Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38302e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          kgzx11rJ6egvTG8eH5NcbExQ5axTu4BajMem7JCXMO8=
Subject key identifier:   73:2F:6C:32:DC:B5:26:D9:05:42:0C:79:F9:FD:86:B5:29:83:34:2A
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       41609E7F9663A237E56A1CA34836B30141C593F7
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:35:52 +0000
ROA not before:           Tue 30 Jan 2024 16:30:52 +0000
ROA not after:            Tue 28 Jan 2025 16:35:52 +0000
asID:                     267345
IP address blocks:        45.234.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:9e:7f:96:63:a2:37:e5:6a:1c:a3:48:36:b3:01:41:c5:93:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:30:52 2024 GMT
            Not After : Jan 28 16:35:52 2025 GMT
        Subject: CN=3082010A0282010100E608410454C776E4860B4E44443AB74A48E9D1980DEAC8DA68FE163F87E2E6BF52ED35DD17B984186EF09C67ADA89FFFF6D09BF31D4B3F1CB560641AF3CCFB389AC8119F2D81506C28082BE20E66AE4147DFFDC8DD8FE1CEAB960103396603D33CD14D54AD20518ECCA28909ED7930EC6C07C414DCD911947DB350F9A775BED6E9F98B43535E369ED5453CB141D54B131F2AF7CAB9BCBDC52EAB28E4E0F211AE9566C93502BC82DE2DA02C1B78AA31DE7F5F3576AE8FA8873E1AAF24B7FF006992006B101DD6A35C5943049C1BC00906BA58E21C979DD431FD5F2781F31F3269958645BA6D6A42DF45DD748D94C85C3E77B912165F7BC83816FA018F0BCE6C450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:41:04:54:c7:76:e4:86:0b:4e:44:44:3a:
                    b7:4a:48:e9:d1:98:0d:ea:c8:da:68:fe:16:3f:87:
                    e2:e6:bf:52:ed:35:dd:17:b9:84:18:6e:f0:9c:67:
                    ad:a8:9f:ff:f6:d0:9b:f3:1d:4b:3f:1c:b5:60:64:
                    1a:f3:cc:fb:38:9a:c8:11:9f:2d:81:50:6c:28:08:
                    2b:e2:0e:66:ae:41:47:df:fd:c8:dd:8f:e1:ce:ab:
                    96:01:03:39:66:03:d3:3c:d1:4d:54:ad:20:51:8e:
                    cc:a2:89:09:ed:79:30:ec:6c:07:c4:14:dc:d9:11:
                    94:7d:b3:50:f9:a7:75:be:d6:e9:f9:8b:43:53:5e:
                    36:9e:d5:45:3c:b1:41:d5:4b:13:1f:2a:f7:ca:b9:
                    bc:bd:c5:2e:ab:28:e4:e0:f2:11:ae:95:66:c9:35:
                    02:bc:82:de:2d:a0:2c:1b:78:aa:31:de:7f:5f:35:
                    76:ae:8f:a8:87:3e:1a:af:24:b7:ff:00:69:92:00:
                    6b:10:1d:d6:a3:5c:59:43:04:9c:1b:c0:09:06:ba:
                    58:e2:1c:97:9d:d4:31:fd:5f:27:81:f3:1f:32:69:
                    95:86:45:ba:6d:6a:42:df:45:dd:74:8d:94:c8:5c:
                    3e:77:b9:12:16:5f:7b:c8:38:16:fa:01:8f:0b:ce:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:6C:32:DC:B5:26:D9:05:42:0C:79:F9:FD:86:B5:29:83:34:2A
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:b6:cd:9f:9b:7a:c2:d0:17:cc:2c:7c:27:0b:9a:b7:12:9a:
         d2:5c:58:5a:a3:71:b7:5a:cd:71:8d:89:2a:30:ef:52:5b:b1:
         83:46:ce:75:b3:c7:46:6b:f4:10:1f:c0:11:35:73:26:f3:de:
         05:4b:59:35:7b:52:72:d6:fe:4d:f4:9d:99:0e:dc:7f:b2:f6:
         85:c0:15:98:34:4c:99:bc:c6:1a:ae:21:63:99:7b:70:35:70:
         ff:7e:92:3d:e7:c5:6f:95:5f:7a:09:82:44:39:0d:3c:39:ab:
         6f:cb:c5:53:37:7e:a7:54:fc:9a:61:10:af:95:69:59:0f:f0:
         12:07:f1:f3:b1:f8:0f:7e:f4:71:7a:6a:ee:cb:30:66:f6:cc:
         94:e4:7d:65:e7:ff:db:0f:fc:e5:05:87:14:aa:a1:f4:40:c2:
         01:4e:e7:e9:5a:7c:ea:53:97:fa:b7:93:52:53:2b:c9:86:58:
         ae:2d:cb:92:d3:f7:50:d3:92:db:fb:54:ba:9c:88:e7:18:20:
         28:12:6e:ad:1f:28:8a:b2:25:d6:49:da:26:a6:c8:e3:07:44:
         a4:19:b3:26:27:91:2f:62:b6:26:e1:fa:a3:54:38:10:4a:7c:
         33:17:82:14:3a:92:18:1b:57:1d:d9:26:e4:77:94:ab:fb:6b:
         24:cb:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org