Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa (raw, json)
Hash identifier:          9UeggmHmiOGqz5pYXs0ibWwIsLBxyZpB/Ok5DwgbrH0=
Subject key identifier:   C4:26:B9:B4:98:81:D5:1F:E7:40:34:46:98:F8:9C:46:EF:35:35:FD
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       3EF0DF0278D02033893068BE66930236DF7384E8
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:01 +0000
ROA not before:           Fri 29 Mar 2024 14:05:01 +0000
ROA not after:            Fri 28 Mar 2025 14:10:01 +0000
asID:                     265175
IP address blocks:        167.249.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:df:02:78:d0:20:33:89:30:68:be:66:93:02:36:df:73:84:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:01 2024 GMT
            Not After : Mar 28 14:10:01 2025 GMT
        Subject: CN=3082010A0282010100DF7B750B8F10C6A9B1F49E334E0B32FC00A05B83AF0961457033F32F1E00B08B63CE821BEB90CA86C0C2B968B500F14A1BF549899E5B4F68402E3666255AFF099AAE6D009044B0A7A9FEFEAE0168DFEC3B08301EC9BB0144D9ABE8FFE898979E79635B97EA1CB485ED8EEC495F7176D8CE8E4D76D56F079173C2F588D76A5731DAD3F0B886A61DEB8588B258B8503344275F4A964A0AD2FE1023CD0D22AA6CFDFECCA693D24F8A263E66A3A34F5F94448E1556B73AEDC660E249831290E81C6000931352E0857F5A299E1BE9157191AF8ACA55843F20A1AB337AEC79492C96CF30EAE4B331B62CC42C8AB00BB09D413724FE58F0FD2A8985B0550CD77D11F1D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:75:0b:8f:10:c6:a9:b1:f4:9e:33:4e:0b:
                    32:fc:00:a0:5b:83:af:09:61:45:70:33:f3:2f:1e:
                    00:b0:8b:63:ce:82:1b:eb:90:ca:86:c0:c2:b9:68:
                    b5:00:f1:4a:1b:f5:49:89:9e:5b:4f:68:40:2e:36:
                    66:25:5a:ff:09:9a:ae:6d:00:90:44:b0:a7:a9:fe:
                    fe:ae:01:68:df:ec:3b:08:30:1e:c9:bb:01:44:d9:
                    ab:e8:ff:e8:98:97:9e:79:63:5b:97:ea:1c:b4:85:
                    ed:8e:ec:49:5f:71:76:d8:ce:8e:4d:76:d5:6f:07:
                    91:73:c2:f5:88:d7:6a:57:31:da:d3:f0:b8:86:a6:
                    1d:eb:85:88:b2:58:b8:50:33:44:27:5f:4a:96:4a:
                    0a:d2:fe:10:23:cd:0d:22:aa:6c:fd:fe:cc:a6:93:
                    d2:4f:8a:26:3e:66:a3:a3:4f:5f:94:44:8e:15:56:
                    b7:3a:ed:c6:60:e2:49:83:12:90:e8:1c:60:00:93:
                    13:52:e0:85:7f:5a:29:9e:1b:e9:15:71:91:af:8a:
                    ca:55:84:3f:20:a1:ab:33:7a:ec:79:49:2c:96:cf:
                    30:ea:e4:b3:31:b6:2c:c4:2c:8a:b0:0b:b0:9d:41:
                    37:24:fe:58:f0:fd:2a:89:85:b0:55:0c:d7:7d:11:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:B9:B4:98:81:D5:1F:E7:40:34:46:98:F8:9C:46:EF:35:35:FD
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:58:00:c0:5b:66:0d:5f:c9:eb:70:42:35:90:fe:3a:e7:
         c7:8d:17:c3:dd:2b:a4:cb:e5:38:73:a3:0b:aa:df:f8:11:a2:
         61:c4:e8:e9:d6:f3:28:19:6b:0c:7c:29:c4:78:82:92:8e:02:
         a3:3b:31:61:85:02:38:d4:a4:7a:fc:21:69:23:07:32:d7:ad:
         8d:bc:f5:2a:c1:c1:c5:e2:bc:c5:56:84:22:c7:9c:c2:ff:70:
         c3:b9:f0:14:23:73:b4:b5:89:c2:e9:e6:a7:b0:03:43:ed:cb:
         ea:9b:b5:96:65:3f:44:45:32:94:52:73:02:d8:fc:c3:45:ea:
         8d:2a:e4:41:e2:09:17:ee:c8:6c:e1:02:df:8e:bf:9d:07:c4:
         6c:92:03:5d:80:33:e3:dd:2d:aa:56:ac:a6:25:3d:2d:6d:df:
         51:85:55:18:5d:af:48:ae:b6:96:c0:95:40:2d:51:a2:1f:14:
         9e:1e:ce:62:a1:32:00:cb:d5:40:43:36:e4:ff:bc:a5:9b:e0:
         6c:13:f0:2f:d0:f6:97:1d:1c:61:3c:24:0d:f6:d6:f1:8f:29:
         a5:05:00:d5:c8:7d:74:e5:86:4f:21:b3:9e:45:7f:c1:80:93:
         09:78:f5:be:4a:e5:71:61:c1:c5:c4:78:17:df:f0:dc:c1:49:
         6a:a3:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org