Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          cNE7WdaAxx2RYuUYDwwYgC/3yDQA490Ys+1IdfoMT9I=
Subject key identifier:   85:58:43:AC:5F:E3:F6:7D:FE:F5:4E:42:D9:49:A7:40:3B:B7:5D:43
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       74A7D8BE83A9E25FD894A5A5483EFE819B8F45C4
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:42:14 +0000
ROA not before:           Tue 30 Jan 2024 16:37:14 +0000
ROA not after:            Tue 28 Jan 2025 16:42:14 +0000
asID:                     267345
IP address blocks:        2804:4c0c:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:d8:be:83:a9:e2:5f:d8:94:a5:a5:48:3e:fe:81:9b:8f:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:37:14 2024 GMT
            Not After : Jan 28 16:42:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3e:cf:67:08:26:03:ce:3c:95:a3:0d:b3:d1:
                    8b:45:d5:26:8b:cc:fa:c4:66:5a:4f:d1:2d:08:51:
                    2b:a0:1d:6c:87:0f:2d:1f:c9:e0:fe:66:e3:de:8d:
                    03:ec:21:c5:94:4e:0a:5c:b5:57:78:0b:11:b7:1b:
                    be:4b:27:76:62:ad:45:4f:9c:7c:74:59:12:c9:46:
                    a5:3e:98:cd:2e:b1:59:74:70:7b:5a:ff:31:6b:3f:
                    0a:6c:e5:48:e4:03:0d:93:2f:56:68:a6:0a:3e:13:
                    73:64:73:5e:67:87:a6:5a:10:87:76:6e:c4:80:24:
                    61:63:bd:ed:ec:58:7a:28:c8:3f:8f:b2:bc:30:58:
                    97:e1:c7:89:c0:63:93:73:88:af:25:66:3c:fd:43:
                    13:97:b0:a5:b7:28:0f:f2:81:b4:be:16:6a:f4:85:
                    04:e8:98:26:98:4a:22:22:29:be:9b:7a:ae:80:64:
                    90:bc:ea:12:7f:b5:c1:7a:20:16:d2:08:0a:2f:92:
                    1d:cc:3b:2a:11:fb:5f:62:3e:f6:09:c9:c5:91:4e:
                    ee:a7:a6:fc:ed:eb:f3:1c:b4:ac:e5:13:c7:c9:65:
                    98:d7:9b:08:a6:3e:a9:b8:f2:d4:ae:20:f1:54:96:
                    22:ae:85:26:ee:bc:93:63:83:d5:52:3a:01:e6:c3:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:43:AC:5F:E3:F6:7D:FE:F5:4E:42:D9:49:A7:40:3B:B7:5D:43
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d8:88:09:b6:ff:9a:3f:c2:cf:5e:4c:6d:89:5f:a8:87:44:a3:
         09:0b:76:7d:1c:a2:ba:f7:84:3c:b4:df:0c:d0:da:66:e5:0f:
         64:be:1a:b9:bb:94:b0:e3:13:d4:b8:7c:81:89:fb:e3:f3:d4:
         0b:9e:34:15:28:51:64:8b:c4:0d:63:27:05:56:36:87:8a:e7:
         c1:31:ea:f0:85:71:2a:b0:e5:2b:31:eb:0e:e2:a0:69:60:61:
         bb:52:f9:24:fa:72:95:24:c3:33:76:f7:fc:d0:33:18:3d:bd:
         7e:6d:1d:31:4b:92:69:48:01:23:8f:a7:eb:ef:65:a1:f9:7c:
         85:25:ea:40:cd:02:30:e3:c7:89:81:fc:82:7f:36:d8:37:c6:
         5a:ad:da:ff:7a:cf:7d:a1:6c:b1:bc:2c:ba:ca:57:38:ae:3a:
         49:7e:de:5e:7a:03:45:a2:2c:88:ef:ef:d3:fd:de:99:c8:de:
         f2:ae:79:ba:fd:07:28:56:f8:21:86:34:0f:29:48:0e:69:b4:
         53:b4:5b:80:b7:0c:a2:34:69:31:6a:f2:56:19:6f:c3:c1:77:
         47:53:be:9e:f5:3f:6d:8d:9f:e0:9e:ab:97:32:06:02:0b:89:
         d9:51:de:2c:d1:5c:0d:d1:e4:4e:f3:0c:71:af:c4:0c:da:e6:
         73:e6:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org