Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          Em1von5K2j0kpIr/NEuk7xeccVZWJ2oHR8NRN3dBDjE=
Subject key identifier:   49:49:EC:30:73:19:24:7C:F6:61:71:FA:88:0B:CE:A1:40:6E:80:07
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       51A1708BC67EDA07152C8C7FF0EFE82EAA8D89DA
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:42:44 +0000
ROA not before:           Tue 30 Jan 2024 16:37:44 +0000
ROA not after:            Tue 28 Jan 2025 16:42:44 +0000
asID:                     267345
IP address blocks:        2804:4c0c:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:70:8b:c6:7e:da:07:15:2c:8c:7f:f0:ef:e8:2e:aa:8d:89:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:37:44 2024 GMT
            Not After : Jan 28 16:42:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:6d:56:81:4c:b6:4b:e1:35:5b:e2:bc:28:
                    df:b5:7f:ad:93:a9:39:93:5a:3d:d8:a5:9f:bc:c3:
                    3b:ee:ad:ca:66:b1:42:f7:94:1e:9a:e8:ad:9a:35:
                    ce:c1:24:38:31:45:5f:19:af:c7:2e:42:88:ac:4a:
                    22:96:d9:f6:ae:7b:60:a4:a5:eb:03:f3:e3:77:c8:
                    de:a3:0d:2e:dd:d1:9f:a2:ed:7a:15:2f:cc:a9:86:
                    00:ae:67:b0:52:04:e8:72:ba:7c:8e:66:a2:e0:f6:
                    ac:82:b3:1d:4b:7e:03:d4:bb:cb:d3:15:f3:14:75:
                    4a:78:ac:64:9f:d3:45:0f:02:33:c8:a2:ef:33:a5:
                    38:a6:0c:d1:65:29:14:49:c7:07:be:cd:4c:56:c0:
                    81:b1:ce:04:a9:ee:4c:91:51:90:70:d3:56:32:2d:
                    b0:52:fd:2e:42:82:15:46:2a:ba:7d:5b:12:21:5e:
                    5b:aa:cd:9e:5b:de:59:bb:d0:a1:31:14:51:46:03:
                    a1:2a:ce:4d:8c:f0:1c:be:39:08:07:94:51:30:9d:
                    5f:a0:fc:01:93:c8:38:b0:49:85:91:fa:4e:73:bb:
                    ef:4e:1f:90:08:70:ca:a2:87:dc:b7:c1:ea:7f:d2:
                    1d:5e:3f:cb:e8:97:b2:37:44:06:0c:fc:c6:1a:45:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:49:EC:30:73:19:24:7C:F6:61:71:FA:88:0B:CE:A1:40:6E:80:07
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:68:4e:a3:3e:9b:6a:f1:3e:02:0a:b2:4d:b6:da:64:07:b9:
         b1:fd:8c:49:08:4f:e6:81:d6:52:90:30:9d:05:3a:4f:2a:bc:
         c6:72:46:20:57:4f:a1:90:87:c3:2d:d7:80:1f:5a:8c:42:a9:
         d3:2c:ec:51:fd:e8:01:35:0c:a0:5c:bb:b7:ef:55:c4:11:a1:
         a9:89:ff:3d:e1:02:77:3b:d0:7c:ac:14:22:cc:c9:0f:15:97:
         11:0d:cf:b3:e6:4a:2e:8b:b4:4b:11:c0:e4:71:47:06:01:bd:
         91:c0:95:7c:ef:f4:59:4e:e3:37:56:74:1c:71:8d:57:bb:03:
         f0:c7:49:58:0c:16:c3:06:ee:8d:67:ec:d1:34:c1:1d:ee:7d:
         b8:7b:20:0b:9f:f6:6c:35:8d:67:d5:22:0a:e9:cd:fb:9e:0d:
         84:8e:08:5b:b7:8b:fa:dd:2f:7a:5d:8f:e5:6f:1d:4b:23:e7:
         57:75:5e:0d:98:91:2a:bd:5e:a3:59:06:2f:e4:1b:39:cd:38:
         00:4a:88:21:9d:0f:ab:ee:c3:21:56:d8:15:a1:06:bc:26:c3:
         41:19:28:70:07:4a:d6:b4:c8:a8:3a:3b:63:97:eb:db:e4:cd:
         23:bb:c1:98:78:89:ae:ba:02:0f:16:3d:3a:64:3a:e0:b1:ca:
         32:b3:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org