Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          exquShMXNaAIlr0kcalw+1mrfeG31jsrH4XoE8ImBwY=
Subject key identifier:   EA:78:B6:4F:14:C7:64:10:59:29:9E:8B:7E:AA:E8:2D:6E:8A:1E:90
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       64714D67AADE2BAE3303C50DAD1043881FE79889
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:42:00 +0000
ROA not before:           Tue 30 Jan 2024 16:37:00 +0000
ROA not after:            Tue 28 Jan 2025 16:42:00 +0000
asID:                     267345
IP address blocks:        2804:4c0c:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:4d:67:aa:de:2b:ae:33:03:c5:0d:ad:10:43:88:1f:e7:98:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:37:00 2024 GMT
            Not After : Jan 28 16:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:99:75:3f:3e:21:48:fe:be:10:84:30:1c:
                    08:14:79:38:51:df:54:14:d7:49:02:e1:eb:a5:4c:
                    d6:84:3c:6f:44:0e:b6:91:a2:dd:7a:ff:23:cb:f2:
                    3a:92:37:b6:b2:60:7e:40:f7:36:b8:8c:b0:ef:0a:
                    2c:d4:df:ab:d5:30:cf:3a:b1:d9:72:00:55:cd:b0:
                    5d:a2:ee:1e:4d:53:ee:c9:39:72:21:4f:8c:3c:a9:
                    a6:b3:55:f5:f4:6e:da:af:83:02:f9:cb:30:c9:8d:
                    72:4f:96:be:a3:28:6d:a9:a0:4c:59:ad:e0:41:04:
                    66:5a:15:d0:90:da:40:ca:8d:a4:e8:2b:57:4d:3d:
                    dc:cb:15:43:71:c5:ff:0b:80:58:36:84:51:02:09:
                    de:a7:1e:e5:85:4c:13:c0:37:e6:1f:11:2f:df:90:
                    b7:40:c6:4e:14:64:78:fa:9d:cd:63:fb:ac:3e:5b:
                    6a:3a:27:f0:bd:e2:e8:fa:63:b9:32:be:40:49:4b:
                    c9:49:a0:38:ea:fa:fb:c7:10:2f:fd:96:09:29:22:
                    c8:b2:7b:df:7c:37:74:5e:5a:d9:1a:d8:f0:15:64:
                    f5:28:7e:dd:8b:b7:db:ac:b9:ca:76:36:d6:6d:18:
                    f1:dd:75:7f:b0:56:be:c4:f5:46:a8:58:45:f6:ab:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:78:B6:4F:14:C7:64:10:59:29:9E:8B:7E:AA:E8:2D:6E:8A:1E:90
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:68:51:dd:d4:d0:86:83:fd:29:c8:f2:6f:c7:33:10:e5:
         d3:b8:16:ce:6c:10:df:84:d6:cd:04:c1:f4:79:00:a5:45:c1:
         12:61:50:6e:5e:35:c3:e8:7f:db:2b:8d:e6:65:2c:6c:ea:ba:
         e6:ef:e2:14:d8:a6:8e:bc:2c:44:48:00:ec:90:d1:80:02:51:
         1e:c6:c0:c1:d5:21:60:07:da:71:3b:bd:a4:a6:4b:87:89:fd:
         e1:8e:8a:d1:af:0e:cd:7a:2a:10:1d:d9:3e:78:70:e3:c9:eb:
         c1:93:04:0f:de:d2:b9:38:94:c0:d7:27:43:94:ff:e7:f1:20:
         8f:a3:c4:b1:fd:f7:27:b2:4c:0c:f0:a6:0d:ef:c0:93:aa:40:
         c7:39:ac:8a:c0:dc:17:a4:4f:41:d0:02:92:d8:d6:e9:12:b5:
         e1:f9:1c:03:8e:30:c4:70:74:b4:cd:93:fe:33:d2:54:c5:85:
         21:2e:17:34:ed:41:b4:4d:47:31:82:94:24:6d:1c:c1:da:36:
         a0:83:4a:f5:d2:34:1b:bb:03:02:08:3b:ce:29:59:32:2f:d0:
         9b:56:7b:72:ec:ba:14:14:8a:44:4b:22:89:99:a1:96:79:d0:
         e4:db:40:bc:70:b3:bd:5a:28:6e:61:d2:3e:ef:52:9a:52:b8:
         e2:2c:fa:63
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUZHFNZ6reK64zA8UNrRBDiB/nmIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjM3MDBaFw0yNTAxMjgxNjQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U2NTk5NzUzRjNFMjE0OEZF
QkUxMDg0MzAxQzA4MTQ3OTM4NTFERjU0MTRENzQ5MDJFMUVCQTU0Q0Q2ODQzQzZG
NDQwRUI2OTFBMkREN0FGRjIzQ0JGMjNBOTIzN0I2QjI2MDdFNDBGNzM2Qjg4Q0Iw
RUYwQTJDRDRERkFCRDUzMENGM0FCMUQ5NzIwMDU1Q0RCMDVEQTJFRTFFNEQ1M0VF
QzkzOTcyMjE0RjhDM0NBOUE2QjM1NUY1RjQ2RURBQUY4MzAyRjlDQjMwQzk4RDcy
NEY5NkJFQTMyODZEQTlBMDRDNTlBREUwNDEwNDY2NUExNUQwOTBEQTQwQ0E4REE0
RTgyQjU3NEQzRERDQ0IxNTQzNzFDNUZGMEI4MDU4MzY4NDUxMDIwOURFQTcxRUU1
ODU0QzEzQzAzN0U2MUYxMTJGREY5MEI3NDBDNjRFMTQ2NDc4RkE5RENENjNGQkFD
M0U1QjZBM0EyN0YwQkRFMkU4RkE2M0I5MzJCRTQwNDk0QkM5NDlBMDM4RUFGQUZC
QzcxMDJGRkQ5NjA5MjkyMkM4QjI3QkRGN0MzNzc0NUU1QUQ5MUFEOEYwMTU2NEY1
Mjg3RUREOEJCN0RCQUNCOUNBNzYzNkQ2NkQxOEYxREQ3NTdGQjA1NkJFQzRGNTQ2
QTg1ODQ1RjZBQjlGMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzmWZdT8+IUj+vhCEMBwIFHk4Ud9UFNdJAuHrpUzWhDxvRA62kaLd
ev8jy/I6kje2smB+QPc2uIyw7wos1N+r1TDPOrHZcgBVzbBdou4eTVPuyTlyIU+M
PKmms1X19G7ar4MC+cswyY1yT5a+oyhtqaBMWa3gQQRmWhXQkNpAyo2k6CtXTT3c
yxVDccX/C4BYNoRRAgnepx7lhUwTwDfmHxEv35C3QMZOFGR4+p3NY/usPltqOifw
veLo+mO5Mr5ASUvJSaA46vr7xxAv/ZYJKSLIsnvffDd0XlrZGtjwFWT1KH7di7fb
rLnKdjbWbRjx3XV/sFa+xPVGqFhF9qufJwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOp4tk8Ux2QQWSmei36q6C1uih6QMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
NjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMwDANBgkqhkiG9w0BAQsFAAOCAQEAWHtoUd3U0IaD/SnI8m/H
MxDl07gWzmwQ34TWzQTB9HkApUXBEmFQbl41w+h/2yuN5mUsbOq65u/iFNimjrws
REgA7JDRgAJRHsbAwdUhYAfacTu9pKZLh4n94Y6K0a8OzXoqEB3ZPnhw48nrwZME
D97SuTiUwNcnQ5T/5/Egj6PEsf33J7JMDPCmDe/Ak6pAxzmsisDcF6RPQdACktjW
6RK14fkcA44wxHB0tM2T/jPSVMWFIS4XNO1BtE1HMYKUJG0cwdo2oINK9dI0G7sD
Agg7zilZMi/Qm1Z7cuy6FBSKREsiiZmhlnnQ5NtAvHCzvVoobmHSPu9SmlK44iz6
Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org