Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          GqnenesUBZexEu07zbkQOYoaSGekLolyTq2H2urk45U=
Subject key identifier:   B5:2F:2B:BD:66:8A:8C:C4:E4:B6:BD:E0:B0:9D:F8:3A:A4:7F:32:98
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2A1AFBB99DE0BE2B0A2A4ED970B23E624AD3EA66
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:41:48 +0000
ROA not before:           Tue 30 Jan 2024 16:36:48 +0000
ROA not after:            Tue 28 Jan 2025 16:41:48 +0000
asID:                     267345
IP address blocks:        2804:4c0c:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:fb:b9:9d:e0:be:2b:0a:2a:4e:d9:70:b2:3e:62:4a:d3:ea:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:36:48 2024 GMT
            Not After : Jan 28 16:41:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:1e:bd:ea:e3:44:34:1f:8b:40:82:d7:b2:
                    13:05:46:c8:00:cd:a0:6a:5d:da:86:46:29:e4:d3:
                    be:eb:ae:69:6a:f3:4e:5d:c4:3b:ad:1b:70:e5:2a:
                    b2:3d:0e:ff:1d:68:8c:82:22:31:d7:51:da:2f:39:
                    7b:55:e7:b7:69:40:f9:43:55:ca:72:ff:f2:34:66:
                    a0:44:bd:76:4a:65:c5:c8:8e:3c:8c:5d:39:c8:0c:
                    bb:77:04:ed:e6:02:3d:5a:a9:43:be:f8:6d:1e:b1:
                    b1:f8:e1:96:45:6e:1a:20:6d:ea:2f:d1:34:6b:49:
                    ac:09:cc:6b:c7:5b:c2:3b:de:3a:62:4d:1e:26:c9:
                    1e:d6:08:ce:51:83:11:1f:66:8c:2b:0d:a4:56:82:
                    e7:19:72:43:e1:ab:f3:35:1e:ef:04:b0:8a:17:c0:
                    79:eb:16:50:e8:a4:69:3e:91:be:ef:3f:df:fe:3d:
                    88:fa:b3:94:72:5a:e7:19:d0:4a:56:e5:a0:4f:7e:
                    ed:2f:35:94:89:9e:06:15:e2:12:f6:04:b3:ac:b1:
                    cb:ca:da:5f:36:ef:25:b0:f1:7b:31:8e:39:67:72:
                    5e:8e:13:b3:1c:f8:f1:4d:d1:ef:a5:37:98:a7:0b:
                    c1:d8:06:2e:7e:67:92:d2:ff:fe:6b:14:49:17:5d:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2F:2B:BD:66:8A:8C:C4:E4:B6:BD:E0:B0:9D:F8:3A:A4:7F:32:98
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:e7:9a:6d:7b:b8:24:fd:d2:73:fd:73:f4:7e:ca:bb:bb:
         97:19:59:23:01:fa:a1:ee:ac:7a:0b:41:13:18:e4:3d:90:59:
         6b:96:6e:dd:50:09:12:5f:5f:b6:35:56:66:2a:83:57:7d:7f:
         41:58:de:e4:3a:be:7e:5b:bf:bf:81:4d:90:95:d9:03:1a:2d:
         0c:3e:63:0b:59:fc:b1:c1:71:21:e8:5f:51:55:eb:eb:6c:9b:
         10:e6:70:9a:97:65:1c:c2:dd:38:f9:2b:98:6e:af:35:4c:a5:
         72:60:86:69:6b:08:3a:a1:51:9b:bf:a6:e7:e0:a7:3e:ec:90:
         b7:68:04:28:a0:a3:af:03:0c:59:ee:a1:b5:4e:62:42:fc:3e:
         f2:44:19:3a:e0:71:34:7c:c2:d6:33:35:43:f4:17:cf:78:10:
         e0:eb:ac:d4:c1:a9:1e:31:96:0f:cd:a0:52:29:90:18:97:ba:
         50:17:73:be:89:bb:2c:68:84:6b:0c:0e:b0:0e:03:ca:39:00:
         0c:4e:5a:05:6f:a4:f0:1b:a5:ac:5d:ea:04:07:c4:10:77:aa:
         4f:d2:a6:e4:db:d1:da:b9:db:35:59:bb:85:e1:ca:4c:bf:28:
         d2:1c:64:f2:e5:28:5e:80:6a:a7:52:99:ca:84:fc:29:5d:23:
         e1:a7:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org