Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a623030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a623030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          oG8OFOcWd6qkuCeKGicwLyEfmeMeBzFq1/PhEobgP0k=
Subject key identifier:   32:94:FD:AF:86:3E:83:5C:CD:E3:B0:8F:58:3E:28:1B:D0:FB:66:F2
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       3E9434928867F195C9D003A1559027B410EE1FBC
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a623030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:55:28 +0000
ROA not before:           Mon 13 Mar 2023 15:50:28 +0000
ROA not after:            Mon 11 Mar 2024 15:55:28 +0000
asID:                     267451
IP address blocks:        2804:41b4:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:34:92:88:67:f1:95:c9:d0:03:a1:55:90:27:b4:10:ee:1f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:50:28 2023 GMT
            Not After : Mar 11 15:55:28 2024 GMT
        Subject: CN=3294FDAF863E835CCDE3B08F583E281BD0FB66F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:61:f7:51:af:d2:05:65:af:d0:bd:0c:4d:
                    14:6e:de:a4:a5:48:1a:56:78:09:98:91:e2:75:18:
                    87:44:71:a2:f1:5f:15:0f:cc:60:b7:16:29:73:14:
                    6f:45:82:2f:06:36:62:37:b2:f6:09:16:f4:c0:4b:
                    b5:da:7a:43:7b:3e:ba:a2:11:6d:62:9f:a4:f4:9d:
                    11:8c:d1:44:51:4f:18:ab:6b:17:dc:3a:46:2e:57:
                    3f:0b:d1:46:12:f7:a2:82:70:ee:ff:a2:82:8d:c6:
                    e7:4a:f7:38:ea:a4:a8:3e:43:20:6b:38:f0:9e:4a:
                    6f:02:3f:03:50:7f:bf:e3:04:dc:9c:d7:d9:27:3d:
                    ab:e3:a3:68:71:30:0e:35:77:63:fc:45:a0:43:cd:
                    36:ab:78:b8:7a:6e:74:6a:32:ee:f6:aa:ed:cb:7a:
                    1b:76:41:d1:61:04:76:f2:ce:a2:5f:93:7d:bb:95:
                    36:52:3b:0b:4b:00:04:9b:76:2a:cb:9e:33:a7:ff:
                    fa:23:36:f4:fe:61:92:cf:07:06:78:d9:38:a8:48:
                    75:66:71:46:2c:c9:cb:df:ba:b2:31:81:59:16:32:
                    8c:d5:74:c3:73:bd:34:70:cf:78:b5:fb:d5:5f:be:
                    4d:25:8b:5e:1a:81:f2:a0:32:1d:e8:25:94:c1:00:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:FD:AF:86:3E:83:5C:CD:E3:B0:8F:58:3E:28:1B:D0:FB:66:F2
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a623030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:52:7d:fd:62:c5:97:a6:8b:04:d2:29:b7:6d:0a:de:9d:
         f5:f1:5d:e4:cf:10:5a:c4:4b:02:56:91:0c:e4:1a:ef:af:58:
         fe:fe:fc:15:52:26:d2:21:a2:64:d6:bf:cc:98:8e:2f:20:44:
         34:6e:3e:1d:3f:c5:c1:ff:d7:cf:1e:01:23:5e:ae:a9:20:45:
         5c:65:e2:a3:a9:58:21:70:2d:d4:5f:a4:6e:59:ce:08:e1:3f:
         4e:7b:13:e8:50:2f:b3:f9:75:21:75:7d:b4:2a:5b:dc:0f:94:
         33:10:e9:db:a2:3f:c9:88:92:60:54:e3:5b:cd:fd:59:47:64:
         69:b3:fa:53:05:6e:bb:b7:35:22:6f:1e:ab:c9:db:f9:2f:d9:
         4e:c2:69:4e:8a:17:96:57:fc:fa:9e:06:3d:cb:f6:fe:5b:7a:
         d6:7a:8b:9e:75:3b:54:20:db:08:aa:1b:a3:57:50:a1:23:05:
         87:84:ae:22:97:59:bb:d7:82:f7:0b:a1:57:14:87:39:6a:e2:
         d5:bd:e3:39:61:f1:99:85:82:b7:33:39:7a:ce:c9:bd:57:f2:
         68:3f:7e:05:b0:cd:b9:ad:23:af:a9:39:bc:bd:55:95:02:4c:
         bf:34:3c:5a:35:4e:20:b9:8d:68:6d:a4:8d:21:6c:38:41:7d:
         4e:db:79:42
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPpQ0kohn8ZXJ0AOhVZAntBDuH7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBGMEIwMTUwODQ0M0VDRjI0OTQ2RUE2ODJBMzZGNEZD
MTMxNDBCMTAeFw0yMzAzMTMxNTUwMjhaFw0yNDAzMTExNTU1MjhaMDMxMTAvBgNV
BAMTKDMyOTRGREFGODYzRTgzNUNDREUzQjA4RjU4M0UyODFCRDBGQjY2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0VmH3Ua/SBWWv0L0MTRRu3qSl
SBpWeAmYkeJ1GIdEcaLxXxUPzGC3FilzFG9Fgi8GNmI3svYJFvTAS7XaekN7Prqi
EW1in6T0nRGM0URRTxiraxfcOkYuVz8L0UYS96KCcO7/ooKNxudK9zjqpKg+QyBr
OPCeSm8CPwNQf7/jBNyc19knPavjo2hxMA41d2P8RaBDzTareLh6bnRqMu72qu3L
eht2QdFhBHbyzqJfk327lTZSOwtLAASbdirLnjOn//ojNvT+YZLPBwZ42TioSHVm
cUYsycvfurIxgVkWMozVdMNzvTRwz3i1+9Vfvk0li14agfKgMh3oJZTBAM3JAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMpT9r4Y+g1zN47CPWD4oG9D7ZvIwHwYDVR0j
BBgwFoAUQPCwFQhEPs8klG6mgqNvT8ExQLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hFSnVBN21vbkI1RkRnRjJSRVBtMzlWSGFpTlJhbTFRazNFaFZtNFNU
M3MvMS80MEYwQjAxNTA4NDQzRUNGMjQ5NDZFQTY4MkEzNkY0RkMxMzE0MEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwRjBCMDE1MDg0NDNFQ0Yy
NDk0NkVBNjgyQTM2RjRGQzEzMTQwQjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIRUp1QTdtb25CNUZEZ0YyUkVQbTM5VkhhaU5SYW0xUWszRWhWbTRTVDNzLzEv
MzIzODMwMzQzYTM0MzE2MjM0M2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEQbSwMA0GCSqGSIb3DQEBCwUA
A4IBAQBf51J9/WLFl6aLBNIpt20K3p318V3kzxBaxEsCVpEM5Brvr1j+/vwVUibS
IaJk1r/MmI4vIEQ0bj4dP8XB/9fPHgEjXq6pIEVcZeKjqVghcC3UX6RuWc4I4T9O
exPoUC+z+XUhdX20KlvcD5QzEOnboj/JiJJgVONbzf1ZR2Rps/pTBW67tzUibx6r
ydv5L9lOwmlOiheWV/z6ngY9y/b+W3rWeouedTtUINsIqhujV1ChIwWHhK4il1m7
14L3C6FXFIc5auLVveM5YfGZhYK3Mzl6zsm9V/JoP34FsM25rSOvqTm8vVWVAky/
NDxaNU4guY1obaSNIWw4QX1O23lC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org