Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa
File:                     3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa (raw, json)
Hash identifier:          GEXykQgs550aDFld+7HOVU3ojtQidDYwR1NNz2dCVmA=
Subject key identifier:   C6:3E:06:6A:9D:60:34:DD:76:40:62:80:2C:F3:A3:CA:B5:65:7B:47
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       2E8806127CEC60826B80CF804AE3CBB80F9D6A16
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:01 +0000
ROA not before:           Fri 29 Mar 2024 14:05:01 +0000
ROA not after:            Fri 28 Mar 2025 14:10:01 +0000
asID:                     265175
IP address blocks:        167.249.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:06:12:7c:ec:60:82:6b:80:cf:80:4a:e3:cb:b8:0f:9d:6a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:01 2024 GMT
            Not After : Mar 28 14:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:a8:09:91:8c:9b:2b:ee:42:57:b8:bb:c4:
                    33:7a:cc:89:24:e3:ff:80:b0:b2:e5:72:63:0b:af:
                    1d:32:9b:ba:89:f0:dd:71:28:ac:da:3f:8e:32:3d:
                    12:97:db:36:11:4f:2d:7f:91:a9:c2:6e:e8:3f:57:
                    e7:82:32:93:b0:a5:89:a6:c9:47:d0:13:2e:7c:b7:
                    03:77:30:04:26:98:17:c2:64:8d:b6:20:0c:90:5c:
                    91:10:85:c2:3f:70:06:0c:7e:2d:77:09:33:5a:b7:
                    81:5c:49:a2:7e:f6:d3:69:5e:c0:32:ae:e3:21:55:
                    91:88:f9:c7:a2:e9:ca:e6:ed:9c:fa:17:a4:e0:c3:
                    d4:f8:16:ac:de:bd:c4:a5:23:a9:7f:f5:d6:70:26:
                    19:cb:e0:a4:94:ff:2e:10:01:20:dd:d0:23:6a:c7:
                    2a:47:9f:27:71:5f:33:c5:82:a9:2c:f1:87:15:cd:
                    64:b2:5d:c6:db:ca:63:5e:ca:72:fa:0d:2b:1a:9d:
                    20:c5:34:00:e0:9d:08:8a:67:41:ae:7a:4c:84:26:
                    c9:ae:a3:06:62:d4:97:d0:2b:5e:eb:6c:fc:bf:75:
                    92:35:b3:a2:99:dd:51:69:60:0d:4a:ec:58:91:8f:
                    4a:b5:50:c8:ae:76:10:23:2b:3e:06:b5:57:a4:83:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:06:6A:9D:60:34:DD:76:40:62:80:2C:F3:A3:CA:B5:65:7B:47
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:49:8e:2c:c0:6f:97:90:4f:44:0a:ff:27:ba:34:36:33:c5:
         1a:27:eb:d0:5f:92:c9:62:11:9b:af:e7:45:5b:81:0f:f8:12:
         73:76:f4:35:9b:9d:3d:9d:ca:de:b7:6f:e1:c0:1d:e6:3c:8d:
         4f:e6:f1:3c:9d:d6:4c:e2:4b:f5:c3:d2:c0:4b:94:2a:82:e2:
         14:29:2a:7f:a2:76:fd:f1:fd:9e:13:ef:e8:02:ae:8a:cb:62:
         e4:95:59:85:eb:6c:e9:89:8b:25:43:25:a9:aa:e9:6f:3f:4c:
         e4:16:24:15:fb:9f:0a:7e:9c:14:59:0a:f7:d0:5c:66:cd:ec:
         09:91:9c:5c:34:d4:ff:a7:35:18:b4:be:11:93:5b:20:f1:ed:
         ee:e7:ae:56:f1:f8:15:50:c8:c0:7c:d4:4e:7e:0f:15:8d:6a:
         00:7b:4f:cc:0c:ba:91:7f:9b:46:7a:ab:31:a5:01:58:78:0b:
         f0:90:85:b5:13:01:b0:86:65:b8:b8:a5:c9:24:b9:a3:cc:6b:
         39:d4:26:39:22:bb:87:ab:7a:35:5e:7b:89:54:bd:21:18:97:
         b2:00:1d:68:c8:f6:3d:a5:c4:a7:77:3a:5c:39:bd:ee:81:21:
         66:7c:4e:30:ad:e2:a9:cf:ac:63:f5:5f:8c:39:d4:26:b7:fa:
         8e:b5:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org