Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa (raw, json)
Hash identifier:          G11eFDYDwskS6Z8ZaGdGH6lJrbvQNDEKpBpoUCw8pm0=
Subject key identifier:   DF:35:E9:E0:41:C3:C4:76:5A:8A:4D:B5:BA:D2:FA:05:ED:84:4F:69
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       23B7E4802842B1B1B48904295D11C6351D951F0F
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:01 +0000
ROA not before:           Fri 29 Mar 2024 14:05:01 +0000
ROA not after:            Fri 28 Mar 2025 14:10:01 +0000
asID:                     265175
IP address blocks:        167.249.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b7:e4:80:28:42:b1:b1:b4:89:04:29:5d:11:c6:35:1d:95:1f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:01 2024 GMT
            Not After : Mar 28 14:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:6a:ed:3f:eb:08:67:9d:07:9e:2e:6d:21:
                    27:33:d1:7c:b9:18:fe:1d:57:d0:5e:df:cc:11:c9:
                    bb:ed:8d:0f:a0:83:ff:86:e2:ea:58:1a:a5:3d:9d:
                    0b:c7:cf:c0:e3:83:a0:5c:35:fe:20:7f:f2:32:b0:
                    e6:c8:95:55:fa:aa:b6:db:91:5f:fa:0e:ac:c6:b9:
                    8b:c8:0d:09:98:54:00:5b:2b:f0:c8:7e:38:a2:09:
                    b0:48:d0:e1:08:00:1d:b2:93:b6:6f:19:6e:30:d7:
                    03:48:7c:b9:29:fe:2d:e2:9e:c1:6d:1b:af:96:f4:
                    52:69:96:74:a5:e1:c4:83:3c:9d:61:51:f4:a4:c2:
                    e6:29:c9:bd:87:73:07:63:3a:a7:f3:65:72:0f:bf:
                    2a:c7:e5:80:42:47:6a:53:4f:77:76:1e:b6:9c:98:
                    ce:53:b8:af:fa:03:d9:11:7e:e0:d5:cb:92:b6:66:
                    26:9e:21:34:25:51:6e:3b:c5:eb:b9:e4:2a:ba:76:
                    bc:6b:43:b0:24:0b:da:4e:8a:ce:91:f7:36:7f:5e:
                    40:18:85:a2:d9:48:bb:72:dd:05:3b:81:d5:99:bf:
                    93:5d:84:e0:7a:42:50:61:78:7b:69:ad:34:a8:2e:
                    b2:7c:ce:5e:fa:ac:1c:09:12:e0:38:7c:0b:d3:a9:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:E9:E0:41:C3:C4:76:5A:8A:4D:B5:BA:D2:FA:05:ED:84:4F:69
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:48:e5:1c:e9:da:79:c6:76:0d:69:64:92:ed:86:4e:9f:f5:
         84:99:da:fe:3b:70:d3:bb:fb:93:fd:ef:d6:f0:c5:06:c1:64:
         40:01:2d:f9:ed:50:6c:89:f1:52:1e:4a:b1:7e:a4:e1:a4:b4:
         f2:9d:4f:f9:73:6b:13:ba:9d:1c:4c:1e:ff:ac:8d:c3:49:6f:
         f2:e0:b1:e5:f1:82:71:12:d0:64:3d:64:16:91:63:f3:e4:94:
         1f:7a:c0:ca:bd:65:c0:f4:94:74:a1:2c:8c:37:fa:26:db:09:
         64:57:90:23:68:89:69:37:42:8b:e8:36:7b:8a:ec:12:42:82:
         8e:3f:c0:c4:c8:63:2d:26:bf:e6:e8:47:aa:f8:db:bf:33:48:
         ad:9d:8b:b0:5f:c2:46:8e:c7:51:5f:7d:33:45:91:6c:c2:c3:
         59:90:9b:c8:f1:84:7f:9e:36:00:a9:c7:15:e2:3a:0a:bd:b6:
         7d:61:ca:74:d1:52:80:a3:71:66:fa:70:18:b3:aa:0a:d3:fb:
         85:e5:1b:9f:43:ec:5f:a0:99:71:db:1c:2e:84:dd:60:90:e8:
         8c:c4:51:54:98:33:e3:fe:aa:7d:e6:46:97:d5:80:4b:bf:d3:
         ba:41:f9:85:88:7b:5c:23:24:dc:66:69:c4:85:02:ce:c9:53:
         42:da:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----