Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a32303a3a2f34342d3434203d3e20323637333435.roa
File:                     323830343a346330633a32303a3a2f34342d3434203d3e20323637333435.roa (raw, json)
Hash identifier:          MgEgQ4CMBXO0tUED9jzVjf7m8TZLxdnNSvKtw1fk6BQ=
Subject key identifier:   60:B6:9A:D6:BB:E1:C9:7D:3E:23:72:73:44:77:F8:4B:C2:3C:FC:3A
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       487B3ADFAE13868161B0812AD909C2854DA81A0D
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a32303a3a2f34342d3434203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c:20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:3a:df:ae:13:86:81:61:b0:81:2a:d9:09:c2:85:4d:a8:1a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:8f:91:6a:80:b1:3a:95:08:a9:3b:3f:86:
                    67:94:af:f0:6c:fe:9f:90:9e:30:86:b0:ff:c7:d8:
                    a3:29:6f:67:3c:1b:f1:95:84:6b:03:a0:08:fa:0e:
                    17:e6:d7:d5:cb:10:12:89:5a:ee:15:9a:36:27:d3:
                    ac:66:f4:f3:86:73:fc:ab:65:4b:46:3d:01:e9:2e:
                    83:e2:a7:f4:0b:d3:ae:e4:aa:d7:7b:29:fb:dc:3e:
                    b3:ae:ba:e8:b4:7c:0e:6a:a3:75:58:9e:0b:af:2c:
                    51:ba:24:2e:70:5b:f7:17:0c:fa:1f:b5:23:7b:37:
                    05:5e:a5:b9:0e:2d:02:9d:2e:f7:18:71:ee:79:30:
                    a0:c5:f2:6f:ad:a2:44:fc:1a:e7:01:8f:a0:76:ce:
                    c1:5f:af:07:58:0b:a3:25:bb:2b:a4:8e:ef:b0:c2:
                    a2:56:a7:46:2a:4f:67:3f:9c:a4:30:2a:b2:b9:60:
                    c5:e3:99:c7:5e:d2:da:11:80:66:0f:9f:75:08:af:
                    a5:3d:8a:3f:1a:a2:76:4a:29:a0:5f:0a:50:fb:ca:
                    97:b4:46:59:ed:97:52:6f:0f:05:8f:36:3e:ef:0e:
                    18:f9:7f:32:0e:76:47:c5:d3:ff:42:5e:e0:c4:7a:
                    cf:15:1e:4c:a6:22:45:83:0a:8c:05:f8:00:dc:f0:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B6:9A:D6:BB:E1:C9:7D:3E:23:72:73:44:77:F8:4B:C2:3C:FC:3A
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a32303a3a2f34342d3434203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:88:57:6f:3a:15:f1:a3:20:5f:b4:21:35:fb:76:50:27:42:
         3e:f7:86:44:32:17:83:31:18:74:b3:25:d0:49:a0:f4:63:6d:
         1c:ae:ec:44:8d:a8:b8:54:bc:66:84:09:13:57:2a:ca:07:f8:
         95:db:8b:76:32:df:ae:1c:10:6b:ed:fd:3e:f1:db:bb:29:65:
         92:6f:cd:58:20:fd:8a:38:36:ec:fc:0b:63:8b:d8:f1:16:a7:
         fa:e3:98:81:4f:c4:43:7e:aa:f3:47:84:db:51:a7:c0:f8:b5:
         ea:8a:f1:da:8e:c3:51:dd:b7:e6:14:7b:04:26:0b:e4:dd:ea:
         92:d3:cf:56:ac:1e:28:d5:3e:b7:85:54:aa:d9:b9:71:e0:c1:
         94:ff:3b:13:dc:a8:20:9d:19:1b:74:fc:7c:11:9f:4d:1e:3c:
         0c:73:bd:2c:0b:73:a2:da:4a:16:02:a6:cd:0a:d1:fa:b9:34:
         ed:e5:e5:a1:55:d5:78:d5:05:91:25:18:f7:ce:f5:ce:d3:cf:
         2f:3e:4a:21:da:14:18:8d:75:83:7d:e9:c8:8c:57:2e:de:72:
         74:a1:9d:00:3a:e1:2f:bd:59:0a:89:56:e0:0e:a4:8a:bf:c3:
         bb:a8:2f:fb:da:ff:0a:00:a7:24:e6:38:ce:4e:e2:1e:16:11:
         45:05:c4:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org