Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a34303a3a2f34342d3434203d3e20323637333435.roa
File:                     323830343a346330633a34303a3a2f34342d3434203d3e20323637333435.roa (raw, json)
Hash identifier:          +9BWz0tK142d9x270z4md4zeELBhsQukT1qDsxGwmaI=
Subject key identifier:   AF:BC:43:F0:33:C1:3F:28:47:D0:6B:F7:61:29:D2:BA:70:3D:34:D2
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       634236D177454A27AF5CC5FD1D5266AD9F40E2FA
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a34303a3a2f34342d3434203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:42:36:d1:77:45:4a:27:af:5c:c5:fd:1d:52:66:ad:9f:40:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:c8:d3:3a:8c:d1:8c:15:ed:a4:ad:71:63:
                    c8:43:73:f0:fa:e8:46:59:44:74:03:4e:5a:df:2d:
                    52:f4:99:14:f5:bd:05:2c:ef:de:10:8b:d7:1c:69:
                    35:a3:b3:68:60:c4:d4:7f:78:ff:5f:19:1f:07:6f:
                    43:b9:30:2a:8b:7c:ab:b0:e1:be:f1:15:29:0b:6b:
                    9d:03:a7:a8:ce:da:0a:1f:83:ff:99:06:50:17:f2:
                    e3:9a:0e:44:b1:e6:f3:79:a1:0a:52:a4:1f:97:fc:
                    c8:f5:d1:45:db:06:cb:fe:0a:c1:44:8b:b4:7c:db:
                    8c:1c:90:d6:42:55:06:34:fb:a3:2e:93:e4:01:91:
                    f2:e3:5d:51:a3:05:f4:2e:e9:95:dc:6b:f7:59:1b:
                    cf:83:e4:73:3d:03:ce:32:05:67:12:f4:91:ac:19:
                    97:99:4c:37:17:f4:9c:0b:b0:8a:1c:9f:99:a2:ab:
                    09:45:17:47:b5:10:85:8c:a8:a4:b1:93:55:e3:50:
                    6c:4e:0c:28:26:ed:fe:3f:ea:7f:01:f6:4c:1c:09:
                    dd:87:73:75:d7:6e:88:b0:7d:f4:33:f0:98:eb:8f:
                    7e:62:69:88:59:d3:bf:61:2d:bf:15:2b:09:23:72:
                    c8:68:0a:78:0b:4c:69:45:f6:23:ed:08:d9:10:c8:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:43:F0:33:C1:3F:28:47:D0:6B:F7:61:29:D2:BA:70:3D:34:D2
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a34303a3a2f34342d3434203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:af:3a:89:d7:8c:10:8f:22:fa:29:a1:77:00:05:82:49:5f:
         1e:9d:12:6e:f3:b8:4b:3d:40:23:4b:b7:4f:64:4f:4b:f9:f3:
         cc:2c:b1:26:42:f8:21:6d:da:43:01:83:08:44:da:9f:d2:cf:
         0f:8e:a1:dd:ec:99:67:e1:77:43:03:8d:07:56:62:f9:46:cf:
         3c:40:15:60:cc:de:af:eb:be:2f:96:60:ed:4c:36:da:89:b0:
         07:d2:0d:34:00:8a:4a:a5:5d:50:8c:c4:10:26:3b:5d:ae:19:
         58:06:ae:69:60:5d:cc:dc:10:b7:8a:54:72:3e:38:20:49:9f:
         01:72:b7:cf:5d:cc:6b:dd:10:31:94:8f:61:6b:16:d7:fa:f9:
         d0:3d:23:58:2b:21:d7:ca:9f:57:8c:cc:f3:d2:f4:76:47:44:
         ae:6f:13:3f:f6:07:f5:77:a7:3a:ff:f9:0a:f1:1b:20:a0:ea:
         0d:c9:d7:7b:de:e4:13:b3:bc:95:e4:52:ef:98:54:13:e8:f5:
         fb:ec:33:9a:f5:aa:11:fc:f9:06:d4:3f:f1:a1:11:bc:e8:0d:
         80:fe:6f:ec:45:95:dc:dd:51:44:15:bc:cd:68:57:df:f0:98:
         7c:6d:f0:5a:4e:ab:47:80:08:79:4a:e2:7c:bd:4f:38:5e:fc:
         2b:2b:ea:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org