Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          s8zmOdWruIVV8pHSFzvtizWO4tBMlTD/fn9P8P7GTr8=
Subject key identifier:   B7:F4:3F:70:16:85:95:62:30:C7:E8:90:FC:08:5B:CC:F5:73:2D:9D
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2CFBA5C1B568C23246FE31537F35F282F191F98A
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:39:51 +0000
ROA not before:           Tue 30 Jan 2024 16:34:51 +0000
ROA not after:            Tue 28 Jan 2025 16:39:51 +0000
asID:                     267345
IP address blocks:        2804:4c0c:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:a5:c1:b5:68:c2:32:46:fe:31:53:7f:35:f2:82:f1:91:f9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:34:51 2024 GMT
            Not After : Jan 28 16:39:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:1e:bf:a2:87:99:ec:52:0f:55:44:a5:b4:
                    1a:9a:54:1b:4d:8e:35:1b:bf:38:e3:66:37:88:01:
                    47:08:0c:2d:66:af:77:fd:ea:eb:f0:32:f6:53:8f:
                    d3:88:fa:aa:82:26:06:2c:02:f0:9e:df:64:15:06:
                    13:60:74:ac:fc:f9:7d:b5:ff:51:8f:0e:2e:cd:ef:
                    e2:b5:37:1d:0d:8a:cd:49:ff:5e:91:bd:8a:57:f1:
                    39:e7:f0:45:cf:3a:9a:7b:70:cc:d4:15:1c:f9:ce:
                    83:7d:63:6e:66:fe:b8:8a:98:35:2b:07:d3:fe:b0:
                    35:64:37:6c:57:f3:87:5f:72:4a:9b:a0:d4:4e:f8:
                    9a:ac:f4:d8:3c:9d:fb:31:d6:4e:b4:6d:df:f2:44:
                    a8:49:ca:e2:fc:f7:74:87:6c:86:4c:40:63:e8:f4:
                    98:8d:1b:a8:82:a2:04:e5:b8:4f:6e:af:47:30:92:
                    6d:32:7b:68:c5:54:e9:bc:25:8e:5c:68:75:4e:13:
                    95:53:47:d2:89:aa:f3:e1:bd:37:79:2b:1e:36:5a:
                    7a:c5:ea:b6:f1:50:66:fd:fa:ef:af:96:27:c2:3c:
                    67:ec:77:e7:ad:42:dc:37:06:9e:87:2f:51:75:d3:
                    da:7a:c1:e5:44:a4:1f:a3:de:1e:fe:48:13:ab:d2:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:3F:70:16:85:95:62:30:C7:E8:90:FC:08:5B:CC:F5:73:2D:9D
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:34:f7:8a:46:6b:82:d8:05:85:dd:a7:3c:23:e7:62:cf:ff:
         2d:fd:60:8b:d3:22:67:e3:cf:a1:2a:3a:cc:fb:44:6e:b3:41:
         5d:02:c0:6b:25:e1:d4:5b:c3:51:c0:1d:68:2c:26:eb:c2:44:
         53:9e:04:39:95:cc:3c:ca:a2:08:75:3f:b5:a5:5b:34:68:f1:
         f0:fc:40:5a:6c:3a:e6:75:92:7b:f9:75:c4:d3:76:27:6c:e8:
         62:cf:fd:37:7d:c6:f2:c9:75:62:7b:6f:08:6c:73:32:de:cf:
         e6:b1:ee:9a:ff:80:b0:54:db:27:77:95:6a:e3:b6:05:9e:6d:
         c8:26:11:6b:11:e7:ce:df:44:fb:aa:21:77:70:a0:f8:e3:7b:
         20:51:b2:ca:08:e1:42:24:fd:05:4d:37:df:e7:5e:75:a2:e0:
         bf:9f:14:b2:a2:7f:1c:fd:ba:b3:96:f9:55:79:ca:fe:77:99:
         64:05:d2:7f:e6:63:e6:5e:d1:64:9c:d6:96:33:a6:9e:f3:b3:
         55:a5:89:e1:22:5c:c0:55:89:f8:e3:6c:6e:37:44:9d:cf:ba:
         36:74:b3:38:72:3a:35:d9:df:ff:17:30:8e:c7:d3:06:19:d7:
         65:80:6c:1c:cb:c6:d4:a1:e1:e9:eb:d5:a8:68:7f:97:db:d0:
         c2:e1:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org