Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          DdW8MWfFyMtrd0AvL5RhBhXFT6iqO800VGq+p0sKHHw=
Subject key identifier:   AA:CA:2B:1B:4C:DD:20:98:C6:2B:D9:31:80:B1:5C:25:F4:DF:7F:7A
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       0A017ADC3C10CBEA0BE1EB3A802915D08132CCAC
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:37:14 +0000
ROA not before:           Tue 30 Jan 2024 16:32:14 +0000
ROA not after:            Tue 28 Jan 2025 16:37:14 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:7a:dc:3c:10:cb:ea:0b:e1:eb:3a:80:29:15:d0:81:32:cc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:32:14 2024 GMT
            Not After : Jan 28 16:37:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:c0:f3:13:ba:8a:1e:da:82:b9:d1:23:78:
                    15:b7:25:71:11:8a:4d:8b:a0:22:f9:81:6f:ab:5c:
                    a8:20:57:6d:c3:39:96:d6:34:37:f3:1a:d6:83:db:
                    7d:90:27:e7:24:c7:8e:87:49:fb:8e:1c:3f:44:ef:
                    fe:fc:18:88:80:3b:7b:80:69:cd:5a:e6:ac:ef:35:
                    79:3f:8e:e2:b6:bf:6b:cc:6c:a9:bf:e2:04:38:6b:
                    d9:97:c0:f4:b4:a5:ea:a4:23:c4:4d:a3:22:30:75:
                    c7:c6:5a:71:b4:ba:18:64:40:3f:f7:3c:0c:b5:d7:
                    14:13:fd:3b:4f:b1:f8:13:9b:07:eb:b1:e1:2c:1e:
                    f8:50:cf:78:0e:73:32:c7:25:71:25:53:b9:13:75:
                    d8:67:38:3b:7d:29:7e:79:91:c3:02:04:a5:fa:c4:
                    55:4a:71:bd:a6:89:26:4b:78:41:c0:55:8e:d4:1c:
                    da:24:b5:1f:0a:0c:ed:0d:47:d9:d2:be:b1:a7:79:
                    d4:ac:42:39:a9:a9:9e:f4:1a:25:3d:20:ed:87:53:
                    fc:bc:fd:ad:fa:91:de:50:37:a6:be:d5:f7:ba:2c:
                    54:53:73:7a:a6:53:ee:7e:e7:65:2e:6f:d9:3d:5f:
                    d8:55:91:0e:fd:a9:c2:3d:4d:6e:73:06:d1:d8:31:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:2B:1B:4C:DD:20:98:C6:2B:D9:31:80:B1:5C:25:F4:DF:7F:7A
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:af:e0:af:42:2b:66:60:6d:31:72:6d:de:df:4e:2e:f3:fd:
         2e:e2:51:d6:b5:27:60:09:dd:4b:8f:03:94:9c:f8:54:ff:e4:
         d3:4e:b5:a3:27:13:93:b2:73:19:18:6d:0e:f8:e6:c9:a9:8a:
         4c:d5:5e:01:cf:9a:9d:3d:8a:5b:d6:6d:c7:bf:14:e3:80:37:
         9a:57:96:8b:5b:a0:9e:cf:18:3e:d7:18:b4:c9:ba:b8:c1:7b:
         26:e0:8a:7b:d5:98:98:0f:35:97:12:71:b4:85:ad:21:9f:0b:
         f8:e6:bd:07:88:43:dc:52:0d:cc:6a:62:85:6f:e5:54:a7:a0:
         ca:25:88:00:c0:bd:bd:14:fa:bb:97:e9:34:b5:f3:89:9a:46:
         98:ae:a9:2a:d9:a9:fc:e0:dd:36:50:34:3d:56:d7:46:2b:86:
         4d:2d:5d:4a:aa:a9:7b:1f:d6:d9:1c:c5:60:64:9d:33:ac:70:
         44:8e:e8:94:5a:82:b9:12:b9:86:c1:51:d9:7a:f3:98:6d:3f:
         79:2f:73:aa:61:cf:8c:9f:ec:cf:ca:cd:12:43:bf:cb:66:45:
         b3:b5:69:b0:45:42:01:c4:d9:f2:b5:c1:ec:10:fd:f7:ac:f2:
         da:3a:89:ab:8a:a6:80:7d:4c:14:71:ce:c3:92:e4:f3:76:cb:
         a0:a1:8b:3a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCgF63DwQy+oL4es6gCkV0IEyzKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjMyMTRaFw0yNTAxMjgxNjM3MTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE4Q0MwRjMxM0JBOEExRURB
ODJCOUQxMjM3ODE1QjcyNTcxMTE4QTREOEJBMDIyRjk4MTZGQUI1Q0E4MjA1NzZE
QzMzOTk2RDYzNDM3RjMxQUQ2ODNEQjdEOTAyN0U3MjRDNzhFODc0OUZCOEUxQzNG
NDRFRkZFRkMxODg4ODAzQjdCODA2OUNENUFFNkFDRUYzNTc5M0Y4RUUyQjZCRjZC
Q0M2Q0E5QkZFMjA0Mzg2QkQ5OTdDMEY0QjRBNUVBQTQyM0M0NERBMzIyMzA3NUM3
QzY1QTcxQjRCQTE4NjQ0MDNGRjczQzBDQjVENzE0MTNGRDNCNEZCMUY4MTM5QjA3
RUJCMUUxMkMxRUY4NTBDRjc4MEU3MzMyQzcyNTcxMjU1M0I5MTM3NUQ4NjczODNC
N0QyOTdFNzk5MUMzMDIwNEE1RkFDNDU1NEE3MUJEQTY4OTI2NEI3ODQxQzA1NThF
RDQxQ0RBMjRCNTFGMEEwQ0VEMEQ0N0Q5RDJCRUIxQTc3OUQ0QUM0MjM5QTlBOTlF
RjQxQTI1M0QyMEVEODc1M0ZDQkNGREFERkE5MURFNTAzN0E2QkVENUY3QkEyQzU0
NTM3MzdBQTY1M0VFN0VFNzY1MkU2RkQ5M0Q1RkQ4NTU5MTBFRkRBOUMyM0Q0RDZF
NzMwNkQxRDgzMUI5RkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0YzA8xO6ih7agrnRI3gVtyVxEYpNi6Ai+YFvq1yoIFdtwzmW1jQ3
8xrWg9t9kCfnJMeOh0n7jhw/RO/+/BiIgDt7gGnNWuas7zV5P47itr9rzGypv+IE
OGvZl8D0tKXqpCPETaMiMHXHxlpxtLoYZEA/9zwMtdcUE/07T7H4E5sH67HhLB74
UM94DnMyxyVxJVO5E3XYZzg7fSl+eZHDAgSl+sRVSnG9pokmS3hBwFWO1BzaJLUf
CgztDUfZ0r6xp3nUrEI5qame9BolPSDth1P8vP2t+pHeUDemvtX3uixUU3N6plPu
fudlLm/ZPV/YVZEO/anCPU1ucwbR2DG5/wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKrKKxtM3SCYxivZMYCxXCX03396MB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
M2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzNzMzMzQzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgE
TAwAMA0GCSqGSIb3DQEBCwUAA4IBAQCJr+CvQitmYG0xcm3e304u8/0u4lHWtSdg
Cd1LjwOUnPhU/+TTTrWjJxOTsnMZGG0O+ObJqYpM1V4Bz5qdPYpb1m3HvxTjgDea
V5aLW6Cezxg+1xi0ybq4wXsm4Ip71ZiYDzWXEnG0ha0hnwv45r0HiEPcUg3MamKF
b+VUp6DKJYgAwL29FPq7l+k0tfOJmkaYrqkq2an84N02UDQ9VtdGK4ZNLV1Kqql7
H9bZHMVgZJ0zrHBEjuiUWoK5ErmGwVHZevOYbT95L3OqYc+Mn+zPys0SQ7/LZkWz
tWmwRUIBxNnytcHsEP33rPLaOomriqaAfUwUcc7DkuTzdsugoYs6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org