Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a31303a3a2f34342d3434203d3e20323637333435.roa
File:                     323830343a346330633a31303a3a2f34342d3434203d3e20323637333435.roa (raw, json)
Hash identifier:          VeoucbgMhY9AX6zw39/gW/hFgayoph46Z19olCQNYSg=
Subject key identifier:   E2:6B:49:F7:04:64:67:C6:C5:A1:19:C1:AB:68:54:1F:6B:EE:91:E4
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       6F1FF63573711B98D2BA0042991F41F1C1EA242C
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a31303a3a2f34342d3434203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1f:f6:35:73:71:1b:98:d2:ba:00:42:99:1f:41:f1:c1:ea:24:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:d9:1a:9b:42:f5:96:a4:f7:7a:4c:57:43:
                    43:48:75:f3:8a:a4:a3:22:b4:9f:55:e7:e8:f6:c7:
                    92:1f:3a:20:d2:ce:f9:4e:d6:a4:37:16:f3:60:01:
                    7f:c5:dd:62:f5:6e:90:e5:9c:e5:3e:83:9f:bf:e7:
                    66:51:6d:23:06:af:7d:b4:80:1c:26:d1:d5:92:91:
                    39:59:4c:b7:f6:b4:8b:13:b2:74:4b:26:64:a2:fe:
                    59:38:57:79:2f:22:72:6a:98:4b:66:dd:ab:53:87:
                    1e:d8:81:e5:a9:44:3b:08:5d:9e:8f:34:ee:90:e1:
                    fe:fe:11:77:80:81:a0:14:01:6e:6f:bb:d6:91:cc:
                    ed:ef:09:f1:e2:ff:98:20:b7:84:68:7f:a1:9a:76:
                    01:e8:f0:1d:60:2c:75:91:f9:c0:9b:8e:84:72:2b:
                    0a:38:8e:70:fa:81:6e:37:4f:2a:d4:e8:ef:31:95:
                    91:31:82:26:8a:91:a9:a7:36:86:43:05:5b:d6:f4:
                    8f:be:6b:1d:48:ae:94:54:4e:25:15:98:51:26:22:
                    58:f4:35:90:a6:86:5e:6c:5e:6e:12:9e:7e:cf:27:
                    d8:de:5d:ac:98:33:4a:55:ac:24:b9:3b:56:b9:af:
                    f2:ac:65:82:66:38:86:31:ba:cc:b6:28:70:e5:da:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:49:F7:04:64:67:C6:C5:A1:19:C1:AB:68:54:1F:6B:EE:91:E4
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a31303a3a2f34342d3434203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:21:db:5a:2b:e2:96:ec:64:11:fe:63:4e:c2:e1:55:c8:cb:
         df:c3:5c:90:0c:8b:1f:21:17:77:89:f9:26:2e:2c:de:eb:6f:
         dd:bb:b3:06:5c:90:4d:a9:11:82:7b:c8:18:f9:47:c2:49:ce:
         d5:10:2b:9c:f0:78:ef:e0:4f:1f:84:7a:cd:83:4b:99:40:6d:
         bf:53:73:f4:d9:2e:b9:60:6c:96:4d:6b:16:4c:c2:25:39:88:
         3a:f5:67:af:47:e6:6a:de:53:1b:c1:c0:e7:92:62:e7:21:0e:
         85:ed:ef:5e:4b:1b:69:a7:b7:b0:0b:45:32:2b:f4:c8:55:c9:
         f9:f0:ba:bd:b9:a2:16:bb:dc:eb:f9:4c:41:75:84:6c:c7:c1:
         a8:74:5e:c6:19:7a:eb:65:e8:46:89:a3:56:bb:24:ed:06:bf:
         de:9d:c6:cf:f3:40:80:69:2d:28:15:35:61:46:65:62:7b:0d:
         1a:28:39:59:e5:ba:5b:60:ca:de:9d:17:6c:07:6a:c3:4b:2b:
         12:c4:b0:a4:83:fc:1f:fc:04:67:8d:e5:85:f7:08:20:61:77:
         31:37:92:60:bb:20:23:ab:9a:5c:20:3e:82:40:13:ef:7f:7b:
         84:19:16:75:8c:ad:74:32:cc:10:4a:d5:06:5b:28:ce:52:5c:
         91:b6:5e:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org