Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f34382d3438203d3e20323637333435.roa
File:                     323830343a346330633a3a2f34382d3438203d3e20323637333435.roa (raw, json)
Hash identifier:          5vELg6k9vWEddKfU5TdaCvQ7XP4nTr2E4yxmCoJeMH0=
Subject key identifier:   D6:D5:2E:09:4C:8A:FE:BF:1E:E3:DB:E1:98:4E:6C:A4:E6:14:24:79
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       08E2F70302B789B8F3EF4F908EBD22F95A3E8985
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f34382d3438203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:53 +0000
ROA not before:           Fri 26 Nov 2021 12:30:53 +0000
ROA not after:            Fri 25 Nov 2022 12:35:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:f7:03:02:b7:89:b8:f3:ef:4f:90:8e:bd:22:f9:5a:3e:89:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:53 2021 GMT
            Not After : Nov 25 12:35:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:14:be:7e:38:b6:71:53:cd:31:58:c0:ce:
                    c4:c9:a8:22:c5:47:8b:89:ee:5f:7d:90:ff:ac:a7:
                    92:4d:78:14:60:9a:20:27:43:83:de:e7:c1:2b:f7:
                    fc:d2:f3:0d:b7:93:9f:de:ce:32:d5:06:be:74:d2:
                    67:1f:56:f2:7c:d1:3b:b4:cb:2d:48:db:07:ba:bb:
                    3c:bb:c2:e7:e8:2c:dc:8a:4f:0f:46:ca:a1:da:11:
                    53:34:86:0e:3e:31:91:41:61:97:80:7a:7a:95:ea:
                    84:4d:22:09:ae:c6:28:14:58:b1:21:f2:5c:dd:8c:
                    ad:a1:dc:f2:94:fb:eb:77:93:b8:79:2d:2f:10:52:
                    a3:da:9e:29:8e:5e:f7:e6:be:d6:e6:82:31:6e:32:
                    78:f6:4b:20:9a:19:55:10:e7:60:96:f9:45:c8:a1:
                    73:dd:4e:49:90:f6:94:82:6f:70:4a:b5:8c:62:85:
                    60:2c:18:fd:61:61:9a:ce:40:94:be:20:e9:5f:43:
                    a0:d8:34:5f:2e:8f:b0:ee:c0:47:bb:56:11:67:cd:
                    32:af:6d:e1:e9:41:95:2b:22:7e:c1:ae:50:69:76:
                    41:ab:2d:de:27:85:d5:6f:7e:2b:17:af:08:65:cf:
                    3e:74:7b:6c:a1:ca:12:71:86:1d:22:fd:91:f7:b5:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:2E:09:4C:8A:FE:BF:1E:E3:DB:E1:98:4E:6C:A4:E6:14:24:79
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a3a2f34382d3438203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:0b:4d:c2:73:23:d9:04:a8:a5:15:56:59:14:51:05:4a:
         55:52:3e:06:71:c9:57:d3:a3:70:e2:f5:be:cf:37:e3:28:49:
         3b:0c:74:a8:f1:72:4d:b2:16:53:83:22:f6:db:8c:fa:d9:fe:
         c5:ae:34:8d:42:22:4b:55:a1:db:39:ba:b3:d6:df:34:33:51:
         05:eb:8c:d4:fc:59:c8:a9:4c:bf:c3:54:6a:b4:03:df:c6:c7:
         e9:da:7e:d0:3e:cc:0b:e2:80:9e:86:87:f4:dd:7f:23:bd:6d:
         0c:12:2e:68:2b:e1:e7:07:94:80:25:b0:6a:b3:78:42:99:00:
         a5:da:6d:dc:f6:ad:0f:fd:d8:53:dc:82:c1:6f:f5:54:3a:63:
         6a:b7:5c:1e:57:fb:aa:f6:d2:14:a2:0f:cf:22:67:ff:a8:36:
         4e:1d:26:ae:fb:a8:63:b5:b3:29:ea:2c:a0:72:63:45:91:71:
         95:3d:08:11:73:54:bd:c3:b3:68:c4:0a:c9:c6:96:a0:06:8a:
         a5:f6:6f:8f:8e:41:41:ef:0e:bf:33:fa:6b:aa:e2:4c:bd:5a:
         5f:fd:42:cc:1b:4d:ec:4f:f1:1f:4b:ac:a1:c9:83:b8:8e:ff:
         a6:2e:f3:a7:bd:66:d1:60:f1:ed:4a:4a:e5:33:fb:1c:44:d5:
         8c:bf:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org