Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a313030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a313030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          R6LiWrLSpGtAb6OwPn4WJ/QaHWB/KTIk4HcPHGKFnhs=
Subject key identifier:   C9:0B:DA:C6:68:45:E1:22:5B:60:CE:A4:10:DC:EB:95:04:3C:26:32
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       186E6A9E3731EF9A54DAA8BB45C27CEB4034E058
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a313030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:00 +0000
ROA not before:           Sun 31 Dec 2023 15:39:00 +0000
ROA not after:            Sun 29 Dec 2024 15:44:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:6a:9e:37:31:ef:9a:54:da:a8:bb:45:c2:7c:eb:40:34:e0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:00 2023 GMT
            Not After : Dec 29 15:44:00 2024 GMT
        Subject: CN=3082010A0282010100C953AA0633C4FCFEB98D8D84B6FE8C1057BDBAB7DCF29236266DF8E8573E7306A32B93636FF697751D965D644BA33A773F725DB7C24D3A67B0452DA685A4136BF99315F524B0A2ACCD5A74DCD5171E1F3F77EA713C1D829A7B6FC6216A9564A74A670985E254EB2E2E1300246983FA5BF8738775E7F49042AB3CADCC07FFA9B023F017DC4E30BAD8ABEBD26778277CBFFE82CE2421645FA3324406CFE4A63D0109CA9A802F38C46557DEFDE27950A8F13422158B16397E792F767A7EE4CBB768021C8D292D86F5CB450B3A6D6D35A1A098910044E557A922B52509EFDB4904F6289552526F2CF905F74C2AA1B3B0FA466F611FAA4358BBC27AB20BDD1F0D08CF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:aa:06:33:c4:fc:fe:b9:8d:8d:84:b6:fe:
                    8c:10:57:bd:ba:b7:dc:f2:92:36:26:6d:f8:e8:57:
                    3e:73:06:a3:2b:93:63:6f:f6:97:75:1d:96:5d:64:
                    4b:a3:3a:77:3f:72:5d:b7:c2:4d:3a:67:b0:45:2d:
                    a6:85:a4:13:6b:f9:93:15:f5:24:b0:a2:ac:cd:5a:
                    74:dc:d5:17:1e:1f:3f:77:ea:71:3c:1d:82:9a:7b:
                    6f:c6:21:6a:95:64:a7:4a:67:09:85:e2:54:eb:2e:
                    2e:13:00:24:69:83:fa:5b:f8:73:87:75:e7:f4:90:
                    42:ab:3c:ad:cc:07:ff:a9:b0:23:f0:17:dc:4e:30:
                    ba:d8:ab:eb:d2:67:78:27:7c:bf:fe:82:ce:24:21:
                    64:5f:a3:32:44:06:cf:e4:a6:3d:01:09:ca:9a:80:
                    2f:38:c4:65:57:de:fd:e2:79:50:a8:f1:34:22:15:
                    8b:16:39:7e:79:2f:76:7a:7e:e4:cb:b7:68:02:1c:
                    8d:29:2d:86:f5:cb:45:0b:3a:6d:6d:35:a1:a0:98:
                    91:00:44:e5:57:a9:22:b5:25:09:ef:db:49:04:f6:
                    28:95:52:52:6f:2c:f9:05:f7:4c:2a:a1:b3:b0:fa:
                    46:6f:61:1f:aa:43:58:bb:c2:7a:b2:0b:dd:1f:0d:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:DA:C6:68:45:E1:22:5B:60:CE:A4:10:DC:EB:95:04:3C:26:32
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a313030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:7b:82:04:87:6f:68:41:90:2f:e7:a1:e5:ff:cd:df:c6:
         74:61:d2:84:6f:ec:99:ea:85:ea:c9:58:52:2d:ef:67:a1:57:
         19:29:ca:81:68:c6:3d:a2:71:34:01:cf:f4:3a:f7:40:a0:c1:
         89:50:e9:a2:3c:e9:f2:f3:20:42:f1:89:b8:a2:6e:d5:10:1f:
         3c:78:1b:a4:ca:4f:95:5e:93:d0:18:bd:10:12:c5:a0:e7:07:
         d4:3e:7e:7a:9e:6f:ab:33:a3:49:f3:13:37:53:60:3c:71:60:
         24:e6:9e:6a:7b:da:8d:05:e4:c6:72:39:af:73:c5:cd:08:38:
         70:10:67:65:5c:70:4b:92:da:6c:d9:44:40:0c:0e:f9:be:5f:
         b8:b6:2a:dd:6b:68:71:7c:bd:c0:7b:2e:98:ef:dd:4a:d1:df:
         ae:77:65:df:34:64:e6:1b:6f:d7:0d:ea:8b:d2:31:33:a1:79:
         33:f3:aa:ee:9f:52:77:36:00:3c:92:43:de:07:5d:ab:2e:e4:
         cc:90:4e:c6:92:79:64:67:27:4c:d4:24:d6:cf:7e:bd:61:a6:
         f5:bc:9a:e2:1e:72:54:88:1b:07:ea:4a:97:46:1c:f8:e1:fa:
         96:64:cb:7d:33:35:83:65:6e:09:99:dc:5e:bf:9f:03:a4:34:
         02:6c:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org