Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          0tLmhKi4FEsxqEx5067PqF0OINB8hNZ7y0o1+7T0Q54=
Subject key identifier:   6A:16:F8:16:8C:13:FF:42:30:7C:0E:22:81:CF:6A:F8:EE:90:62:09
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       4E17E1618C47DECCA815E2E5A82057038E55D57E
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:42:28 +0000
ROA not before:           Tue 30 Jan 2024 16:37:28 +0000
ROA not after:            Tue 28 Jan 2025 16:42:28 +0000
asID:                     267345
IP address blocks:        2804:4c0c:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:17:e1:61:8c:47:de:cc:a8:15:e2:e5:a8:20:57:03:8e:55:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:37:28 2024 GMT
            Not After : Jan 28 16:42:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:79:8b:8b:b1:47:1e:0e:3e:d8:da:66:ec:
                    f5:97:f3:88:34:d8:fb:46:58:69:55:dd:b7:11:6e:
                    6b:a8:98:27:4d:fb:da:d2:67:7b:36:f3:b1:e4:e4:
                    5a:0a:a4:75:53:c6:3b:35:66:1f:34:43:bc:a3:3c:
                    62:29:06:cf:79:1f:1d:be:57:ca:ef:26:57:89:d0:
                    2f:74:c7:7f:55:a9:f1:9e:a7:3e:20:d8:f8:60:a3:
                    25:fe:e3:2c:91:73:16:fb:e0:54:e7:3a:c3:9a:28:
                    73:54:e3:2b:30:72:05:a6:13:6e:3b:97:63:99:e3:
                    bd:40:41:bf:b5:27:09:d7:ce:4e:14:7f:3c:26:e3:
                    f7:23:10:a2:7e:cf:c3:08:c1:9c:55:0b:8c:52:4c:
                    51:8e:91:28:7e:ce:c2:62:4e:ef:ce:24:4d:51:fc:
                    e4:81:19:d7:98:47:d9:5c:3f:8f:11:1a:27:d1:ea:
                    c0:fe:b5:2a:c6:5a:ba:b4:18:0d:ef:4c:fb:be:c1:
                    96:f7:ad:b0:88:04:e4:90:dc:4a:1c:59:c6:34:56:
                    21:b3:87:3e:53:1c:9f:a2:c9:89:f6:dc:32:0b:90:
                    64:41:f9:5b:ea:e9:2e:62:56:bd:fa:03:16:3c:16:
                    cf:a9:7f:29:01:3b:80:26:68:17:da:77:35:1c:25:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:F8:16:8C:13:FF:42:30:7C:0E:22:81:CF:6A:F8:EE:90:62:09
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:96:b2:87:b4:6d:da:3f:fc:d1:95:d7:04:fe:a2:5c:c7:
         a1:73:9b:55:e9:d3:6a:ca:7e:d8:18:8b:9b:a1:d4:26:3e:20:
         a0:a5:65:e5:fd:7f:4b:7d:24:85:56:78:be:f8:cb:46:7c:33:
         9f:ee:d2:6c:8e:e8:e7:51:0c:71:ca:e0:bb:b8:47:43:62:1e:
         be:2e:1b:cc:ae:c5:0c:ed:0d:56:81:49:ba:4e:66:4d:df:2b:
         f7:8d:c9:c0:0b:99:68:7b:45:b3:b3:f9:74:7b:ac:d7:dc:4a:
         6a:3c:3a:ff:0a:3a:c7:24:da:f3:13:ae:90:5b:96:2e:ad:84:
         8a:c8:1e:b5:07:56:72:e0:3a:a5:1c:7e:60:29:0f:30:af:b2:
         72:00:2d:7b:15:2b:9c:c0:40:fe:50:e3:91:9b:24:38:3b:a6:
         19:87:3d:ad:f6:14:8f:b3:9b:f2:0e:ce:02:54:df:44:14:53:
         0c:4e:53:ab:7b:79:7e:27:00:94:47:06:a5:5b:c5:f0:92:42:
         50:82:21:97:88:4b:1b:bd:da:b7:e1:d1:0f:9b:d6:88:1c:14:
         03:3d:12:e8:2e:17:ee:34:46:b9:f4:f8:e7:51:b9:1b:ac:c0:
         15:c5:8f:81:3d:9e:7d:cb:d6:ef:68:9b:b3:2d:1d:6b:81:72:
         65:9f:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org