Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a643030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a643030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          b/Pw+CtOHVwA6li8uWAYF5N+zBPXMXkbM6Y7zjzDUzM=
Subject key identifier:   A1:69:2B:D9:A0:D8:E0:C1:97:6D:22:5D:ED:35:36:31:20:4A:46:6D
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       45A80DE77393F0A813FC9DDA2113C3A4C079E7A5
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a643030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:54:59 +0000
ROA not before:           Mon 13 Mar 2023 15:49:59 +0000
ROA not after:            Mon 11 Mar 2024 15:54:59 +0000
asID:                     267451
IP address blocks:        2804:41b4:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a8:0d:e7:73:93:f0:a8:13:fc:9d:da:21:13:c3:a4:c0:79:e7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:49:59 2023 GMT
            Not After : Mar 11 15:54:59 2024 GMT
        Subject: CN=A1692BD9A0D8E0C1976D225DED353631204A466D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:82:56:1b:dd:ae:8a:b2:a1:14:b5:86:82:
                    de:af:50:00:50:ad:f1:ac:c5:fd:4b:5d:b8:c3:b8:
                    c6:10:d6:f7:84:2e:5c:f6:f0:2c:48:15:a4:81:3a:
                    16:00:fc:00:1b:7d:db:44:90:bb:6a:09:e6:52:b5:
                    ec:fe:9b:44:cf:3b:a1:88:36:e3:61:28:a0:69:2d:
                    48:9b:3b:fb:24:45:1f:10:85:25:b8:80:9f:33:37:
                    2d:ce:24:c5:80:d1:a6:4e:da:94:9d:d8:58:6a:47:
                    e9:f9:0d:03:9d:b5:80:9f:49:60:ed:16:08:b8:0b:
                    a3:12:e1:90:b2:8f:fa:93:68:94:78:d0:4b:17:a7:
                    36:94:c3:e6:a3:21:05:d4:39:ea:94:67:0e:ec:a5:
                    7f:5d:9d:57:46:cf:18:f6:ff:78:7a:7d:d4:c3:df:
                    4d:e9:08:ee:28:e1:3c:b0:81:61:6c:e3:24:5a:7c:
                    3c:e7:36:d3:21:ba:b4:a1:f1:bc:ff:1a:5b:09:c0:
                    b0:04:a0:6a:a5:b6:33:39:63:fa:57:7b:11:6e:c6:
                    76:0a:1b:9e:03:9a:5d:84:4e:02:d9:bd:06:19:ac:
                    d8:ce:11:c7:1c:fe:9d:d8:5a:af:b3:92:ef:60:be:
                    d0:2a:f4:09:4b:fb:30:8a:ce:8c:ad:52:e6:aa:a0:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:2B:D9:A0:D8:E0:C1:97:6D:22:5D:ED:35:36:31:20:4A:46:6D
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a643030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:78:ec:50:1a:76:c6:a9:9b:e4:09:a8:2e:22:fd:1f:8c:
         fb:89:d4:39:80:fb:3d:1e:1f:45:e4:3a:8b:84:cf:be:45:07:
         84:e5:3b:03:82:3b:0c:f6:2f:6a:fa:c3:4c:28:be:7b:02:4e:
         e2:e4:9c:46:3e:bd:ee:4a:30:96:a4:9a:73:a0:7f:ba:4e:ec:
         51:0d:a9:1a:86:1e:6e:d0:6d:6e:55:7b:7c:81:fc:59:ae:aa:
         5a:6c:b2:21:44:06:6d:1b:82:c4:19:c1:9d:8e:27:60:8e:70:
         65:34:66:a9:0b:25:1b:a5:dc:25:e1:54:f0:6e:3f:24:92:1b:
         a8:c7:2f:5f:a0:90:19:e4:fd:8a:1d:35:41:ed:cb:2c:ed:4f:
         b7:57:15:4a:e2:88:c2:ea:5e:16:ae:cd:6c:fc:4d:a3:c1:fa:
         38:c3:a7:22:55:4d:e8:05:95:b0:c5:b2:25:9c:84:31:61:61:
         23:4d:2d:b8:47:d9:0f:3c:2f:c1:d2:a5:a5:ee:99:90:05:23:
         c4:3a:0f:4e:ed:87:8e:53:ed:df:22:13:20:2a:74:1e:aa:ad:
         65:9e:0c:29:69:73:ce:50:e5:10:87:e2:8c:42:b0:a1:ab:74:
         4c:10:09:1e:b3:04:b9:f1:1d:8a:6b:e0:61:9b:62:e6:66:30:
         ad:4a:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:58 2025 by rpki-client