Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33342d3334203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33342d3334203d3e20323637333435.roa (raw, json)
Hash identifier:          A3EgCDsLnQ/YtFcjUOJiugJWjPiqjBqW0ka+ADaUVXw=
Subject key identifier:   FC:FC:49:65:E5:88:59:D9:C8:5B:64:6F:E9:5D:A9:F0:E4:71:BC:A5
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2DF9AD7271BEA1F84AAE3CEC3C8C9A4406215EB4
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33342d3334203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f9:ad:72:71:be:a1:f8:4a:ae:3c:ec:3c:8c:9a:44:06:21:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:0c:81:56:1a:fc:07:6b:b7:22:17:54:88:
                    b6:fb:55:10:a0:91:fc:e9:d8:64:51:ac:78:a6:3c:
                    2b:f0:5c:1c:fe:e6:37:9a:0f:ad:b5:12:62:56:a8:
                    45:e5:3c:de:93:3c:6e:a0:f5:d6:52:08:95:b9:68:
                    18:7d:18:c4:cb:af:e8:2a:6d:fe:25:f2:db:5a:ba:
                    36:99:03:38:5f:22:db:9f:8e:32:57:65:8a:d4:d5:
                    3e:3c:4f:ed:60:11:d9:b6:c2:a8:5a:6e:0d:95:d3:
                    76:38:fe:a4:0b:5d:18:66:8b:33:df:52:79:b7:f9:
                    47:f4:98:37:4c:1c:d5:58:46:3d:f5:7c:75:5d:2a:
                    56:4a:e3:c3:00:a4:5a:07:9e:1c:fb:a5:45:a2:f9:
                    1f:0e:c3:fb:7c:3d:6c:e8:c9:5e:44:37:74:80:d6:
                    82:f9:e1:18:d2:fc:b5:2d:e2:88:92:d4:8d:9a:2a:
                    79:56:c7:88:9f:53:6e:58:76:b3:9d:81:59:d2:68:
                    85:02:a3:72:d2:6e:9c:23:4a:1f:62:34:fc:d2:3a:
                    be:35:37:5e:f2:d8:5d:df:64:af:43:a9:59:b4:b1:
                    67:cc:3e:20:f3:06:62:0e:34:b0:69:dd:02:21:f4:
                    ff:4e:06:23:88:89:f5:b5:dd:73:9b:e3:1b:c1:77:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:49:65:E5:88:59:D9:C8:5B:64:6F:E9:5D:A9:F0:E4:71:BC:A5
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33342d3334203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:94:8b:45:96:e8:06:bd:5d:db:29:7b:fb:d6:bf:86:fe:
         23:77:03:26:f0:ae:ec:c6:af:ad:88:9c:a0:5d:9f:32:51:2b:
         7e:59:92:2e:34:92:06:9c:f0:4e:ba:bc:1a:02:1d:53:16:01:
         fd:37:e6:e8:ce:ec:73:1e:87:19:f1:a1:cd:14:4d:8e:ab:5d:
         34:00:39:3d:ee:da:82:5e:a4:06:c5:6d:16:d6:bf:21:53:45:
         04:19:c5:da:ca:bd:52:66:bd:06:1b:05:4a:ce:be:00:55:9b:
         69:49:94:3a:1c:01:e1:34:bd:c9:eb:5e:6d:2c:ae:5e:85:d0:
         ac:d9:ce:f2:c8:20:ff:26:52:ea:c1:9b:f0:48:70:cb:69:44:
         92:b8:50:30:8b:d1:2f:2a:2e:62:02:2f:41:6f:ff:4b:5a:04:
         8e:d4:77:f5:51:e7:5b:52:a2:a1:4c:c1:8d:24:5e:c3:71:4e:
         61:68:95:35:91:71:b3:30:c7:cd:0d:a0:11:37:aa:07:12:3d:
         cf:70:2f:fb:ec:5e:b9:41:14:7f:bd:62:04:b7:bf:49:af:7c:
         54:f5:e3:df:a2:3e:e9:94:da:d0:d4:79:63:c0:0f:36:49:66:
         ad:7f:79:ca:ca:95:ba:ba:12:ab:ad:38:55:d7:ec:4c:d0:12:
         13:1d:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org