Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          k/K3x1jolaKfHmjMLnwr+xZTzaQA5v/7F6zVPOkmATk=
Subject key identifier:   6F:04:5B:E9:56:91:74:A3:D2:D5:3D:28:08:42:6D:66:14:3C:94:3D
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       783B7CECE65E141EFB4EF5DBCD79411B8BE7238C
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:41:37 +0000
ROA not before:           Tue 30 Jan 2024 16:36:37 +0000
ROA not after:            Tue 28 Jan 2025 16:41:37 +0000
asID:                     267345
IP address blocks:        2804:4c0c:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:7c:ec:e6:5e:14:1e:fb:4e:f5:db:cd:79:41:1b:8b:e7:23:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:36:37 2024 GMT
            Not After : Jan 28 16:41:37 2025 GMT
        Subject: CN=3082010A0282010100D0A2CD581D74A083A10A1236F9C099A487F5994B4DBA99E8306859B1EEEEEF40AF58DBB9C8BCE24AE253061329B42B46BB1D7F753798BB9F8DE8FE3839AA2F93EA81A9200125A385B8F82D812233DCC5DB04F77A0AE73B3C9FDE7A5B8C9ABEF9F9E8E83B615CF4025115A78A7C9D66ECFB9509B25062451362CF63FBAAFEDF82B67E5B4B9232AA4494DEB589B499DB8CD1B8523821627433A3DFA076F63E2BE6943E9F02CFF153B9B14AD8B72524EBA4CFB6BF54E712147AB3DE1D35E28A97A2D3B9EADFDFC61FBAAFE191367EA967991C7619F0774C953F981F246FB6C3A1D72DF346A7536CF0D94BAB3661DE8D14B4637FC1E4040466C0E9479E5DDDB6EC970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:cd:58:1d:74:a0:83:a1:0a:12:36:f9:c0:
                    99:a4:87:f5:99:4b:4d:ba:99:e8:30:68:59:b1:ee:
                    ee:ef:40:af:58:db:b9:c8:bc:e2:4a:e2:53:06:13:
                    29:b4:2b:46:bb:1d:7f:75:37:98:bb:9f:8d:e8:fe:
                    38:39:aa:2f:93:ea:81:a9:20:01:25:a3:85:b8:f8:
                    2d:81:22:33:dc:c5:db:04:f7:7a:0a:e7:3b:3c:9f:
                    de:7a:5b:8c:9a:be:f9:f9:e8:e8:3b:61:5c:f4:02:
                    51:15:a7:8a:7c:9d:66:ec:fb:95:09:b2:50:62:45:
                    13:62:cf:63:fb:aa:fe:df:82:b6:7e:5b:4b:92:32:
                    aa:44:94:de:b5:89:b4:99:db:8c:d1:b8:52:38:21:
                    62:74:33:a3:df:a0:76:f6:3e:2b:e6:94:3e:9f:02:
                    cf:f1:53:b9:b1:4a:d8:b7:25:24:eb:a4:cf:b6:bf:
                    54:e7:12:14:7a:b3:de:1d:35:e2:8a:97:a2:d3:b9:
                    ea:df:df:c6:1f:ba:af:e1:91:36:7e:a9:67:99:1c:
                    76:19:f0:77:4c:95:3f:98:1f:24:6f:b6:c3:a1:d7:
                    2d:f3:46:a7:53:6c:f0:d9:4b:ab:36:61:de:8d:14:
                    b4:63:7f:c1:e4:04:04:66:c0:e9:47:9e:5d:dd:b6:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:5B:E9:56:91:74:A3:D2:D5:3D:28:08:42:6D:66:14:3C:94:3D
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:6b:3e:49:1a:43:5f:7e:b9:85:2b:75:39:e5:5e:1e:5a:
         80:f3:a8:3b:f1:58:3b:2a:b2:f0:e9:fd:f7:af:92:3f:dc:5c:
         4a:a4:ef:40:b2:67:61:4e:a3:8d:6f:6b:5c:f5:a8:27:e7:29:
         66:f2:1f:f7:96:24:a0:28:c3:cb:83:2f:07:3c:d2:6d:a7:30:
         97:48:22:09:38:ea:ff:ac:38:b0:5c:75:22:7c:8e:55:5e:84:
         fd:72:5d:82:27:e0:c3:91:84:b5:00:74:67:95:62:cd:f9:23:
         59:eb:b6:2f:25:34:00:80:bf:d1:2b:3b:10:54:64:90:92:12:
         a9:14:88:fe:39:bf:85:77:fd:19:e4:64:7a:0c:7f:68:1f:81:
         43:cc:64:73:19:ff:73:dd:ce:6a:2e:3b:67:d4:b3:9a:9c:f9:
         6d:0c:b5:c9:ed:f3:37:17:11:80:c8:49:a5:d9:d2:87:3f:63:
         74:c5:46:94:8e:f7:ef:5e:00:bf:ec:4d:cc:5f:cb:24:f8:ee:
         1b:6b:79:2d:fc:bd:09:0d:49:67:7a:0a:ce:de:f2:a9:25:c8:
         63:d2:10:5d:30:56:0a:d2:fa:90:76:17:50:c9:b8:da:a4:58:
         0e:51:77:37:2b:0b:a4:eb:b4:36:46:c5:52:f0:fd:0f:da:ff:
         b8:b1:ba:fc
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUeDt87OZeFB77TvXbzXlBG4vnI4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjM2MzdaFw0yNTAxMjgxNjQxMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBBMkNENTgxRDc0QTA4M0Ex
MEExMjM2RjlDMDk5QTQ4N0Y1OTk0QjREQkE5OUU4MzA2ODU5QjFFRUVFRUY0MEFG
NThEQkI5QzhCQ0UyNEFFMjUzMDYxMzI5QjQyQjQ2QkIxRDdGNzUzNzk4QkI5RjhE
RThGRTM4MzlBQTJGOTNFQTgxQTkyMDAxMjVBMzg1QjhGODJEODEyMjMzRENDNURC
MDRGNzdBMEFFNzNCM0M5RkRFN0E1QjhDOUFCRUY5RjlFOEU4M0I2MTVDRjQwMjUx
MTVBNzhBN0M5RDY2RUNGQjk1MDlCMjUwNjI0NTEzNjJDRjYzRkJBQUZFREY4MkI2
N0U1QjRCOTIzMkFBNDQ5NERFQjU4OUI0OTlEQjhDRDFCODUyMzgyMTYyNzQzM0Ez
REZBMDc2RjYzRTJCRTY5NDNFOUYwMkNGRjE1M0I5QjE0QUQ4QjcyNTI0RUJBNENG
QjZCRjU0RTcxMjE0N0FCM0RFMUQzNUUyOEE5N0EyRDNCOUVBREZERkM2MUZCQUFG
RTE5MTM2N0VBOTY3OTkxQzc2MTlGMDc3NEM5NTNGOTgxRjI0NkZCNkMzQTFENzJE
RjM0NkE3NTM2Q0YwRDk0QkFCMzY2MURFOEQxNEI0NjM3RkMxRTQwNDA0NjZDMEU5
NDc5RTVERERCNkVDOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0KLNWB10oIOhChI2+cCZpIf1mUtNupnoMGhZse7u70CvWNu5yLzi
SuJTBhMptCtGux1/dTeYu5+N6P44Oaovk+qBqSABJaOFuPgtgSIz3MXbBPd6Cuc7
PJ/eeluMmr75+ejoO2Fc9AJRFaeKfJ1m7PuVCbJQYkUTYs9j+6r+34K2fltLkjKq
RJTetYm0mduM0bhSOCFidDOj36B29j4r5pQ+nwLP8VO5sUrYtyUk66TPtr9U5xIU
erPeHTXiipei07nq39/GH7qv4ZE2fqlnmRx2GfB3TJU/mB8kb7bDodct80anU2zw
2UurNmHejRS0Y3/B5AQEZsDpR55d3bbslwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FG8EW+lWkXSj0tU9KAhCbWYUPJQ9MB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
NjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMoDANBgkqhkiG9w0BAQsFAAOCAQEAL1RrPkkaQ19+uYUrdTnl
Xh5agPOoO/FYOyqy8On996+SP9xcSqTvQLJnYU6jjW9rXPWoJ+cpZvIf95YkoCjD
y4MvBzzSbacwl0giCTjq/6w4sFx1InyOVV6E/XJdgifgw5GEtQB0Z5VizfkjWeu2
LyU0AIC/0Ss7EFRkkJISqRSI/jm/hXf9GeRkegx/aB+BQ8xkcxn/c93Oai47Z9Sz
mpz5bQy1ye3zNxcRgMhJpdnShz9jdMVGlI73714Av+xNzF/LJPjuG2t5Lfy9CQ1J
Z3oKzt7yqSXIY9IQXTBWCtL6kHYXUMm42qRYDlF3NysLpOu0NkbFUvD9D9r/uLG6
/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org