22:00:20:8c:27:25:ec:f0:d5:f6:29:df:65:5d:5d:
         c3:e2:72:7a:97:4c:d7:81:24:1c:3f:6d:c6:5e:ba:02:83:96:
         af:92:34:b8:c4:17:bd:80:e2:5f:9d:29:58:4b:d8:2e:a7:b9:
         0a:f4:d5:60:65:5e:58:3f:d3:f3:a9:b9:62:6f:f7:6b:b9:5d:
         2c:a9:db:ab:1d:1c:2d:3b:58:61:c3:40:df:b2:1b:77:df:73:
         7d:d5:de:61:8d:13:d2:7d:1b:2b:31:8b:80:98:a0:00:51:9d:
         a4:2e:84:1f:48:52:fb:40:77:83:c7:6c:d5:c8:4d:69:52:c5:
         bd:87:bf:b2:47:40:73:65:b6:15:93:83:78:96:0e:69:85:fb:
         44:87:5f:88:a0:57:bc:b8:ea:9b:40:c7:41:97:e2:36:1d:ef:
         d8:b7:0b:fa:9f:19:b0:18:f8:10:9e:04:df:33:75:26:e8:10:
         42:ed:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org