Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33332d3333203d3e20323637333435.roa (raw, json)
Hash identifier:          Za7o62W7LbmRR2k4Wr7rQWLJZb5BflZKuZKDP/2dtWU=
Subject key identifier:   23:B9:A5:D6:91:8B:57:1B:CD:9E:A2:AB:2E:0E:A5:CE:33:81:6C:09
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2CF2FA886C29FD6F63A0653CB180DCD74A520BA9
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:33:58 +0000
ROA not before:           Tue 30 Jan 2024 16:28:58 +0000
ROA not after:            Tue 28 Jan 2025 16:33:58 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:fa:88:6c:29:fd:6f:63:a0:65:3c:b1:80:dc:d7:4a:52:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:28:58 2024 GMT
            Not After : Jan 28 16:33:58 2025 GMT
        Subject: CN=3082010A0282010100CAC3771AE6D934DBF7C9BDE274DE550927B031A8119E6A5674EA7B4ADDD85FB06902FBA43A982618E8F8893E4CEFBF26AD547EBBB7C35FF4416E47D6DD67ED797929F9032BD10ED3CC827475FC8AB6EDC0C032593B994F3E980881BCB30ACB9C55A0C4FFB5DFA223B9FDB2CA544A48A55861C9D336DF388203F48807B43A52F83DD33B03908E76914EEFE10E94483CD4D0554EF61E943B646B2D60C26631F0080E65E5C2CFF7807469B72B5E14E56B26AEF012AE29103ABD1F8BA0023B470CDF12018D27CA5139A2D183A55726C8A42F9F33CB78FC7BBF2CC5B8D7E1992BBF04B2EFBFAF4F5D080A9733FE4B8C5FB28824CC0C83D65DAA912F3672B6D5976A830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:77:1a:e6:d9:34:db:f7:c9:bd:e2:74:de:
                    55:09:27:b0:31:a8:11:9e:6a:56:74:ea:7b:4a:dd:
                    d8:5f:b0:69:02:fb:a4:3a:98:26:18:e8:f8:89:3e:
                    4c:ef:bf:26:ad:54:7e:bb:b7:c3:5f:f4:41:6e:47:
                    d6:dd:67:ed:79:79:29:f9:03:2b:d1:0e:d3:cc:82:
                    74:75:fc:8a:b6:ed:c0:c0:32:59:3b:99:4f:3e:98:
                    08:81:bc:b3:0a:cb:9c:55:a0:c4:ff:b5:df:a2:23:
                    b9:fd:b2:ca:54:4a:48:a5:58:61:c9:d3:36:df:38:
                    82:03:f4:88:07:b4:3a:52:f8:3d:d3:3b:03:90:8e:
                    76:91:4e:ef:e1:0e:94:48:3c:d4:d0:55:4e:f6:1e:
                    94:3b:64:6b:2d:60:c2:66:31:f0:08:0e:65:e5:c2:
                    cf:f7:80:74:69:b7:2b:5e:14:e5:6b:26:ae:f0:12:
                    ae:29:10:3a:bd:1f:8b:a0:02:3b:47:0c:df:12:01:
                    8d:27:ca:51:39:a2:d1:83:a5:57:26:c8:a4:2f:9f:
                    33:cb:78:fc:7b:bf:2c:c5:b8:d7:e1:99:2b:bf:04:
                    b2:ef:bf:af:4f:5d:08:0a:97:33:fe:4b:8c:5f:b2:
                    88:24:cc:0c:83:d6:5d:aa:91:2f:36:72:b6:d5:97:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:A5:D6:91:8B:57:1B:CD:9E:A2:AB:2E:0E:A5:CE:33:81:6C:09
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:88:d9:04:34:27:a8:07:d0:ae:a4:1f:24:bc:5c:e7:3a:
         ca:3e:90:e8:22:e0:ee:14:67:c7:0b:b0:3a:30:32:98:9e:7b:
         da:a6:1b:46:f0:6f:d4:b6:09:42:82:22:6b:98:b0:11:b9:7c:
         74:11:c4:a6:f3:b8:89:d7:7f:71:11:91:84:c8:bf:fc:fb:a5:
         41:b2:ec:f9:58:84:2b:54:92:1f:4b:f5:05:43:50:bd:1e:f2:
         81:95:f5:9a:72:07:50:ba:b2:0d:e9:f3:b2:86:4e:34:e5:86:
         3d:6d:14:ea:a5:10:23:56:7a:b5:39:dd:e0:8e:e3:c7:5c:31:
         3e:20:45:70:d1:ac:b8:a4:c4:5d:5d:40:36:08:76:5b:b4:ae:
         ed:51:11:18:3c:0e:d5:0c:e6:41:6a:c7:3f:11:7f:57:79:55:
         28:03:5f:31:4e:ab:1f:74:7d:81:e3:2d:f4:ba:a9:03:c0:62:
         cf:07:49:ef:ac:d9:6f:dc:84:a5:1e:c2:52:46:f0:68:1c:49:
         9b:dd:0c:d8:f7:ce:f4:a2:aa:64:25:96:b7:bf:4e:ad:78:42:
         ed:20:83:52:74:3a:c1:00:e3:b3:9d:e9:51:b8:39:73:11:c3:
         80:e5:2e:86:b4:71:9e:71:8a:99:bd:fc:e1:b8:de:b9:34:e0:
         bb:e7:ae:95
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULPL6iGwp/W9joGU8sYDc10pSC6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjI4NThaFw0yNTAxMjgxNjMzNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FDMzc3MUFFNkQ5MzREQkY3
QzlCREUyNzRERTU1MDkyN0IwMzFBODExOUU2QTU2NzRFQTdCNEFEREQ4NUZCMDY5
MDJGQkE0M0E5ODI2MThFOEY4ODkzRTRDRUZCRjI2QUQ1NDdFQkJCN0MzNUZGNDQx
NkU0N0Q2REQ2N0VENzk3OTI5RjkwMzJCRDEwRUQzQ0M4Mjc0NzVGQzhBQjZFREMw
QzAzMjU5M0I5OTRGM0U5ODA4ODFCQ0IzMEFDQjlDNTVBMEM0RkZCNURGQTIyM0I5
RkRCMkNBNTQ0QTQ4QTU1ODYxQzlEMzM2REYzODgyMDNGNDg4MDdCNDNBNTJGODNE
RDMzQjAzOTA4RTc2OTE0RUVGRTEwRTk0NDgzQ0Q0RDA1NTRFRjYxRTk0M0I2NDZC
MkQ2MEMyNjYzMUYwMDgwRTY1RTVDMkNGRjc4MDc0NjlCNzJCNUUxNEU1NkIyNkFF
RjAxMkFFMjkxMDNBQkQxRjhCQTAwMjNCNDcwQ0RGMTIwMThEMjdDQTUxMzlBMkQx
ODNBNTU3MjZDOEE0MkY5RjMzQ0I3OEZDN0JCRjJDQzVCOEQ3RTE5OTJCQkYwNEIy
RUZCRkFGNEY1RDA4MEE5NzMzRkU0QjhDNUZCMjg4MjRDQzBDODNENjVEQUE5MTJG
MzY3MkI2RDU5NzZBODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAysN3GubZNNv3yb3idN5VCSewMagRnmpWdOp7St3YX7BpAvukOpgm
GOj4iT5M778mrVR+u7fDX/RBbkfW3WfteXkp+QMr0Q7TzIJ0dfyKtu3AwDJZO5lP
PpgIgbyzCsucVaDE/7XfoiO5/bLKVEpIpVhhydM23ziCA/SIB7Q6Uvg90zsDkI52
kU7v4Q6USDzU0FVO9h6UO2RrLWDCZjHwCA5l5cLP94B0abcrXhTlayau8BKuKRA6
vR+LoAI7RwzfEgGNJ8pROaLRg6VXJsikL58zy3j8e78sxbjX4ZkrvwSy77+vT10I
Cpcz/kuMX7KIJMwMg9ZdqpEvNnK21ZdqgwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCO5pdaRi1cbzZ6iqy4Opc4zgWwJMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNzMzMzQzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
TAwAMA0GCSqGSIb3DQEBCwUAA4IBAQAPrYjZBDQnqAfQrqQfJLxc5zrKPpDoIuDu
FGfHC7A6MDKYnnvaphtG8G/UtglCgiJrmLARuXx0EcSm87iJ139xEZGEyL/8+6VB
suz5WIQrVJIfS/UFQ1C9HvKBlfWacgdQurIN6fOyhk405YY9bRTqpRAjVnq1Od3g
juPHXDE+IEVw0ay4pMRdXUA2CHZbtK7tUREYPA7VDOZBasc/EX9XeVUoA18xTqsf
dH2B4y30uqkDwGLPB0nvrNlv3ISlHsJSRvBoHEmb3QzY9870oqpkJZa3v06teELt
IINSdDrBAOOznelRuDlzEcOA5S6GtHGecYqZvfzhuN65NOC7566V
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org