Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33342d3334203d3e20323637333435.roa
File:                     323830343a346330633a383030303a3a2f33342d3334203d3e20323637333435.roa (raw, json)
Hash identifier:          lrFVb7clWJL98D1jXWqIgfxZF8o6mr52Sgrh5F18bas=
Subject key identifier:   20:8C:B7:BE:0C:92:C9:3F:D1:83:76:B3:59:86:E4:8C:40:44:BD:93
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       20505BA4DB50B5342F8F9F484A06D869635A3FF1
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33342d3334203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:54 +0000
ROA not before:           Fri 26 Nov 2021 12:30:54 +0000
ROA not after:            Fri 25 Nov 2022 12:35:54 +0000
asID:                     267345
IP address blocks:        2804:4c0c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:50:5b:a4:db:50:b5:34:2f:8f:9f:48:4a:06:d8:69:63:5a:3f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:54 2021 GMT
            Not After : Nov 25 12:35:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:85:66:86:f9:e8:d2:a0:c4:28:02:3e:c4:
                    48:ad:ff:a8:ad:90:85:35:9a:8a:24:9f:ae:22:65:
                    a4:85:04:0c:19:3a:5d:d7:04:30:2c:39:0b:52:2d:
                    f8:78:fd:af:f9:50:4b:a1:c1:75:ee:c3:d3:14:0b:
                    43:11:2a:8a:6e:78:8c:d2:5f:e8:fd:83:a0:27:70:
                    08:eb:9b:08:c0:00:22:25:03:94:d1:68:ac:9f:db:
                    9f:5e:62:d1:2f:46:11:c7:36:25:c1:d5:75:e5:5f:
                    38:f7:1d:46:f8:44:ec:d4:7d:ef:c5:42:23:05:d2:
                    e6:e9:f0:62:20:e0:5c:13:79:81:13:37:f6:69:c1:
                    2a:00:d2:9d:a2:2d:43:cd:25:83:bd:b8:43:0b:d1:
                    e9:d3:f7:79:e4:60:01:2e:9f:78:97:1c:5c:86:08:
                    24:7b:90:ca:b2:42:52:9e:8d:d8:37:c4:b5:31:ed:
                    60:50:6e:a5:d9:9f:31:13:5b:5b:fe:03:e2:01:dd:
                    c4:5f:97:ec:f2:40:45:10:6f:32:c2:11:fb:0f:70:
                    52:e8:3c:12:04:90:53:40:98:b2:8d:33:0b:dc:39:
                    5a:e4:bc:23:8e:e4:6c:e4:d4:1f:d2:bb:b7:5d:c3:
                    c5:3a:73:64:52:c3:5d:c3:77:fa:a1:48:05:84:0d:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:B7:BE:0C:92:C9:3F:D1:83:76:B3:59:86:E4:8C:40:44:BD:93
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33342d3334203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:8d:3c:50:41:8e:2c:b8:ab:a7:62:12:e5:da:3b:3c:dd:
         70:5d:b6:3a:9e:6f:1a:b9:89:18:a5:45:54:1f:aa:15:aa:28:
         0a:67:bd:52:ae:ce:34:12:8a:c0:0c:a3:82:c6:e7:8b:93:cb:
         21:fd:01:50:0b:89:fb:40:d4:c2:9b:08:ab:3b:4e:d0:bc:b3:
         83:90:90:5e:e2:3d:c8:23:97:51:f6:23:cb:bc:0f:9d:ed:04:
         1f:ef:08:38:0e:e2:45:23:5e:83:80:82:db:05:3c:4d:04:9e:
         9f:82:60:18:ce:1e:f5:af:4a:8e:b2:8e:fa:a9:96:ac:09:e7:
         b7:37:f9:2b:5f:e0:93:6b:b4:09:e2:87:ba:fd:e6:0a:ec:18:
         8b:02:d5:3b:f8:69:99:3c:25:bb:9a:d2:26:63:5c:39:96:66:
         35:b2:86:cc:7f:9e:f8:35:be:f6:17:d3:1c:84:a8:2b:26:be:
         bd:e7:42:5c:cf:77:0c:c9:4d:d5:ae:37:9c:5e:2d:0a:8f:00:
         ef:4c:81:bf:fc:3d:e9:b9:08:7d:69:ea:58:92:8b:67:bf:c5:
         2c:5c:bb:50:52:26:f3:36:a4:07:2f:04:0c:c3:a0:b9:ec:85:
         e3:cc:e8:33:21:f6:7d:ed:19:1d:4c:3f:fc:5f:ab:ac:ec:62:
         79:49:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org