Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33342d3334203d3e20323637333435.roa
File:                     323830343a346330633a343030303a3a2f33342d3334203d3e20323637333435.roa (raw, json)
Hash identifier:          x+TtYJUeAR3GTBAE7NELGwnTornxAJAUOmQkFcmacjI=
Subject key identifier:   14:D1:19:6F:FD:D3:4C:23:6E:E5:74:59:78:D2:DD:92:6F:C6:74:8F
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       19E1A53292C28C7EC3D165807EABBAF3A355EA64
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33342d3334203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e1:a5:32:92:c2:8c:7e:c3:d1:65:80:7e:ab:ba:f3:a3:55:ea:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:de:05:f0:01:5d:cb:0a:c8:68:f7:37:e3:
                    8f:cc:08:32:c1:2f:8b:a2:e8:b7:3b:04:63:04:d6:
                    d5:5d:4b:da:9a:bb:b3:78:5c:d8:88:f0:73:44:15:
                    e5:3e:74:f6:9b:ea:e5:41:23:a1:23:5c:b9:8c:e3:
                    9c:6f:ee:69:6f:15:92:41:bf:87:f9:61:14:48:6b:
                    a1:04:af:d7:bc:84:b5:a9:13:11:41:d5:0c:49:17:
                    d2:ba:2d:4f:93:28:01:be:57:ed:da:1a:af:de:2d:
                    c3:b5:89:f8:de:d8:29:6a:f4:8d:b9:56:8d:11:60:
                    40:6f:d4:03:f0:81:d4:86:26:8c:e3:dd:57:ad:c6:
                    a0:07:a9:f5:ce:05:31:06:4d:b3:6e:3d:16:9d:19:
                    b3:f5:be:9b:89:8b:4d:cf:b9:df:3a:7c:a5:1f:b6:
                    05:36:c5:a0:de:3c:80:c9:b2:81:7f:04:7d:91:98:
                    2d:4c:c9:2f:54:55:a1:95:84:90:8e:7f:00:ee:7c:
                    82:29:20:b1:13:13:68:a2:e1:63:25:77:e2:81:df:
                    c7:ae:4b:55:e2:05:cb:31:3a:04:e6:9b:9d:ce:45:
                    a1:e5:c8:b4:0f:42:41:ab:ab:a2:53:32:af:47:3d:
                    05:74:5a:68:57:37:50:6f:f7:35:56:1c:7d:20:1d:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:19:6F:FD:D3:4C:23:6E:E5:74:59:78:D2:DD:92:6F:C6:74:8F
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33342d3334203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:e6:d9:c5:8c:ce:7a:6c:51:b3:71:99:fa:1f:24:42:f9:fd:
         bc:7c:8e:03:31:06:33:78:4f:6b:ff:98:eb:8e:d5:af:96:03:
         12:01:fb:44:1a:71:6e:d2:f1:2e:c4:a9:a5:4d:14:b9:a9:a9:
         27:b9:9c:ee:e8:b4:96:dd:9c:68:d2:ee:bc:e2:2b:7c:24:5d:
         63:e6:06:da:78:35:92:8c:43:39:ef:82:66:b4:c9:65:e1:c8:
         3c:07:da:4d:6b:c6:ba:ba:d6:27:20:9d:a6:d0:ed:53:fd:d8:
         b6:e1:f8:48:49:e2:24:99:b5:9b:c8:ed:8d:9d:4e:85:52:ed:
         00:69:09:5e:18:da:14:22:33:fe:6b:5a:54:2f:d2:e0:23:a9:
         47:86:75:63:c0:6f:25:c5:6a:da:a7:4e:1d:6e:6c:10:83:9e:
         a1:e4:6e:c3:f6:87:77:03:ab:43:0e:47:74:75:bc:80:6f:9f:
         6d:6b:8b:b6:43:04:90:52:4e:d1:28:6f:b8:5e:22:90:30:51:
         6a:49:77:dc:8d:da:d9:00:98:94:9b:dd:58:8f:70:04:55:25:
         5e:7c:70:d5:ff:19:a1:f8:38:ec:3d:57:5e:a8:3f:2a:20:89:
         b3:9a:e6:e5:c9:40:79:aa:56:9e:fc:a6:5e:69:ce:1e:06:6d:
         a4:c2:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org