Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          FbfsAXsmipOqdypMP4gTG0A4w9/Psyr1eUgCZ4Bo8o8=
Subject key identifier:   56:B2:C1:41:03:B3:45:CF:6A:B3:B6:F5:B1:BC:B0:FF:4E:FD:56:E7
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       71ED29EDDF7F4051571E08E6EFF770D0F762B9EA
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:40:31 +0000
ROA not before:           Tue 30 Jan 2024 16:35:31 +0000
ROA not after:            Tue 28 Jan 2025 16:40:31 +0000
asID:                     267345
IP address blocks:        2804:4c0c:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:29:ed:df:7f:40:51:57:1e:08:e6:ef:f7:70:d0:f7:62:b9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:35:31 2024 GMT
            Not After : Jan 28 16:40:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:5e:4a:04:f1:d6:bd:db:a6:8e:a6:de:ad:
                    3a:1a:ff:59:64:a5:75:1b:36:8f:6b:14:50:c3:ff:
                    f0:49:45:81:41:10:9a:02:8a:87:c4:3f:ea:6f:d5:
                    05:56:8d:6a:73:d6:14:2e:43:aa:76:e7:04:54:d8:
                    aa:16:39:d9:4c:a2:14:af:80:19:6b:b4:d9:b6:e8:
                    d4:d4:b9:45:3a:b3:f6:96:54:9d:86:ff:b3:82:fd:
                    3f:09:99:c1:79:0d:c4:ca:93:27:d1:c5:24:9f:11:
                    87:d0:dd:31:36:75:ad:6d:76:05:eb:77:d5:b1:8f:
                    4d:f4:9f:37:e7:30:83:d2:c4:1d:fa:e8:05:0e:a2:
                    cc:fc:2e:30:0f:83:f6:2d:d1:4f:04:bf:be:d1:68:
                    ea:f5:ef:82:64:fa:78:1d:87:21:e6:6f:80:8f:40:
                    15:5f:8b:fb:02:7e:ae:43:6f:44:4d:1d:14:8a:12:
                    7f:8d:d9:a8:51:35:6d:8c:f4:32:7a:c8:f6:ce:25:
                    c1:5e:a8:e0:00:a2:b5:1c:df:7b:09:84:12:a1:be:
                    34:53:5b:08:2e:91:81:76:5e:ec:94:d8:c7:28:81:
                    7e:6e:e2:5e:ef:69:91:3b:64:76:f5:22:7e:30:c9:
                    ed:a2:de:76:18:71:f7:d5:4c:97:90:c0:e1:86:7d:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:C1:41:03:B3:45:CF:6A:B3:B6:F5:B1:BC:B0:FF:4E:FD:56:E7
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:2e:4c:69:2a:cf:8d:40:16:e0:fa:89:fd:52:95:5f:c1:
         c1:84:15:0a:ba:99:10:dc:22:ac:de:2c:59:ce:5c:24:fd:39:
         4d:68:5e:67:6c:9a:be:b0:a4:0a:93:86:3d:d0:66:a6:11:40:
         c1:88:ce:4d:53:15:de:a0:87:2c:a7:39:40:58:fd:94:35:64:
         19:27:c5:e0:9d:7c:de:d3:56:92:b1:50:0c:f8:fd:23:72:78:
         fa:f1:62:a3:05:7b:bd:83:11:85:29:84:66:27:7f:8d:67:84:
         27:74:51:f3:3e:1f:94:27:3a:60:e5:91:13:df:2b:70:fe:36:
         3a:81:a6:cb:33:ff:e4:25:29:07:5b:dc:a7:43:6a:d9:6b:d9:
         ba:58:e9:68:ac:81:fe:dd:ec:98:6a:57:05:44:02:c4:f4:1d:
         ed:78:bc:a5:1f:8d:e9:d6:72:01:72:60:13:11:20:53:3a:b3:
         02:a6:78:16:39:a3:2c:0a:41:86:af:7b:6e:0f:56:96:2e:3c:
         81:15:14:53:1c:b0:24:6f:b0:e3:65:56:83:1f:3a:ba:57:a9:
         29:9b:38:22:cd:98:00:73:54:44:40:3a:0e:9f:2f:b2:01:57:
         f8:5a:8a:f3:ef:fb:89:07:37:30:62:82:56:a5:31:cc:ed:54:
         10:13:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org