Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          VPU8BrkjWM0zI/7OUDhhhy3LIcSnA8oCFYcAMyhtjhM=
Subject key identifier:   9D:3A:55:1A:F6:DD:21:DC:C1:F3:D7:BA:41:D1:26:2F:23:D1:F6:61
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       0CA40637002FF23EABB090C23D023AFAFC08AAB3
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:40:06 +0000
ROA not before:           Tue 30 Jan 2024 16:35:06 +0000
ROA not after:            Tue 28 Jan 2025 16:40:06 +0000
asID:                     267345
IP address blocks:        2804:4c0c:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:06:37:00:2f:f2:3e:ab:b0:90:c2:3d:02:3a:fa:fc:08:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:35:06 2024 GMT
            Not After : Jan 28 16:40:06 2025 GMT
        Subject: CN=3082010A0282010100AF6E885E1BACBC40779A845CFFDB838AF625E320C1D2E162A3D366F68CD0E9E018F765286E4117A41E59EBC3C8B199C50F15516BD9D9B5651613552B477FBD1C08DE1CC8460B99B63F0A020094ACE50F44E6F97F39B0B24272AC4E1E410FACA49974F7938DECB750C09B7BED8DF45E87777E3D7EFFEBFCEAAB6652AAB2AF55933A57DEE22A485B80BBDA9FCB22D600799024AFD61790D5675C90150BEFD43C51A86E0498E9B51CA43BAE4469B5311F31DB1F41DF058881442B475E55E2630B5B5189116BF9D744FDB2747E2BFAB3729B381090553825B299BCD6F1571ACEAD5B6F630A7496F9A570AB01F6D9D2607894CED7995D63CE0278ACC489CA2CBCB0550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:88:5e:1b:ac:bc:40:77:9a:84:5c:ff:db:
                    83:8a:f6:25:e3:20:c1:d2:e1:62:a3:d3:66:f6:8c:
                    d0:e9:e0:18:f7:65:28:6e:41:17:a4:1e:59:eb:c3:
                    c8:b1:99:c5:0f:15:51:6b:d9:d9:b5:65:16:13:55:
                    2b:47:7f:bd:1c:08:de:1c:c8:46:0b:99:b6:3f:0a:
                    02:00:94:ac:e5:0f:44:e6:f9:7f:39:b0:b2:42:72:
                    ac:4e:1e:41:0f:ac:a4:99:74:f7:93:8d:ec:b7:50:
                    c0:9b:7b:ed:8d:f4:5e:87:77:7e:3d:7e:ff:eb:fc:
                    ea:ab:66:52:aa:b2:af:55:93:3a:57:de:e2:2a:48:
                    5b:80:bb:da:9f:cb:22:d6:00:79:90:24:af:d6:17:
                    90:d5:67:5c:90:15:0b:ef:d4:3c:51:a8:6e:04:98:
                    e9:b5:1c:a4:3b:ae:44:69:b5:31:1f:31:db:1f:41:
                    df:05:88:81:44:2b:47:5e:55:e2:63:0b:5b:51:89:
                    11:6b:f9:d7:44:fd:b2:74:7e:2b:fa:b3:72:9b:38:
                    10:90:55:38:25:b2:99:bc:d6:f1:57:1a:ce:ad:5b:
                    6f:63:0a:74:96:f9:a5:70:ab:01:f6:d9:d2:60:78:
                    94:ce:d7:99:5d:63:ce:02:78:ac:c4:89:ca:2c:bc:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:55:1A:F6:DD:21:DC:C1:F3:D7:BA:41:D1:26:2F:23:D1:F6:61
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d6:3b:6a:85:6a:2e:d7:1d:ea:57:2c:be:ce:da:c9:e0:c1:0a:
         c5:20:a3:be:b9:67:7e:5a:4c:27:c6:74:df:63:c3:5c:25:ed:
         68:2a:78:be:33:e7:04:a6:07:01:a8:1c:5d:1c:b7:05:d3:f2:
         01:68:f6:ca:63:8a:49:39:f5:53:53:e5:15:2b:68:d0:87:be:
         ea:48:4b:bf:76:4f:7b:0d:d1:b5:55:35:f6:de:34:6d:19:d5:
         38:fc:08:29:41:f0:45:9f:03:3a:d1:a2:0d:19:64:99:be:89:
         34:2e:58:6c:00:b2:17:32:f6:76:8f:ea:b1:32:ad:af:51:48:
         c5:6c:95:8b:7c:ab:c5:52:4f:6f:0a:5e:16:9a:09:4f:95:c1:
         82:7c:a2:d9:20:d7:2a:5b:59:c9:04:4b:f8:1c:76:64:21:1f:
         a5:13:43:1b:85:9b:02:14:a6:e9:41:59:e6:f3:48:86:04:4b:
         ca:2d:23:fc:27:aa:e1:8d:da:40:2a:7e:56:06:d2:a1:d8:51:
         ce:16:23:03:c6:ca:ec:96:15:1a:89:cf:99:1c:ed:1b:89:36:
         6a:1d:de:a2:b7:7a:b5:db:20:07:d9:5e:b5:67:d1:a3:8b:87:
         04:15:a8:0a:bd:4e:da:c8:03:e9:cf:d4:6b:c7:96:a4:16:a5:
         01:96:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org