Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          NtrthohZcAKgBcu9a7/G6cFOwGr50nOjmbVyrrucvts=
Subject key identifier:   81:69:04:8D:3E:C5:28:CD:6B:B7:C9:C8:FF:F3:A3:60:CD:30:C2:F1
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       3FF4D5FEDF729034C3A9A048D910BE33000D2C68
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:46:01 +0000
ROA not before:           Sun 31 Dec 2023 15:41:01 +0000
ROA not after:            Sun 29 Dec 2024 15:46:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f4:d5:fe:df:72:90:34:c3:a9:a0:48:d9:10:be:33:00:0d:2c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:41:01 2023 GMT
            Not After : Dec 29 15:46:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:e9:7e:ff:ff:d7:ef:83:1e:ab:d1:19:04:
                    71:96:8f:03:6f:a6:b7:15:98:69:9b:c0:92:f3:33:
                    2f:c9:02:02:5f:35:fc:4d:5e:39:19:cd:f2:32:7f:
                    4b:2c:21:c6:8f:68:e3:98:d2:45:db:9b:9d:6b:f9:
                    b9:6b:0e:02:25:e8:c3:41:5b:f5:08:f6:db:44:38:
                    b4:b1:2a:52:81:df:11:29:bb:ec:39:71:e5:99:f8:
                    44:b8:88:32:8e:20:4f:ee:fb:4e:6c:2e:00:5c:20:
                    62:7b:53:0c:32:6a:66:5f:1f:24:80:0d:f1:6c:28:
                    d8:3c:d4:7d:aa:50:be:cf:42:96:b2:05:19:09:ee:
                    5c:30:da:a1:5b:a8:d1:52:53:3b:18:55:15:3d:66:
                    36:d7:11:00:0f:20:14:eb:95:4e:69:65:cd:3d:c7:
                    68:05:a4:3d:35:3e:2b:7e:50:d5:20:dd:dd:71:16:
                    77:fd:89:d2:85:d2:23:80:05:72:f8:8e:ef:4d:14:
                    70:99:47:c4:f4:bb:f6:43:75:7f:7f:a7:e9:2f:ba:
                    63:d3:12:91:44:6b:13:25:03:b0:df:d9:4c:42:50:
                    b2:e5:15:fd:83:9a:c0:5d:f8:50:39:a6:0f:33:73:
                    69:53:24:57:93:c5:8a:74:b0:a5:ce:67:9c:a0:c2:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:69:04:8D:3E:C5:28:CD:6B:B7:C9:C8:FF:F3:A3:60:CD:30:C2:F1
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:39:2c:fb:c3:3f:46:95:23:ba:f0:b0:a4:3f:2a:a2:c2:
         be:e2:7d:99:80:18:23:7e:ce:51:e2:ac:de:fc:d9:27:08:94:
         c9:1c:a4:20:6a:6c:9a:90:ad:eb:4e:5f:50:09:b6:60:1f:cc:
         9a:5c:a3:0c:bc:33:95:84:60:be:0c:c7:8c:8f:1f:df:47:3c:
         4c:5c:58:61:6a:96:f2:94:4b:ee:26:92:9a:83:9a:6a:a0:8b:
         69:0a:da:4c:e6:32:a1:b1:fe:ad:3a:a2:d0:e4:2c:ce:59:98:
         33:51:a5:ef:68:1c:63:02:5a:36:91:2b:a5:f1:55:2c:85:7d:
         12:a3:66:7b:36:47:27:dc:ad:60:1f:73:5d:87:e6:ce:0c:5e:
         34:c7:fa:01:fe:f1:91:5c:7e:fc:f6:90:c2:18:4e:14:90:dd:
         f7:4d:73:78:4a:43:6d:51:d8:05:80:ee:b3:ad:10:67:95:66:
         2b:ba:91:51:aa:ee:f1:a5:ce:95:b7:61:2f:24:2c:8c:93:50:
         d5:6a:14:5a:36:c9:a3:2b:a9:ce:38:43:1f:3e:15:82:ed:80:
         7d:da:4d:81:2e:86:8b:ad:ac:a1:15:7c:17:08:13:50:bc:b8:
         e9:ae:de:2c:fc:dd:26:c1:35:77:2b:b1:e8:61:f7:83:9f:45:
         40:d8:a5:c5
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUP/TV/t9ykDTDqaBI2RC+MwANLGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yMzEyMzExNTQxMDFaFw0yNDEyMjkxNTQ2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ5OEU5N0VGRkZGRDdFRjgz
MUVBQkQxMTkwNDcxOTY4RjAzNkZBNkI3MTU5ODY5OUJDMDkyRjMzMzJGQzkwMjAy
NUYzNUZDNEQ1RTM5MTlDREYyMzI3RjRCMkMyMUM2OEY2OEUzOThEMjQ1REI5QjlE
NkJGOUI5NkIwRTAyMjVFOEMzNDE1QkY1MDhGNkRCNDQzOEI0QjEyQTUyODFERjEx
MjlCQkVDMzk3MUU1OTlGODQ0Qjg4ODMyOEUyMDRGRUVGQjRFNkMyRTAwNUMyMDYy
N0I1MzBDMzI2QTY2NUYxRjI0ODAwREYxNkMyOEQ4M0NENDdEQUE1MEJFQ0Y0Mjk2
QjIwNTE5MDlFRTVDMzBEQUExNUJBOEQxNTI1MzNCMTg1NTE1M0Q2NjM2RDcxMTAw
MEYyMDE0RUI5NTRFNjk2NUNEM0RDNzY4MDVBNDNEMzUzRTJCN0U1MEQ1MjBERERE
NzExNjc3RkQ4OUQyODVEMjIzODAwNTcyRjg4RUVGNEQxNDcwOTk0N0M0RjRCQkY2
NDM3NTdGN0ZBN0U5MkZCQTYzRDMxMjkxNDQ2QjEzMjUwM0IwREZEOTRDNDI1MEIy
RTUxNUZEODM5QUMwNURGODUwMzlBNjBGMzM3MzY5NTMyNDU3OTNDNThBNzRCMEE1
Q0U2NzlDQTBDMjQwMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApJjpfv//1++DHqvRGQRxlo8Db6a3FZhpm8CS8zMvyQICXzX8TV45
Gc3yMn9LLCHGj2jjmNJF25uda/m5aw4CJejDQVv1CPbbRDi0sSpSgd8RKbvsOXHl
mfhEuIgyjiBP7vtObC4AXCBie1MMMmpmXx8kgA3xbCjYPNR9qlC+z0KWsgUZCe5c
MNqhW6jRUlM7GFUVPWY21xEADyAU65VOaWXNPcdoBaQ9NT4rflDVIN3dcRZ3/YnS
hdIjgAVy+I7vTRRwmUfE9Lv2Q3V/f6fpL7pj0xKRRGsTJQOw39lMQlCy5RX9g5rA
XfhQOaYPM3NpUyRXk8WKdLClzmecoMJAGwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FIFpBI0+xSjNa7fJyP/zo2DNMMLxMB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMyMzgzMDM0M2EzMjYyNjMzODNh
MzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIQDANBgkqhkiG9w0BAQsFAAOCAQEAe+05LPvDP0aVI7rwsKQ/
KqLCvuJ9mYAYI37OUeKs3vzZJwiUyRykIGpsmpCt605fUAm2YB/MmlyjDLwzlYRg
vgzHjI8f30c8TFxYYWqW8pRL7iaSmoOaaqCLaQraTOYyobH+rTqi0OQszlmYM1Gl
72gcYwJaNpErpfFVLIV9EqNmezZHJ9ytYB9zXYfmzgxeNMf6Af7xkVx+/PaQwhhO
FJDd901zeEpDbVHYBYDus60QZ5VmK7qRUaru8aXOlbdhLyQsjJNQ1WoUWjbJoyup
zjhDHz4Vgu2AfdpNgS6Gi62soRV8FwgTULy46a7eLPzdJsE1dyux6GH3g59FQNil
xQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org