Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          TuhmmMScZiqI97CBxBa9HhykQyv+g0HwwqzUcrtM8Sg=
Subject key identifier:   AF:F9:32:6C:FA:D8:2B:D0:C0:F4:8C:4B:F9:B9:A1:32:0F:4B:71:2F
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       1CE16522384EB56D1B7A5569DA0D880294012617
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:00 +0000
ROA not before:           Fri 29 Mar 2024 14:05:00 +0000
ROA not after:            Fri 28 Mar 2025 14:10:00 +0000
asID:                     265175
IP address blocks:        167.249.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:65:22:38:4e:b5:6d:1b:7a:55:69:da:0d:88:02:94:01:26:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:00 2024 GMT
            Not After : Mar 28 14:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:04:ef:b4:c0:98:01:65:8a:df:27:aa:4e:
                    36:f0:21:5c:cd:b8:eb:e8:c8:1c:05:a1:a4:23:54:
                    31:c6:fe:c3:1a:ef:a0:a7:d1:da:23:26:08:f5:cd:
                    b4:4b:03:63:42:3f:f6:5b:ec:bd:87:2d:24:de:38:
                    b0:f6:5d:c3:20:18:cd:1d:37:7c:45:87:08:c1:e3:
                    88:97:ad:c0:bb:88:62:21:35:9a:82:ff:b7:f7:27:
                    9b:c8:fe:e8:96:2d:e4:25:d9:5e:96:68:f9:01:72:
                    d1:fd:06:7f:15:f7:dc:64:66:e2:46:30:c5:6a:c2:
                    24:c1:e1:90:83:c4:8a:66:85:1f:7f:eb:5c:e5:89:
                    03:ea:11:0a:d7:ca:fa:df:dd:f2:1e:6e:a7:39:4f:
                    19:d2:0f:a9:10:21:65:0a:c5:09:75:93:28:07:d2:
                    ad:bb:c4:a1:bb:11:7f:26:23:d2:10:3f:ba:fd:d0:
                    9b:1e:2f:b2:80:20:3c:d6:b9:47:d6:d3:7f:32:85:
                    a6:80:49:67:d1:b6:ad:39:12:db:46:5e:45:2e:83:
                    64:c0:54:2d:93:f0:ee:a8:77:ed:aa:75:47:2d:20:
                    e6:61:75:22:ce:48:af:08:7e:29:ca:dc:bc:14:20:
                    8c:d0:4e:e7:9a:28:19:3e:ba:f9:82:60:b6:50:80:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:32:6C:FA:D8:2B:D0:C0:F4:8C:4B:F9:B9:A1:32:0F:4B:71:2F
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:ac:53:76:c8:c2:b5:3b:b0:b6:f3:a1:5e:f6:9e:82:22:
         00:62:fc:3c:24:88:c9:27:4e:d7:33:96:69:7d:cd:57:90:ac:
         3b:7d:a7:78:2f:26:a9:c4:31:9a:b3:99:2b:5b:f2:a5:2f:5d:
         1f:e7:1c:4a:da:05:88:8f:5b:d7:e5:0a:af:a9:07:95:de:c2:
         47:62:3a:58:84:f6:a6:bf:fd:1c:dc:0d:74:5d:34:bf:0d:fe:
         b2:35:84:c8:4d:a5:6b:57:e8:a8:dd:29:c3:7b:6e:fc:d2:c0:
         cd:6a:11:b2:4f:12:4e:83:0c:cc:d2:ac:9e:c0:92:de:98:69:
         b2:8c:11:1b:38:ca:73:53:63:64:c5:23:22:08:f0:0c:fa:a3:
         fc:d1:e9:32:58:99:0a:40:1e:0b:7f:14:96:2a:41:24:50:30:
         a5:cb:86:4f:5d:83:b3:53:f1:a5:df:1f:c2:58:f2:36:56:68:
         79:96:f8:62:47:16:26:95:ff:cb:c7:d6:76:07:65:69:ad:e7:
         c7:8a:7a:6b:1c:45:80:ad:59:26:f5:3b:a0:e4:04:df:c8:36:
         08:5d:7b:66:d9:06:ce:76:0c:20:72:df:15:8b:f1:a3:e4:a2:
         97:6a:f4:f7:ab:20:71:5f:b7:cb:d9:bf:2c:ce:20:15:ba:08:
         55:5a:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org