Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a36303a3a2f34342d3434203d3e20323637333435.roa
File:                     323830343a346330633a36303a3a2f34342d3434203d3e20323637333435.roa (raw, json)
Hash identifier:          wdZTQhNsf/dm1smjBRSPmm6nG7h2/gsiyWmjALer784=
Subject key identifier:   F3:13:B9:5F:54:99:15:2C:96:49:75:51:CA:F4:24:3F:7D:4D:BF:D4
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       117065DA9A06AD0008DE69F478C0116A8A887CAC
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a36303a3a2f34342d3434203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:54 +0000
ROA not before:           Fri 26 Nov 2021 12:30:54 +0000
ROA not after:            Fri 25 Nov 2022 12:35:54 +0000
asID:                     267345
IP address blocks:        2804:4c0c:60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:70:65:da:9a:06:ad:00:08:de:69:f4:78:c0:11:6a:8a:88:7c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:54 2021 GMT
            Not After : Nov 25 12:35:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:f6:2b:b3:c6:1e:77:09:44:7e:41:ea:4d:
                    44:3d:95:b1:68:8e:b5:70:9a:8d:be:40:da:06:24:
                    76:3e:9f:af:b2:04:fc:c1:39:09:c7:63:3b:65:0d:
                    87:e3:05:49:56:5b:5e:fb:75:8e:5f:89:80:6b:35:
                    b9:fe:00:a0:d1:ff:99:2e:c0:31:eb:5b:ed:67:c4:
                    49:92:26:df:07:ec:1c:10:89:98:0c:de:29:9b:10:
                    8c:6e:3e:fe:ee:88:55:3b:98:0b:82:b7:4b:48:e9:
                    35:6b:72:2b:ec:90:04:58:80:2a:db:74:62:b7:98:
                    97:bd:fd:d2:71:35:b1:02:71:46:6d:d3:e8:74:d8:
                    06:09:f8:ec:ad:b8:79:06:14:d7:71:2b:a3:fa:8f:
                    41:04:96:73:7f:e1:7c:3c:81:4d:ee:9c:42:19:8c:
                    62:d1:ed:bc:02:8e:a9:55:31:78:eb:50:39:af:15:
                    c9:28:66:db:3c:58:71:6f:ee:80:03:fb:cb:86:10:
                    3c:4f:e5:71:93:3d:54:22:f6:77:bc:57:45:37:c6:
                    51:03:ed:c2:6d:47:af:12:37:aa:84:a0:76:16:19:
                    62:fb:89:ab:00:9f:0a:52:e3:e3:31:d9:76:04:0a:
                    6e:32:74:67:7e:87:10:f2:f6:02:af:51:5d:20:38:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:13:B9:5F:54:99:15:2C:96:49:75:51:CA:F4:24:3F:7D:4D:BF:D4
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a36303a3a2f34342d3434203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:9a:52:c5:89:2c:86:49:92:b1:1d:e6:54:73:87:10:07:
         73:48:8e:d1:e0:25:b5:ff:70:ca:a4:41:e3:5c:4c:76:04:f8:
         1d:9e:8f:92:eb:a7:e4:48:39:e6:64:3b:12:e1:1c:5b:fc:1c:
         cd:c4:66:4e:f4:44:5c:86:c3:a1:ca:9d:42:7d:c4:f9:a8:14:
         db:da:3b:57:30:68:1f:f8:35:6d:05:a9:26:fd:79:89:9a:f9:
         9b:16:5f:93:52:83:a7:f2:fc:f4:5a:ff:a6:4f:a7:89:7b:62:
         ea:b4:d8:0b:05:db:78:db:28:12:7d:32:40:93:96:e8:f0:98:
         82:d9:3e:e3:07:17:36:f9:fd:65:3a:a7:b6:33:c8:88:1a:ab:
         f7:69:b7:c9:1b:73:a3:ba:aa:86:46:14:a9:1c:17:31:ce:7d:
         62:e1:ad:a9:b1:32:de:b9:39:74:53:64:f4:eb:2f:c7:88:82:
         60:7c:fb:f4:90:fb:f9:8d:e8:bb:b0:11:ef:62:93:76:3d:5b:
         f4:21:ec:79:31:dc:68:c2:01:06:5d:e2:e4:5c:ff:ac:c6:97:
         e0:90:ab:c4:e3:6a:e1:e6:6c:2d:b3:c4:0d:58:1c:4d:93:f0:
         32:f0:78:dd:2f:31:fd:80:10:5e:46:06:62:68:cd:ef:d3:d7:
         1b:df:59:22
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUEXBl2poGrQAI3mn0eMARaoqIfKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yMTExMjYxMjMwNTRaFw0yMjExMjUxMjM1NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREEyQ0Y2MkJCM0M2MUU3NzA5
NDQ3RTQxRUE0RDQ0M0Q5NUIxNjg4RUI1NzA5QThEQkU0MERBMDYyNDc2M0U5RkFG
QjIwNEZDQzEzOTA5Qzc2MzNCNjUwRDg3RTMwNTQ5NTY1QjVFRkI3NThFNUY4OTgw
NkIzNUI5RkUwMEEwRDFGRjk5MkVDMDMxRUI1QkVENjdDNDQ5OTIyNkRGMDdFQzFD
MTA4OTk4MENERTI5OUIxMDhDNkUzRUZFRUU4ODU1M0I5ODBCODJCNzRCNDhFOTM1
NkI3MjJCRUM5MDA0NTg4MDJBREI3NDYyQjc5ODk3QkRGREQyNzEzNUIxMDI3MTQ2
NkREM0U4NzREODA2MDlGOEVDQURCODc5MDYxNEQ3NzEyQkEzRkE4RjQxMDQ5Njcz
N0ZFMTdDM0M4MTRERUU5QzQyMTk4QzYyRDFFREJDMDI4RUE5NTUzMTc4RUI1MDM5
QUYxNUM5Mjg2NkRCM0M1ODcxNkZFRTgwMDNGQkNCODYxMDNDNEZFNTcxOTMzRDU0
MjJGNjc3QkM1NzQ1MzdDNjUxMDNFREMyNkQ0N0FGMTIzN0FBODRBMDc2MTYxOTYy
RkI4OUFCMDA5RjBBNTJFM0UzMzFEOTc2MDQwQTZFMzI3NDY3N0U4NzEwRjJGNjAy
QUY1MTVEMjAzODAxRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2iz2K7PGHncJRH5B6k1EPZWxaI61cJqNvkDaBiR2Pp+vsgT8wTkJ
x2M7ZQ2H4wVJVlte+3WOX4mAazW5/gCg0f+ZLsAx61vtZ8RJkibfB+wcEImYDN4p
mxCMbj7+7ohVO5gLgrdLSOk1a3Ir7JAEWIAq23Rit5iXvf3ScTWxAnFGbdPodNgG
Cfjsrbh5BhTXcSuj+o9BBJZzf+F8PIFN7pxCGYxi0e28Ao6pVTF461A5rxXJKGbb
PFhxb+6AA/vLhhA8T+Vxkz1UIvZ3vFdFN8ZRA+3CbUevEjeqhKB2Fhli+4mrAJ8K
UuPjMdl2BApuMnRnfocQ8vYCr1FdIDgB5wIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FPMTuV9UmRUslkl1Ucr0JD99Tb/UMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzYzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzYzNzMzMzQzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCgETAwAYDANBgkqhkiG9w0BAQsFAAOCAQEAVn2aUsWJLIZJkrEd5lRzhxAH
c0iO0eAltf9wyqRB41xMdgT4HZ6Pkuun5Eg55mQ7EuEcW/wczcRmTvREXIbDocqd
Qn3E+agU29o7VzBoH/g1bQWpJv15iZr5mxZfk1KDp/L89Fr/pk+niXti6rTYCwXb
eNsoEn0yQJOW6PCYgtk+4wcXNvn9ZTqntjPIiBqr92m3yRtzo7qqhkYUqRwXMc59
YuGtqbEy3rk5dFNk9Osvx4iCYHz79JD7+Y3ou7AR72KTdj1b9CHseTHcaMIBBl3i
5Fz/rMaX4JCrxONq4eZsLbPEDVgcTZPwMvB43S8x/YAQXkYGYmjN79PXG99ZIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org