Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33342d3334203d3e20323637333435.roa
File:                     323830343a346330633a633030303a3a2f33342d3334203d3e20323637333435.roa (raw, json)
Hash identifier:          vlnWfzafjq+RXHsa5E8GdrW5Qw8igtOGiOREPYKrDpE=
Subject key identifier:   28:9B:5E:F8:8E:5F:F0:34:4C:00:99:24:AF:D7:DE:E2:E9:10:D9:60
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       1E6C7481B7F7ACC020306EEF5DE11274EE4FC27A
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33342d3334203d3e20323637333435.roa
Signing time:             Fri 26 Nov 2021 12:35:54 +0000
ROA not before:           Fri 26 Nov 2021 12:30:54 +0000
ROA not after:            Fri 25 Nov 2022 12:35:54 +0000
asID:                     267345
IP address blocks:        2804:4c0c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6c:74:81:b7:f7:ac:c0:20:30:6e:ef:5d:e1:12:74:ee:4f:c2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Nov 26 12:30:54 2021 GMT
            Not After : Nov 25 12:35:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:75:f1:02:64:be:88:5f:aa:6d:84:d9:55:
                    9f:ba:c5:37:c6:e7:96:1d:fa:e4:27:fa:c7:48:f8:
                    86:22:10:88:c6:1e:4c:2f:a7:5a:7a:96:89:47:f5:
                    4a:3a:88:8f:39:d7:6e:c1:fd:5f:95:ca:f9:0c:20:
                    73:c9:b3:75:0e:b6:21:e2:17:c9:24:8c:b9:d5:01:
                    32:05:2c:bf:8d:f3:f7:8c:42:c9:9e:f2:42:d0:d9:
                    33:ff:c6:cc:3e:d5:25:8f:4e:6e:5d:8c:c5:a1:cd:
                    38:a7:1d:de:4c:2e:5f:2f:08:1a:f7:07:cf:3f:6a:
                    30:23:65:18:83:1a:1b:1c:ba:07:03:ce:62:b1:2e:
                    9c:b4:3c:86:50:88:1d:6f:d3:93:32:83:79:79:80:
                    c2:9d:1b:b7:d6:eb:b1:bd:4b:c1:d5:0b:f0:e0:9b:
                    36:23:19:bf:07:fb:a6:ab:0a:4e:26:a3:a5:7a:05:
                    1b:97:89:f4:14:65:d6:e5:ff:02:0f:ad:11:af:03:
                    40:b1:f2:13:f6:07:5e:36:bf:66:83:2e:78:52:0d:
                    ad:cc:4d:a9:2d:68:9d:95:68:1d:87:89:50:f3:c1:
                    0a:75:46:c6:68:40:34:75:d5:21:bf:50:e8:b6:73:
                    c9:fd:38:63:4e:8b:06:3b:27:56:de:ae:4d:83:47:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:5E:F8:8E:5F:F0:34:4C:00:99:24:AF:D7:DE:E2:E9:10:D9:60
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33342d3334203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:fa:75:63:7f:28:c2:ed:fc:0a:1e:4f:21:09:8f:81:be:
         b2:ba:3a:0e:26:b0:11:bd:78:eb:00:d1:6f:85:72:74:45:d2:
         ae:13:5b:89:dc:a4:5f:7c:0f:51:02:72:e5:97:91:eb:c9:31:
         6a:b3:92:76:1a:ae:43:80:db:61:3e:07:e3:63:10:0c:e2:33:
         08:bb:d7:4c:72:e5:95:54:dc:e7:e1:73:4e:d2:93:a5:44:64:
         c6:57:ca:85:6b:38:2b:bc:f4:e1:cd:4c:93:33:e3:2a:48:ef:
         dc:30:69:0b:5d:96:ff:f7:b9:b6:df:82:9a:c2:5a:04:37:18:
         bd:c1:fb:36:40:3c:35:d4:94:08:8c:2a:14:08:68:d3:26:78:
         94:95:1c:2f:81:0a:24:3d:8a:34:f1:1e:44:04:0f:a2:0e:44:
         6a:95:3f:d3:84:6c:21:e2:7b:5e:81:02:8c:74:28:25:6b:a3:
         19:2f:41:13:37:30:b4:73:2d:8e:ec:37:5e:df:bf:ac:5f:0b:
         69:70:4a:5b:05:6a:ea:bd:3a:03:55:27:72:78:bc:cf:db:6b:
         f4:c0:d0:8b:fa:f6:eb:6a:c2:4e:ac:90:cc:1f:10:7c:cd:cf:
         c1:6c:53:99:27:56:d4:b9:88:91:e2:45:3b:02:af:45:01:5e:
         78:18:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org