Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          zFIuB38rP0GH7OZItpN+LAMM1CuQr0QjjurI3l5Y890=
Subject key identifier:   89:81:55:B0:AF:AA:A1:BD:C4:B5:95:18:26:4F:24:10:D2:11:20:EF
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       6F61DF7C87EE6A928FB1BEBB8C6CF825DE6C09AC
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:41:23 +0000
ROA not before:           Tue 30 Jan 2024 16:36:23 +0000
ROA not after:            Tue 28 Jan 2025 16:41:23 +0000
asID:                     267345
IP address blocks:        2804:4c0c:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:df:7c:87:ee:6a:92:8f:b1:be:bb:8c:6c:f8:25:de:6c:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:36:23 2024 GMT
            Not After : Jan 28 16:41:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:d5:a5:7b:d7:29:62:22:63:68:4c:e4:6c:
                    52:87:32:0d:91:e1:f9:e6:4f:de:f3:1f:ae:f0:5c:
                    be:19:ac:e1:75:f2:2c:f4:d9:9f:d5:d9:8a:89:71:
                    10:f2:24:73:52:4f:80:58:1b:06:b9:5d:15:7c:4d:
                    db:ce:ac:8f:06:64:98:91:1a:a3:7d:fb:99:1a:7c:
                    21:dc:60:93:c0:20:6a:60:3e:31:67:c1:6f:ce:68:
                    2a:b3:1b:f5:df:7b:5e:fe:61:11:82:9a:dd:e1:c5:
                    9e:3d:9c:c5:a4:fd:89:40:3a:fa:f7:42:c6:a5:fd:
                    05:47:1a:cb:64:70:8f:51:0e:32:95:f8:85:37:e2:
                    a4:c6:de:cd:57:c8:6f:c1:8d:86:fb:33:ec:eb:67:
                    63:f3:61:e2:91:ee:50:10:ad:cd:56:12:21:a0:be:
                    fc:0a:29:4c:af:16:a0:7d:6e:13:f2:81:eb:3f:f0:
                    60:4e:cc:f4:30:41:43:97:2c:8e:9f:86:5a:f3:cb:
                    47:5b:15:0b:ce:8f:61:66:4e:9a:99:52:14:6c:fd:
                    a7:42:b5:2a:89:09:25:16:0a:ff:22:69:8e:28:ca:
                    74:a2:ae:23:81:a8:65:ef:25:ab:93:8c:8e:40:bb:
                    c2:cf:cd:54:fe:60:67:54:70:57:14:80:aa:cc:c7:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:81:55:B0:AF:AA:A1:BD:C4:B5:95:18:26:4F:24:10:D2:11:20:EF
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:85:90:32:48:09:fc:76:de:a2:8e:ee:e8:bb:59:e9:39:
         f1:5a:eb:4c:96:ea:c2:57:1c:98:75:bb:ca:16:b7:1f:5b:0f:
         77:15:66:cd:c4:14:55:dd:ce:09:01:88:ee:5b:a2:38:20:02:
         b5:1b:52:66:89:ff:4a:94:da:78:ae:e7:76:11:5b:4f:49:3b:
         7c:4b:b6:7d:af:31:b5:ac:b5:78:5b:39:18:30:2e:60:f6:93:
         2d:b1:be:55:39:43:f3:16:22:3c:f5:2b:a5:cb:7b:5b:d8:fd:
         0d:75:0d:81:9f:2a:0c:82:5e:b3:f4:49:b0:1d:a7:d8:df:63:
         a4:d3:b7:6f:f4:37:04:7d:31:6e:ea:7d:a0:32:d2:24:1f:ff:
         9b:a5:9f:14:2e:dc:af:0b:66:17:17:51:51:a9:fb:44:d5:d0:
         d4:e3:41:ae:15:34:ff:79:ba:6e:3a:11:36:eb:cb:df:34:05:
         32:ec:a4:be:3e:3b:51:8d:7c:ee:26:44:09:70:a1:99:b1:82:
         87:76:ca:fc:57:59:25:0a:56:01:0d:28:df:1a:ac:81:19:4d:
         ff:67:fb:cf:d6:8d:2e:2e:8d:63:11:a4:a1:f7:ab:bf:c3:dc:
         49:a1:06:9c:52:bc:8a:84:f4:3b:57:20:cb:b8:68:4d:d6:62:
         1b:f8:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org