Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          c1wLkj/W7f5Tjnm2CUYKqBhM7+fIFvE29lVzpSJL1wA=
Subject key identifier:   69:84:CF:BC:F8:45:75:E4:55:A4:31:B0:DB:85:D4:F4:D1:5C:D4:75
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       7224C522EA8CB4E9A4DCE6A76538FE7B3018526D
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:40:17 +0000
ROA not before:           Tue 30 Jan 2024 16:35:17 +0000
ROA not after:            Tue 28 Jan 2025 16:40:17 +0000
asID:                     267345
IP address blocks:        2804:4c0c:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:c5:22:ea:8c:b4:e9:a4:dc:e6:a7:65:38:fe:7b:30:18:52:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:35:17 2024 GMT
            Not After : Jan 28 16:40:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:38:c7:6a:02:b7:d6:6b:a0:7f:7e:01:da:
                    36:e1:e4:c6:96:e0:ad:5c:3a:bb:a1:f7:94:4a:4f:
                    78:cf:f6:91:ed:65:ba:ae:9d:44:e4:af:74:c6:2b:
                    2a:bb:b6:40:e8:51:92:b1:99:45:84:04:b7:b1:fb:
                    f3:52:62:ad:ca:2a:34:cf:f1:8c:74:ea:18:06:d3:
                    58:8d:b4:b0:66:cb:b1:1e:ec:04:7f:c9:39:d9:a3:
                    89:14:9a:b1:3a:dd:07:1f:d8:82:74:7d:ff:28:52:
                    ac:d1:73:a4:45:c9:13:c7:c8:6f:ce:cd:bb:6a:ff:
                    1a:0d:08:6e:83:dc:08:0d:ea:8c:70:cd:26:7c:7a:
                    d2:de:4e:87:1a:70:74:81:e0:d7:c8:41:da:59:48:
                    7a:49:b9:08:33:eb:09:19:45:41:1d:bf:9f:09:36:
                    6f:e3:b4:e4:f9:ce:e7:2b:ab:3f:2c:87:a0:fa:22:
                    12:cf:62:66:31:9d:c4:a8:be:2b:28:aa:48:fa:3e:
                    be:96:f7:7d:b3:8e:a8:55:69:a7:1c:1d:0c:c6:3a:
                    ba:8d:1d:a7:0f:bd:23:91:ed:d6:db:82:15:89:b4:
                    c6:e7:a9:ea:d5:cd:04:1b:dd:80:09:a9:16:26:75:
                    b0:80:2d:7e:a6:51:fa:06:e6:3c:79:fa:d7:ed:d7:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:CF:BC:F8:45:75:E4:55:A4:31:B0:DB:85:D4:F4:D1:5C:D4:75
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:8b:7a:b1:d0:d2:87:fa:2c:e6:ce:58:cd:40:10:19:00:
         96:67:18:a7:02:a7:d4:04:45:c6:a2:91:47:26:ef:e7:55:82:
         4e:7d:3b:76:bd:9c:4d:a4:62:e7:35:b8:af:ae:71:03:af:4f:
         c7:12:80:85:6f:a1:7e:f6:69:4c:ff:07:40:64:e6:05:aa:d9:
         b0:66:8c:bc:86:0c:df:0b:c3:d2:04:97:62:70:45:91:c8:70:
         32:14:6e:b9:13:4f:a2:df:01:1c:02:14:85:76:91:3c:40:0e:
         45:1b:d7:bf:d8:8e:73:23:7f:c1:c1:ed:81:24:8e:66:9c:c4:
         e6:0c:d5:9c:10:94:be:36:ba:56:f3:90:c5:5d:36:97:db:5e:
         5d:3a:81:d5:da:be:c6:3e:a6:f7:e5:2c:a4:d2:47:35:58:ef:
         6b:d1:9d:cd:ac:68:a9:3a:e1:06:3b:16:58:2b:06:d5:21:42:
         1a:b7:5b:93:c1:48:d7:3e:e3:a7:fa:d5:1b:3b:2b:a9:5c:4a:
         4f:8e:ff:30:31:88:c0:b9:ad:69:2f:a8:15:5a:42:0c:07:d6:
         c6:54:94:cd:3f:73:34:7c:76:f4:6f:70:9f:a9:e4:e2:b1:70:
         a9:f2:6f:42:93:f3:3e:9b:5e:19:dc:a9:e5:7c:b2:d9:65:61:
         9e:59:47:9a
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUciTFIuqMtOmk3OanZTj+ezAYUm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjM1MTdaFw0yNTAxMjgxNjQwMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzZBNTM4Qzc2QTAyQjdENjZC
QTA3RjdFMDFEQTM2RTFFNEM2OTZFMEFENUMzQUJCQTFGNzk0NEE0Rjc4Q0ZGNjkx
RUQ2NUJBQUU5RDQ0RTRBRjc0QzYyQjJBQkJCNjQwRTg1MTkyQjE5OTQ1ODQwNEI3
QjFGQkYzNTI2MkFEQ0EyQTM0Q0ZGMThDNzRFQTE4MDZEMzU4OERCNEIwNjZDQkIx
MUVFQzA0N0ZDOTM5RDlBMzg5MTQ5QUIxM0FERDA3MUZEODgyNzQ3REZGMjg1MkFD
RDE3M0E0NDVDOTEzQzdDODZGQ0VDREJCNkFGRjFBMEQwODZFODNEQzA4MERFQThD
NzBDRDI2N0M3QUQyREU0RTg3MUE3MDc0ODFFMEQ3Qzg0MURBNTk0ODdBNDlCOTA4
MzNFQjA5MTk0NTQxMURCRjlGMDkzNjZGRTNCNEU0RjlDRUU3MkJBQjNGMkM4N0Ew
RkEyMjEyQ0Y2MjY2MzE5REM0QThCRTJCMjhBQTQ4RkEzRUJFOTZGNzdEQjM4RUE4
NTU2OUE3MUMxRDBDQzYzQUJBOEQxREE3MEZCRDIzOTFFREQ2REI4MjE1ODlCNEM2
RTdBOUVBRDVDRDA0MUJERDgwMDlBOTE2MjY3NUIwODAyRDdFQTY1MUZBMDZFNjND
NzlGQUQ3RURENzAxNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxqU4x2oCt9ZroH9+Ado24eTGluCtXDq7ofeUSk94z/aR7WW6rp1E
5K90xisqu7ZA6FGSsZlFhAS3sfvzUmKtyio0z/GMdOoYBtNYjbSwZsuxHuwEf8k5
2aOJFJqxOt0HH9iCdH3/KFKs0XOkRckTx8hvzs27av8aDQhug9wIDeqMcM0mfHrS
3k6HGnB0geDXyEHaWUh6SbkIM+sJGUVBHb+fCTZv47Tk+c7nK6s/LIeg+iISz2Jm
MZ3EqL4rKKpI+j6+lvd9s46oVWmnHB0Mxjq6jR2nD70jke3W24IVibTG56nq1c0E
G92ACakWJnWwgC1+plH6BuY8efrX7dcBTQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGmEz7z4RXXkVaQxsNuF1PTRXNR1MB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMQDANBgkqhkiG9w0BAQsFAAOCAQEAibWLerHQ0of6LObOWM1A
EBkAlmcYpwKn1ARFxqKRRybv51WCTn07dr2cTaRi5zW4r65xA69PxxKAhW+hfvZp
TP8HQGTmBarZsGaMvIYM3wvD0gSXYnBFkchwMhRuuRNPot8BHAIUhXaRPEAORRvX
v9iOcyN/wcHtgSSOZpzE5gzVnBCUvja6VvOQxV02l9teXTqB1dq+xj6m9+UspNJH
NVjva9GdzaxoqTrhBjsWWCsG1SFCGrdbk8FI1z7jp/rVGzsrqVxKT47/MDGIwLmt
aS+oFVpCDAfWxlSUzT9zNHx29G9wn6nk4rFwqfJvQpPzPpteGdyp5Xyy2WVhnllH
mg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org