Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa
File:                     323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa (raw, json)
Hash identifier:          s2cEpXGdqXKpchoJzSKWm+rM4/tDvSDOxLfYyO21F44=
Subject key identifier:   4A:5F:FE:D7:5B:3C:4E:14:AF:FA:BA:FE:01:85:39:55:9B:93:DD:1C
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       44E5BFFE5D7FBA980DC7433BBAAFA189884B6F20
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:55:03 +0000
ROA not before:           Mon 13 Mar 2023 15:50:03 +0000
ROA not after:            Mon 11 Mar 2024 15:55:03 +0000
asID:                     267451
IP address blocks:        2804:41b4:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e5:bf:fe:5d:7f:ba:98:0d:c7:43:3b:ba:af:a1:89:88:4b:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:50:03 2023 GMT
            Not After : Mar 11 15:55:03 2024 GMT
        Subject: CN=4A5FFED75B3C4E14AFFABAFE018539559B93DD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:e9:39:cb:35:9b:0a:40:da:d1:00:ea:e2:
                    36:fe:37:d6:e1:25:32:7b:68:90:36:a7:9a:78:40:
                    55:1f:d5:9b:6d:c1:9d:c0:e0:26:a0:12:fb:ed:62:
                    a6:7d:1d:4b:b5:69:01:26:78:33:b6:55:34:07:05:
                    b2:cd:dd:dc:ff:34:58:1f:e8:98:d1:83:31:9c:2e:
                    50:75:ea:c0:f8:57:a6:18:d0:b7:06:a6:65:6a:6c:
                    54:e7:e2:d7:80:9b:2f:2e:ef:f3:fe:d5:f6:88:47:
                    60:43:9b:a2:18:c7:f3:be:b0:81:69:dc:34:cc:b3:
                    92:f4:6e:c1:9c:86:1c:72:cf:3c:79:c3:d5:07:ba:
                    a2:6f:67:59:bf:7c:ca:39:16:de:be:70:7e:0c:f8:
                    36:f5:6b:ee:1d:7b:94:38:cf:ba:0d:eb:62:0b:d5:
                    f7:8f:cb:cd:29:79:e9:32:83:c6:01:aa:e0:db:e5:
                    c5:0a:63:79:c1:7e:71:ab:00:dc:50:7f:a0:86:5b:
                    54:d3:f0:d8:64:0b:60:9e:ea:52:ae:6d:e5:14:e1:
                    9f:ef:72:fa:4b:4b:e9:d9:f8:59:7a:7c:60:d9:1b:
                    9f:e8:a7:24:f0:3c:1d:42:e2:64:e3:a7:87:ec:84:
                    fe:fe:e2:93:84:14:d3:2e:07:9f:e4:cd:39:e4:9a:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:FE:D7:5B:3C:4E:14:AF:FA:BA:FE:01:85:39:55:9B:93:DD:1C
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:37:19:b5:ec:b8:6c:3b:64:3e:26:0e:1f:73:7f:94:f8:a1:
         e1:ba:cf:6f:37:6f:5c:93:50:f8:e8:2c:a9:08:87:94:87:bd:
         38:e4:ab:9a:ad:20:75:76:fb:37:51:f7:37:53:ca:e6:a4:0f:
         2c:52:39:47:fd:6a:14:65:f2:9e:2f:22:e1:03:86:3e:7c:ff:
         ea:57:8b:83:db:61:67:2c:7f:68:09:89:b5:e4:c9:27:cc:a3:
         7d:e9:99:ea:bd:45:9e:d4:bc:0a:b8:a4:4c:d7:10:07:75:4a:
         74:da:36:6f:eb:46:29:22:17:93:40:23:fc:b7:57:49:f3:a9:
         c6:19:39:9a:c7:65:55:b6:33:a5:a9:ea:ab:73:a6:28:e0:3e:
         d2:f3:18:ef:9b:a1:e5:00:cc:28:5e:f3:f7:44:9b:ae:fc:d1:
         62:3c:f3:10:a3:9c:61:b4:ae:94:f1:a0:69:b4:5e:6a:fd:7f:
         03:30:46:c1:f2:d1:e7:7a:e5:68:5f:5f:5c:85:f3:d9:4e:a3:
         c1:25:55:6f:1f:9a:26:8b:b0:9d:e5:ec:4f:57:26:06:83:3e:
         8f:03:15:c1:f4:6f:02:db:d3:9c:6c:4a:ed:c4:c4:8b:14:e5:
         6e:01:21:9c:a4:ef:c7:c7:ab:da:51:93:93:93:52:b3:ad:4a:
         48:49:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:59 2025 by rpki-client