Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          vqcvVD/3vrNBZ1FwynsD8s6+4et4iNrv0sqv7iUJAJY=
Subject key identifier:   FF:DF:EB:E7:94:0A:2F:7A:DA:EA:F2:6E:E6:E0:52:92:A6:76:92:04
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       244D4BC5EE48291E7ADAEEB4EBD968E20B18CA46
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:41:09 +0000
ROA not before:           Tue 30 Jan 2024 16:36:09 +0000
ROA not after:            Tue 28 Jan 2025 16:41:09 +0000
asID:                     267345
IP address blocks:        2804:4c0c:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:4b:c5:ee:48:29:1e:7a:da:ee:b4:eb:d9:68:e2:0b:18:ca:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:36:09 2024 GMT
            Not After : Jan 28 16:41:09 2025 GMT
        Subject: CN=3082010A0282010100CFB31C1E1F568629ADDEA80570388C44D45B4721978B82689BD9CC0CD7855A767F3F62CCD6D37D8246479CE9A77EE63BC5C15950865812AFC75B8F455264619222A0A7AC09EB23A3ECD4DF2CA63625A8318489711D8F758701B5A6BCA97F4D51BD2C992220A06FC13ABBF47757E9E4EAD0EBF72971EEF2CAC3D222DA522039E47F217CE485D74138E8154E1D692540E3EBDA250E751D6E2527163B12AFCDCA29DB0ABCF4FB062C26583E20CFF8A7A8F95E40A0009E2556454D1750CDC0806501DF0E1D82507F3B795A8EB4042D30A48CDD3E2A943277992CB218887359EDCBA14BCA4DB11BFACBF86B47CD3D57B75D8FFEE9A3126ED223687421AA5BC59BBAB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:1c:1e:1f:56:86:29:ad:de:a8:05:70:38:
                    8c:44:d4:5b:47:21:97:8b:82:68:9b:d9:cc:0c:d7:
                    85:5a:76:7f:3f:62:cc:d6:d3:7d:82:46:47:9c:e9:
                    a7:7e:e6:3b:c5:c1:59:50:86:58:12:af:c7:5b:8f:
                    45:52:64:61:92:22:a0:a7:ac:09:eb:23:a3:ec:d4:
                    df:2c:a6:36:25:a8:31:84:89:71:1d:8f:75:87:01:
                    b5:a6:bc:a9:7f:4d:51:bd:2c:99:22:20:a0:6f:c1:
                    3a:bb:f4:77:57:e9:e4:ea:d0:eb:f7:29:71:ee:f2:
                    ca:c3:d2:22:da:52:20:39:e4:7f:21:7c:e4:85:d7:
                    41:38:e8:15:4e:1d:69:25:40:e3:eb:da:25:0e:75:
                    1d:6e:25:27:16:3b:12:af:cd:ca:29:db:0a:bc:f4:
                    fb:06:2c:26:58:3e:20:cf:f8:a7:a8:f9:5e:40:a0:
                    00:9e:25:56:45:4d:17:50:cd:c0:80:65:01:df:0e:
                    1d:82:50:7f:3b:79:5a:8e:b4:04:2d:30:a4:8c:dd:
                    3e:2a:94:32:77:99:2c:b2:18:88:73:59:ed:cb:a1:
                    4b:ca:4d:b1:1b:fa:cb:f8:6b:47:cd:3d:57:b7:5d:
                    8f:fe:e9:a3:12:6e:d2:23:68:74:21:aa:5b:c5:9b:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:EB:E7:94:0A:2F:7A:DA:EA:F2:6E:E6:E0:52:92:A6:76:92:04
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:56:de:d4:c2:bb:34:bc:b2:31:6e:3f:71:98:86:e8:69:43:
         2e:05:de:7c:88:1e:50:f2:99:57:a2:4a:f0:8d:5e:e7:80:04:
         3d:be:3e:30:b8:8a:06:57:90:82:7a:b4:67:0c:36:c0:c4:c5:
         48:6b:02:31:84:37:06:d5:be:97:22:08:91:9e:1c:4f:c4:b8:
         46:c4:82:4d:9f:f8:22:0d:44:7a:67:a6:03:c6:c5:f9:ac:e3:
         3d:a9:11:04:db:35:7d:e6:41:0b:4e:5d:10:d2:31:fa:27:17:
         8a:fd:fe:13:d4:1c:6c:64:de:76:33:93:0a:0f:1e:57:01:a0:
         a6:9c:1e:ec:a1:10:3e:71:6d:7c:73:d6:49:b7:8c:4f:eb:0e:
         53:8e:e3:11:b8:9e:05:41:f4:2a:c6:19:28:69:6f:79:29:46:
         92:21:34:0b:a5:5b:32:92:31:94:52:65:1e:0c:83:1f:ca:c8:
         d2:aa:15:62:4d:f3:ad:6f:81:7d:90:c0:a4:15:e4:4b:e1:b3:
         19:8f:cb:b4:61:c1:09:2b:ee:92:88:8f:e8:24:a1:e8:ad:7f:
         84:24:e6:bc:34:cd:97:ec:37:ad:62:3e:7a:d1:be:63:cf:1a:
         78:7f:5a:25:91:e8:e3:fa:27:4f:36:a4:bc:59:8b:0d:a2:d8:
         51:16:ec:d4
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUJE1Lxe5IKR562u6069lo4gsYykYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjM2MDlaFw0yNTAxMjgxNjQxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZCMzFDMUUxRjU2ODYyOUFE
REVBODA1NzAzODhDNDRENDVCNDcyMTk3OEI4MjY4OUJEOUNDMENENzg1NUE3NjdG
M0Y2MkNDRDZEMzdEODI0NjQ3OUNFOUE3N0VFNjNCQzVDMTU5NTA4NjU4MTJBRkM3
NUI4RjQ1NTI2NDYxOTIyMkEwQTdBQzA5RUIyM0EzRUNENERGMkNBNjM2MjVBODMx
ODQ4OTcxMUQ4Rjc1ODcwMUI1QTZCQ0E5N0Y0RDUxQkQyQzk5MjIyMEEwNkZDMTNB
QkJGNDc3NTdFOUU0RUFEMEVCRjcyOTcxRUVGMkNBQzNEMjIyREE1MjIwMzlFNDdG
MjE3Q0U0ODVENzQxMzhFODE1NEUxRDY5MjU0MEUzRUJEQTI1MEU3NTFENkUyNTI3
MTYzQjEyQUZDRENBMjlEQjBBQkNGNEZCMDYyQzI2NTgzRTIwQ0ZGOEE3QThGOTVF
NDBBMDAwOUUyNTU2NDU0RDE3NTBDREMwODA2NTAxREYwRTFEODI1MDdGM0I3OTVB
OEVCNDA0MkQzMEE0OENERDNFMkE5NDMyNzc5OTJDQjIxODg4NzM1OUVEQ0JBMTRC
Q0E0REIxMUJGQUNCRjg2QjQ3Q0QzRDU3Qjc1RDhGRkVFOUEzMTI2RUQyMjM2ODc0
MjFBQTVCQzU5QkJBQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz7McHh9Whimt3qgFcDiMRNRbRyGXi4Jom9nMDNeFWnZ/P2LM1tN9
gkZHnOmnfuY7xcFZUIZYEq/HW49FUmRhkiKgp6wJ6yOj7NTfLKY2JagxhIlxHY91
hwG1prypf01RvSyZIiCgb8E6u/R3V+nk6tDr9ylx7vLKw9Ii2lIgOeR/IXzkhddB
OOgVTh1pJUDj69olDnUdbiUnFjsSr83KKdsKvPT7BiwmWD4gz/inqPleQKAAniVW
RU0XUM3AgGUB3w4dglB/O3lajrQELTCkjN0+KpQyd5ksshiIc1nty6FLyk2xG/rL
+GtHzT1Xt12P/umjEm7SI2h0IapbxZu6twIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FP/f6+eUCi962urybubgUpKmdpIEMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzgzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMgDANBgkqhkiG9w0BAQsFAAOCAQEAh1be1MK7NLyyMW4/cZiG
6GlDLgXefIgeUPKZV6JK8I1e54AEPb4+MLiKBleQgnq0Zww2wMTFSGsCMYQ3BtW+
lyIIkZ4cT8S4RsSCTZ/4Ig1EememA8bF+azjPakRBNs1feZBC05dENIx+icXiv3+
E9QcbGTedjOTCg8eVwGgppwe7KEQPnFtfHPWSbeMT+sOU47jEbieBUH0KsYZKGlv
eSlGkiE0C6VbMpIxlFJlHgyDH8rI0qoVYk3zrW+BfZDApBXkS+GzGY/LtGHBCSvu
koiP6CSh6K1/hCTmvDTNl+w3rWI+etG+Y88aeH9aJZHo4/onTzakvFmLDaLYURbs
1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org