Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          8o9z6XXJ04YAznqHN9/KzK1jqw5hOhj8IFN0IMoX5zU=
Subject key identifier:   FE:08:85:33:29:28:26:D6:7B:88:88:D1:69:37:15:C4:F0:0C:45:80
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       33A961E00EC779491599547DF6C1597AEB37CAE5
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:52:23 +0000
ROA not before:           Mon 13 Mar 2023 15:47:23 +0000
ROA not after:            Mon 11 Mar 2024 15:52:23 +0000
asID:                     267451
IP address blocks:        2804:41b4::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a9:61:e0:0e:c7:79:49:15:99:54:7d:f6:c1:59:7a:eb:37:ca:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:47:23 2023 GMT
            Not After : Mar 11 15:52:23 2024 GMT
        Subject: CN=FE088533292826D67B8888D1693715C4F00C4580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:f3:3a:12:ed:b5:b3:7b:c4:96:1b:b4:29:
                    23:3a:36:59:98:00:cb:66:eb:7f:21:14:60:2d:10:
                    68:1b:19:a7:86:12:5a:50:9e:c3:ab:da:f2:23:17:
                    28:c9:ed:b4:e9:c3:a6:22:87:c8:66:6c:97:00:b6:
                    95:51:7c:df:cb:14:38:e8:16:d8:4d:bd:6b:96:32:
                    e5:5c:31:04:aa:a1:bf:08:52:c5:74:6c:cf:8e:ac:
                    5d:b3:22:c1:1d:d2:24:43:9c:a5:25:02:31:c4:df:
                    32:ec:c7:9f:e8:f6:4f:f8:b4:c6:83:ef:4d:b8:9b:
                    c8:79:ce:c3:b7:ba:3f:2f:ba:f2:61:be:a3:59:53:
                    c0:ca:9a:73:28:fe:62:c1:b4:fc:e8:1f:29:64:e3:
                    a2:30:93:f0:c9:00:b8:75:9d:43:3f:f3:b1:cd:c5:
                    56:34:fe:2c:a8:96:23:cb:d5:4e:65:45:97:38:e8:
                    43:32:6d:cb:e9:9c:bc:c9:f1:8f:13:05:d1:9f:be:
                    3e:62:3f:aa:2d:8b:58:86:f5:58:21:5f:04:89:f7:
                    e3:e6:1e:c6:01:06:45:b7:3b:5e:83:fc:1d:3b:d0:
                    6d:5a:a0:78:67:0c:b8:60:37:72:54:04:c4:1d:b3:
                    83:24:23:44:10:ce:89:c8:5c:14:9b:b4:f1:e2:ae:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:08:85:33:29:28:26:D6:7B:88:88:D1:69:37:15:C4:F0:0C:45:80
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:16:ba:9b:6e:51:79:9a:ce:25:50:75:28:30:b3:63:8a:c1:
         fc:49:e2:85:1b:28:61:69:15:4f:cc:62:df:7f:14:2c:43:cc:
         56:25:43:35:3d:36:bc:bd:4b:26:db:e6:31:dd:07:30:1d:62:
         14:6f:ea:a7:b1:3b:b3:1a:dc:00:fb:3b:13:8f:be:97:d5:7c:
         e4:bb:94:4d:43:9f:54:60:20:93:49:34:21:d9:41:e2:ab:f9:
         13:21:a2:bc:6f:f3:40:e0:d1:21:4a:87:3e:45:f2:f2:15:2b:
         3b:00:d0:97:ea:25:26:e6:75:97:65:d3:24:75:ce:d0:3a:e2:
         4c:7b:9b:38:c5:1a:22:f6:22:0a:e6:58:78:c6:ba:e1:b2:cb:
         a5:a9:1b:45:3b:66:b8:38:21:f7:bc:7a:a3:4a:73:41:65:a1:
         91:d5:7d:3e:4a:ad:e5:8c:af:7d:55:77:6b:e7:23:0c:f5:00:
         43:23:7f:1b:46:c7:fe:0b:2f:df:d2:35:f9:99:95:de:bc:0d:
         41:54:18:a4:62:a2:3b:fc:bf:37:69:67:ec:bd:31:33:35:98:
         24:d4:66:83:ec:03:11:8e:e0:f6:d2:38:2c:e3:78:f8:da:ea:
         c4:eb:88:6b:7e:6c:5c:b5:7c:55:3a:f0:e9:3e:fe:21:91:7f:
         9e:55:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org