Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a333030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a333030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          2pvZ74dhocHdqF7nzCfx8Ss1nLN8LrtjulH+TFunTJs=
Subject key identifier:   42:72:4B:ED:47:C1:F9:4C:40:74:2B:2C:20:C9:0E:81:16:00:80:19
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       106A18018FCBE6D97F03C6C718C32A8DEC4AC278
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a333030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:18:01:8f:cb:e6:d9:7f:03:c6:c7:18:c3:2a:8d:ec:4a:c2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:be:a9:c9:75:6c:d7:35:87:2e:82:90:ab:
                    9b:c0:94:2a:a5:6e:81:fb:ca:97:78:86:72:4d:e6:
                    e3:56:15:bf:0f:1b:d7:77:38:6a:cb:31:5e:fd:d2:
                    49:2e:b2:72:ed:ad:7d:c6:cb:67:8f:d0:41:7e:42:
                    0b:fa:5f:c5:1a:aa:34:7a:83:58:0b:dd:3a:39:2b:
                    e3:8f:74:34:89:ed:80:e7:9f:9c:f2:63:99:39:ce:
                    db:bb:5b:4a:30:81:a4:e9:a9:41:e8:94:e6:07:72:
                    f7:88:7a:01:79:05:b8:64:ad:39:3f:f2:d1:94:16:
                    c4:dd:fd:bc:a9:56:02:18:cd:3b:af:fa:96:5a:32:
                    58:84:69:be:29:cb:cf:3b:ea:9a:0a:c0:45:5a:87:
                    fc:e5:12:c4:ba:3e:6c:a0:e8:a0:d8:29:d2:70:85:
                    bc:d0:c7:1e:f7:11:40:8e:93:7c:93:99:f0:5f:e8:
                    1c:62:6a:54:21:9b:06:13:6a:67:bb:cb:ed:9e:95:
                    ea:73:f6:d9:62:4c:26:0b:54:de:03:0d:ec:0c:19:
                    f3:68:60:d5:a0:9b:a1:61:4f:30:ed:d7:8d:25:46:
                    c3:24:50:2a:7b:a0:56:2e:d8:01:16:6b:c1:f2:e1:
                    f9:57:7a:01:aa:56:35:2a:8a:22:7c:20:5f:99:35:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:72:4B:ED:47:C1:F9:4C:40:74:2B:2C:20:C9:0E:81:16:00:80:19
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a333030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:93:bc:bc:aa:bc:84:e7:f7:09:67:d0:50:52:b3:30:af:
         2f:a1:95:90:c4:8c:2d:ae:96:1a:c5:e2:da:4a:8e:fd:1c:4a:
         35:b8:e0:2b:e5:fa:88:7f:41:bd:10:8d:b8:ab:54:04:75:6c:
         85:41:0b:ed:3b:0b:d6:c3:fe:db:36:6c:a7:12:e3:a8:2f:a9:
         d7:c1:fd:11:9e:a9:e6:ab:da:2b:8f:b1:29:3a:23:4c:20:27:
         78:a8:1f:82:f2:3b:c0:38:d2:4f:93:f3:8f:c4:f2:61:0d:cf:
         f1:4d:b2:82:d4:ed:fe:a6:7c:4b:1a:f2:be:56:c2:51:b7:90:
         29:2a:11:20:27:c8:ac:f2:59:4c:f1:50:81:61:e3:0c:03:e9:
         1a:0e:01:b7:0f:1a:80:f6:d7:03:6e:05:b2:1d:f6:ca:40:44:
         2f:22:fe:19:16:58:39:a7:b4:38:26:a0:74:f4:39:db:ba:d8:
         a7:2b:ca:51:36:3a:91:9f:fa:22:78:67:f6:7d:fd:e6:3a:ab:
         9b:d3:96:e4:27:e4:9c:40:af:f8:25:54:d6:e2:63:8b:77:c7:
         9b:6c:90:8a:df:b9:8c:06:cb:77:e9:56:2a:3a:0a:4f:c1:4e:
         ba:66:88:8c:0d:28:e8:3b:e0:0f:b6:5d:cd:82:ef:0a:d5:63:
         e0:e7:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org