Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a653030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a653030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          Z3dAolSZo5WAIpqe7bOSJMPRA5ViNephWGMsY/pFAYQ=
Subject key identifier:   B0:19:9B:78:85:E0:BC:83:F2:52:7C:3D:8D:15:D6:00:99:92:6C:03
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       5E4807E9D75024F89B935F4785E9B99FBD5B17CB
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a653030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:55:08 +0000
ROA not before:           Mon 13 Mar 2023 15:50:08 +0000
ROA not after:            Mon 11 Mar 2024 15:55:08 +0000
asID:                     267451
IP address blocks:        2804:41b4:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:07:e9:d7:50:24:f8:9b:93:5f:47:85:e9:b9:9f:bd:5b:17:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:50:08 2023 GMT
            Not After : Mar 11 15:55:08 2024 GMT
        Subject: CN=B0199B7885E0BC83F2527C3D8D15D60099926C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:b4:ac:e7:86:0e:46:51:0b:10:b9:4b:a1:
                    55:46:b9:b5:6f:77:4f:4a:c9:a6:74:26:dd:b7:70:
                    5f:7c:bd:e0:dc:4a:8a:7e:f5:20:98:40:5d:99:b3:
                    3a:c2:0b:9d:25:ca:39:5c:05:87:73:47:e8:1c:21:
                    cf:00:42:86:b8:53:78:f6:be:b4:87:61:05:e1:01:
                    b8:c3:bb:b6:78:37:5d:10:e1:17:53:63:2b:85:14:
                    e3:a6:ea:50:73:98:53:8e:75:fa:e6:5b:7a:25:b5:
                    4d:1e:4c:7c:d2:f7:66:3f:aa:95:5c:0c:7b:17:d3:
                    44:d2:a8:1c:00:7e:f1:72:a9:4c:b1:d9:74:6d:0e:
                    51:33:00:6d:d9:d6:ff:66:3b:5e:e2:7e:8a:07:62:
                    f6:5a:02:88:cb:a6:4e:18:4f:19:4d:76:05:bd:d6:
                    88:46:3d:97:c5:aa:a9:62:b4:42:02:e9:22:07:e5:
                    d9:06:ec:5d:89:79:12:47:10:70:5e:4d:9b:6c:0e:
                    e3:05:62:c1:d3:a6:ff:b4:64:df:64:8e:b2:7d:38:
                    02:bf:c8:1e:49:40:50:18:64:ee:a6:ec:88:6e:4a:
                    d3:3e:fc:ce:b5:39:7d:99:46:ae:27:1b:9b:20:0b:
                    5a:6c:47:62:8a:69:8b:8f:a9:38:2a:f6:3a:7b:84:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:9B:78:85:E0:BC:83:F2:52:7C:3D:8D:15:D6:00:99:92:6C:03
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a653030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:36:66:8a:e0:c6:0a:50:48:1d:0e:26:13:97:a3:e7:86:
         24:65:8c:14:21:db:1a:85:90:8c:f2:d9:15:66:5d:f9:ca:cd:
         0f:6e:75:21:ad:fc:94:f3:23:90:6a:c8:e0:ea:bf:30:3c:52:
         b5:74:5c:71:d9:be:ea:d1:3b:04:77:36:68:d3:0d:b9:9a:1a:
         d0:82:55:1f:7e:32:24:94:dc:62:c9:e6:57:ed:a1:99:cf:24:
         81:1e:26:09:1c:ba:4d:71:b4:95:86:45:9c:81:30:0e:f6:77:
         0d:86:16:29:99:f4:9d:d3:e2:09:02:f6:dc:37:e0:30:ae:b4:
         90:ae:17:b0:27:ab:7e:97:80:97:4a:c9:4a:d9:ce:ab:39:30:
         6f:c3:72:34:a3:3e:a3:09:12:d0:04:23:1b:33:ae:a9:f9:d3:
         7c:3d:ff:97:74:04:c5:d3:b3:95:51:17:17:0d:46:a7:fe:45:
         e9:34:1f:12:c0:ff:29:c2:e7:c1:00:37:9e:71:97:0b:44:ee:
         c8:5e:68:39:0e:88:56:fe:8d:7d:fe:d1:9a:54:cb:79:94:e9:
         cf:88:83:fa:1d:f7:42:ea:6b:3e:b5:e7:8d:cc:24:f4:a5:aa:
         20:7d:ba:7b:fb:4b:85:4f:48:e9:07:38:83:54:2b:e0:43:11:
         89:b6:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org