Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          arrT+zm3DiTvj9IQqqCCV0btOg9HUm4bJBj332c6cmc=
Subject key identifier:   AD:4D:08:5B:64:20:7A:3A:3F:09:9C:A7:25:93:08:5D:2C:34:2E:E4
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2FAAFA5F36A8A1BD9B3F228ACFE79F52C0C0C3EA
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:39:33 +0000
ROA not before:           Tue 30 Jan 2024 16:34:33 +0000
ROA not after:            Tue 28 Jan 2025 16:39:33 +0000
asID:                     267345
IP address blocks:        2804:4c0c:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:fa:5f:36:a8:a1:bd:9b:3f:22:8a:cf:e7:9f:52:c0:c0:c3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:34:33 2024 GMT
            Not After : Jan 28 16:39:33 2025 GMT
        Subject: CN=3082010A0282010100C839836C879B2BD12F6CBCAC3F97FEDA7F89D605FE49F0249392D7EF99701A46ABC9E970E5C5ACFCDB4424966DCE9FC2A022A1FACFCEDDA31425E748B7718ADA02348820576A4FDE1745F530F90F568A7E7600068EDDC724B50141A2949150AEF787CD44157224A00F087C5E9DB719FDF9DF0FB2087F1375D9D13457377BBBF4A2D02C545D9D5BCFC22372CF1D164D0E01E78752AFA2F5494CE7060B5CDFB00439E96F804F1C6A0DAE1B155616509AC5C8028B9A1357ACE9467FD5AF3D104A08833C20B87D26CF2900C2250F53C068285B27E25BE77A2C80A3EA3408026E4EB2F734DEF04F8CEF5E004894CF6F266E5547964A46BDE8F1D34E38366ECAD5E9990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:83:6c:87:9b:2b:d1:2f:6c:bc:ac:3f:97:
                    fe:da:7f:89:d6:05:fe:49:f0:24:93:92:d7:ef:99:
                    70:1a:46:ab:c9:e9:70:e5:c5:ac:fc:db:44:24:96:
                    6d:ce:9f:c2:a0:22:a1:fa:cf:ce:dd:a3:14:25:e7:
                    48:b7:71:8a:da:02:34:88:20:57:6a:4f:de:17:45:
                    f5:30:f9:0f:56:8a:7e:76:00:06:8e:dd:c7:24:b5:
                    01:41:a2:94:91:50:ae:f7:87:cd:44:15:72:24:a0:
                    0f:08:7c:5e:9d:b7:19:fd:f9:df:0f:b2:08:7f:13:
                    75:d9:d1:34:57:37:7b:bb:f4:a2:d0:2c:54:5d:9d:
                    5b:cf:c2:23:72:cf:1d:16:4d:0e:01:e7:87:52:af:
                    a2:f5:49:4c:e7:06:0b:5c:df:b0:04:39:e9:6f:80:
                    4f:1c:6a:0d:ae:1b:15:56:16:50:9a:c5:c8:02:8b:
                    9a:13:57:ac:e9:46:7f:d5:af:3d:10:4a:08:83:3c:
                    20:b8:7d:26:cf:29:00:c2:25:0f:53:c0:68:28:5b:
                    27:e2:5b:e7:7a:2c:80:a3:ea:34:08:02:6e:4e:b2:
                    f7:34:de:f0:4f:8c:ef:5e:00:48:94:cf:6f:26:6e:
                    55:47:96:4a:46:bd:e8:f1:d3:4e:38:36:6e:ca:d5:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:08:5B:64:20:7A:3A:3F:09:9C:A7:25:93:08:5D:2C:34:2E:E4
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:a4:4f:b0:1c:f3:82:c4:30:70:20:18:25:2f:cc:0a:ba:
         76:54:3e:32:05:86:75:9b:43:41:d7:4d:55:61:f5:df:d8:f9:
         8f:46:a7:66:7e:f8:bd:91:b7:d0:1f:e9:97:d6:91:d4:39:2d:
         97:a0:71:63:ea:0a:cd:2b:4e:67:e0:35:93:29:03:80:9e:a6:
         10:e1:87:23:d3:c5:be:99:6e:76:68:33:4d:5c:d4:2b:2a:9a:
         76:bf:0a:9d:a1:f8:8e:56:b8:8e:8c:6b:ce:2c:c7:46:e3:87:
         b9:ab:5b:a3:ed:f2:ac:83:d0:57:44:03:a6:c9:9c:ff:9d:f2:
         2c:4f:cf:98:07:65:8a:5e:a2:16:57:49:16:41:1f:b7:c5:84:
         d3:c4:e5:c1:1c:5e:76:37:64:43:5a:35:83:93:cd:1a:be:4f:
         b0:17:73:d0:6e:2e:6f:93:00:a2:77:a0:c1:50:b0:d0:83:e1:
         7a:15:0e:07:25:7e:93:31:c5:c0:b5:69:fb:54:21:61:df:9d:
         20:8f:b6:a9:ad:12:14:73:c3:c2:9d:41:2e:3d:5a:89:99:bb:
         23:25:8c:3d:9b:5a:6b:2e:69:1a:3e:56:70:c0:79:7c:5c:4a:
         a4:ae:28:fc:57:3b:58:87:fe:7c:ff:cb:e4:88:02:8c:d8:8d:
         31:04:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org