Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          ojGkwn1lhqaQ9Sa5spYRK63agBfm4CKH/LCJLTL7Jg4=
Subject key identifier:   BF:7E:3F:3B:01:00:3A:13:66:5A:5F:03:ED:00:FC:9D:9A:33:94:BB
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       2AFE2E3C92FDD5314AD0D209725B16B9835A305A
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:00 +0000
ROA not before:           Sun 31 Dec 2023 15:39:00 +0000
ROA not after:            Sun 29 Dec 2024 15:44:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fe:2e:3c:92:fd:d5:31:4a:d0:d2:09:72:5b:16:b9:83:5a:30:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:00 2023 GMT
            Not After : Dec 29 15:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:b6:33:f1:eb:a6:4e:aa:20:d9:20:82:07:
                    0e:f1:b1:8b:a0:e3:f6:de:d9:35:43:a5:dc:12:36:
                    ab:55:84:89:1a:e8:c9:a0:2d:04:d6:ac:89:5d:c0:
                    a3:97:56:e1:12:76:8d:ec:58:e9:58:d0:e8:a1:5c:
                    2b:7b:7d:42:41:eb:44:25:e6:e2:d4:4b:47:64:09:
                    f0:e0:db:f3:93:87:53:a1:47:8c:ad:4f:aa:24:f9:
                    66:b7:02:c0:b0:98:9b:18:36:79:81:01:48:6b:15:
                    7f:4e:44:84:37:62:60:7c:d4:aa:eb:51:bd:26:fd:
                    6c:b0:d0:79:60:d1:0c:50:5d:51:db:2d:3e:b0:49:
                    f2:a5:43:30:2e:a7:1d:e0:e1:d5:4d:68:ee:0a:1c:
                    d1:93:b2:6e:45:ac:51:ca:20:fc:0a:3c:3c:08:f3:
                    dd:90:20:89:33:c0:35:60:d7:fd:b4:64:bc:1d:da:
                    7c:5b:3d:52:35:cb:1b:b6:96:71:46:0e:1b:84:c5:
                    80:d1:09:e4:cc:2f:cc:f5:82:93:5e:14:0c:ab:c2:
                    eb:1f:1c:43:ec:b6:a3:01:ae:3d:9b:7a:01:69:1a:
                    a2:ef:15:a5:1b:3d:32:92:ca:ff:81:8d:c8:d8:f7:
                    b9:9c:ad:42:c0:17:81:a1:2a:74:51:12:64:80:24:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:3F:3B:01:00:3A:13:66:5A:5F:03:ED:00:FC:9D:9A:33:94:BB
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:20:1a:28:68:16:dd:94:27:6a:4b:da:00:c2:49:55:55:2c:
         9f:17:bc:0b:73:d4:98:14:5f:03:55:18:85:f4:67:a2:ae:4a:
         27:61:7a:19:9f:60:0e:92:25:dd:dd:3f:91:04:54:09:50:ec:
         03:df:f4:71:c9:7a:bd:49:4c:b7:17:f3:2b:68:33:a1:cb:a6:
         26:b2:6d:37:6a:72:da:73:20:54:7e:2f:f8:5d:42:f3:44:2f:
         d3:49:eb:d5:6a:6d:d9:58:6f:d0:da:33:be:e6:11:00:46:5d:
         bb:48:62:7b:0a:6f:eb:68:98:4b:f2:e2:14:0f:8c:05:1e:5e:
         ac:74:50:a6:bc:a7:05:5c:01:16:b4:1b:d1:e2:d7:2a:19:cb:
         c2:6f:8f:2a:a4:1a:31:af:6d:e4:74:24:4b:4a:6c:39:7d:e4:
         b8:38:d4:c2:bb:4b:c8:5c:b1:4f:0a:8f:57:de:11:34:39:a2:
         34:e6:35:dd:6c:32:d2:66:c5:be:0d:e0:0b:55:da:9b:3d:7b:
         0c:3f:d6:d1:9e:52:06:7b:30:bb:5f:73:34:a8:54:e0:b7:7d:
         15:63:dd:dc:cb:3b:eb:2e:73:ed:6b:85:24:ad:1c:fe:97:04:
         b4:60:b7:ca:de:d2:05:32:83:c1:89:6c:00:af:df:05:d2:87:
         47:6c:50:20
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUKv4uPJL91TFK0NIJclsWuYNaMFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yMzEyMzExNTM5MDBaFw0yNDEyMjkxNTQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgzRkI2MzNGMUVCQTY0RUFB
MjBEOTIwODIwNzBFRjFCMThCQTBFM0Y2REVEOTM1NDNBNURDMTIzNkFCNTU4NDg5
MUFFOEM5QTAyRDA0RDZBQzg5NURDMEEzOTc1NkUxMTI3NjhERUM1OEU5NThEMEU4
QTE1QzJCN0I3RDQyNDFFQjQ0MjVFNkUyRDQ0QjQ3NjQwOUYwRTBEQkYzOTM4NzUz
QTE0NzhDQUQ0RkFBMjRGOTY2QjcwMkMwQjA5ODlCMTgzNjc5ODEwMTQ4NkIxNTdG
NEU0NDg0Mzc2MjYwN0NENEFBRUI1MUJEMjZGRDZDQjBEMDc5NjBEMTBDNTA1RDUx
REIyRDNFQjA0OUYyQTU0MzMwMkVBNzFERTBFMUQ1NEQ2OEVFMEExQ0QxOTNCMjZF
NDVBQzUxQ0EyMEZDMEEzQzNDMDhGM0REOTAyMDg5MzNDMDM1NjBEN0ZEQjQ2NEJD
MUREQTdDNUIzRDUyMzVDQjFCQjY5NjcxNDYwRTFCODRDNTgwRDEwOUU0Q0MyRkND
RjU4MjkzNUUxNDBDQUJDMkVCMUYxQzQzRUNCNkEzMDFBRTNEOUI3QTAxNjkxQUEy
RUYxNUE1MUIzRDMyOTJDQUZGODE4REM4RDhGN0I5OUNBRDQyQzAxNzgxQTEyQTc0
NTExMjY0ODAyNDMyMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuD+2M/Hrpk6qINkgggcO8bGLoOP23tk1Q6XcEjarVYSJGujJoC0E
1qyJXcCjl1bhEnaN7FjpWNDooVwre31CQetEJebi1EtHZAnw4Nvzk4dToUeMrU+q
JPlmtwLAsJibGDZ5gQFIaxV/TkSEN2JgfNSq61G9Jv1ssNB5YNEMUF1R2y0+sEny
pUMwLqcd4OHVTWjuChzRk7JuRaxRyiD8Cjw8CPPdkCCJM8A1YNf9tGS8Hdp8Wz1S
NcsbtpZxRg4bhMWA0QnkzC/M9YKTXhQMq8LrHxxD7LajAa49m3oBaRqi7xWlGz0y
ksr/gY3I2Pe5nK1CwBeBoSp0URJkgCQyCQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FL9+PzsBADoTZlpfA+0A/J2aM5S7MB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMyMzgzMDM0M2EzMjYyNjMzODNh
MzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIIDANBgkqhkiG9w0BAQsFAAOCAQEAQiAaKGgW3ZQnakvaAMJJ
VVUsnxe8C3PUmBRfA1UYhfRnoq5KJ2F6GZ9gDpIl3d0/kQRUCVDsA9/0ccl6vUlM
txfzK2gzocumJrJtN2py2nMgVH4v+F1C80Qv00nr1Wpt2Vhv0NozvuYRAEZdu0hi
ewpv62iYS/LiFA+MBR5erHRQprynBVwBFrQb0eLXKhnLwm+PKqQaMa9t5HQkS0ps
OX3kuDjUwrtLyFyxTwqPV94RNDmiNOY13Wwy0mbFvg3gC1Xamz17DD/W0Z5SBnsw
u19zNKhU4Ld9FWPd3Ms76y5z7WuFJK0c/pcEtGC3yt7SBTKDwYlsAK/fBdKHR2xQ
IA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org