Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          xeQtw8F1bPSUveLSJvWtfkTlmRUAdGxR2Vm3ni4Lwl4=
Subject key identifier:   D7:E8:12:52:2C:83:F9:8A:49:A9:09:59:E8:E1:C8:B9:73:18:58:7C
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       61D62AF64BE43F95B96F3228D307F6A743FAA618
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d6:2a:f6:4b:e4:3f:95:b9:6f:32:28:d3:07:f6:a7:43:fa:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:46:a7:c8:75:f9:64:15:6e:5e:93:86:d9:
                    fd:68:fa:1f:7b:7e:94:5d:4b:9a:fc:4e:0e:18:24:
                    ed:90:9b:51:93:44:61:e0:e5:8b:02:5a:3d:6f:7d:
                    1d:78:9d:6f:dd:79:76:c5:47:ec:f8:61:3a:91:e1:
                    6d:b5:6c:b8:52:15:87:3e:98:97:be:b4:ac:c8:8f:
                    6c:3e:ca:05:7e:7c:e1:24:7d:c4:c7:79:7c:2f:5b:
                    23:d2:bf:16:7f:9a:a0:34:38:e7:79:d0:31:f8:ae:
                    64:89:6e:07:60:84:1e:cb:1f:fb:80:63:2d:d0:0a:
                    9f:38:13:8c:d0:3c:fd:5d:2c:97:bc:f5:70:c6:ce:
                    ac:53:9a:f1:7f:1a:e7:8e:da:25:4e:35:bf:a3:58:
                    b5:51:2c:ec:bb:9d:9d:27:4f:5e:26:dd:10:86:ee:
                    54:6e:64:47:8f:10:99:6b:b1:0a:c0:2c:da:45:46:
                    9e:37:fe:d3:63:88:f4:15:36:91:9f:a3:84:cd:90:
                    98:44:00:81:3c:36:c6:24:bf:fa:57:87:59:36:a9:
                    16:c6:50:bf:8f:1d:5e:8a:d7:2c:ac:93:8c:b7:4a:
                    f0:7b:ae:81:70:46:b3:02:eb:fa:5e:9a:ad:f3:57:
                    33:0b:fb:c0:2b:b7:d8:9d:fb:a2:49:70:de:a2:68:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:12:52:2C:83:F9:8A:49:A9:09:59:E8:E1:C8:B9:73:18:58:7C
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:1a:95:ac:fb:d1:c5:6f:e6:8e:1b:31:de:e9:be:4d:9f:
         49:a9:59:7e:4a:67:4d:d5:95:a0:91:49:44:5c:b6:66:44:8f:
         e3:6d:25:f1:21:d5:5e:13:bd:13:a8:2b:c9:8a:ab:ee:7f:bc:
         08:a2:46:b6:0e:5b:97:ae:7d:3e:7e:52:90:b2:45:1a:58:ee:
         ff:6b:f9:9f:24:40:73:5f:cf:8a:0e:ee:0a:2f:e1:3a:d9:90:
         db:14:42:5c:be:5e:fb:9d:52:2c:2e:be:af:ee:95:4c:03:c8:
         83:f0:74:47:d1:1f:7f:36:20:47:a7:e5:c6:12:ab:5e:c6:c7:
         61:5d:76:d8:62:7f:fe:6b:42:70:ec:b0:65:01:2a:26:8a:02:
         e6:71:40:a1:4d:24:53:22:35:4f:be:85:01:69:0a:e0:65:5d:
         36:fd:2c:9a:20:64:89:65:e8:62:9b:62:c7:75:8b:73:da:c8:
         68:b2:34:30:8d:1e:57:aa:d5:d4:f6:74:c7:00:ee:9c:83:5f:
         8a:57:3a:de:5c:a1:3c:2f:dd:23:39:6d:9e:7d:dc:84:54:f3:
         9a:d3:10:7b:b9:29:9a:f9:b9:7b:d7:a4:ee:40:21:b6:c4:14:
         44:b8:40:b0:d5:ac:8a:b4:39:1c:bf:17:30:90:97:f4:3f:a4:
         89:d4:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org