Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a353030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a353030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          bBFCIpZNBhtb/XdkwronDAOz5UckUtYY84yqXwzehJA=
Subject key identifier:   E1:F0:6E:FF:CC:B3:61:C9:0C:00:FE:96:9B:08:24:5E:8C:73:72:D9
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       3AD6AD6B749614EAD7BAC28E98D6A9F3DAF9023D
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a353030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:ad:6b:74:96:14:ea:d7:ba:c2:8e:98:d6:a9:f3:da:f9:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:5e:b8:36:a4:a9:5e:6b:de:8a:a3:8d:46:
                    3e:d3:c7:a2:b5:0d:6a:fa:2b:b7:37:cb:4d:43:9b:
                    6c:92:0d:48:22:9b:ad:a1:ab:f5:95:d5:75:f2:dd:
                    09:2c:f0:58:c0:68:72:26:e8:bd:1e:7f:5d:31:73:
                    9d:e6:30:42:a8:18:72:d5:51:34:8a:aa:21:ed:05:
                    f9:9d:14:21:43:ba:60:18:7c:cf:67:d4:fa:d1:4c:
                    90:60:f1:65:a7:02:34:2d:2f:f7:42:17:14:63:ab:
                    52:25:d3:a6:d1:f5:bb:0b:67:8e:c8:98:36:09:0a:
                    c5:69:96:62:f9:5a:26:46:6e:71:bd:e4:ad:dc:82:
                    de:0b:c4:11:ff:f6:71:b1:b0:aa:9b:f2:0d:5b:1e:
                    69:54:24:eb:68:6e:a0:e6:43:d7:63:d4:f5:a0:4c:
                    29:af:6a:18:28:46:76:bf:65:11:22:e8:df:fa:69:
                    be:e7:dc:e8:ca:b9:a3:0c:da:ec:26:ea:6e:b8:5f:
                    2e:7c:e2:f2:e9:7e:88:b9:d5:1a:94:fc:16:b0:93:
                    61:21:6e:1e:3e:bf:20:3e:a7:34:5e:0a:cf:63:bf:
                    3b:8c:66:e8:df:62:f4:69:bb:95:ba:68:fb:d5:ee:
                    08:bb:f1:94:44:88:ae:bc:2b:9e:54:c3:6f:cd:87:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F0:6E:FF:CC:B3:61:C9:0C:00:FE:96:9B:08:24:5E:8C:73:72:D9
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a353030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:03:60:f4:20:3a:68:10:c6:7c:8b:6a:c1:62:d8:31:62:
         02:bc:af:9e:98:27:45:f9:a0:e9:7d:a6:0c:36:6f:44:ec:46:
         25:3c:76:11:6a:d6:54:57:df:93:09:e2:29:27:ba:a8:0c:83:
         34:55:3a:15:6a:31:05:77:d9:3d:82:a5:37:49:08:6c:8d:e9:
         43:bd:fe:13:b2:26:21:7f:7c:6d:23:c8:e4:48:ad:f4:0c:f6:
         7e:f8:06:c9:e6:49:c6:19:bf:0f:cd:f8:bd:46:05:dc:a8:31:
         5d:92:a5:51:fc:f1:f2:7b:9a:a5:e3:78:7c:bd:6b:fc:31:78:
         c8:cf:60:db:ff:50:82:d6:92:f3:6e:6e:0f:ee:d4:09:f9:c0:
         33:fe:b5:e5:2a:67:3d:5f:0b:7d:84:c7:24:c3:d6:7d:eb:cf:
         6d:25:10:01:55:4d:c6:00:2c:13:a4:9a:e7:f8:26:d0:40:75:
         ce:4b:07:2d:4a:32:ac:3b:a8:2c:26:df:8e:8a:d2:87:b5:81:
         62:52:f6:0e:8b:ff:a1:11:93:1e:72:1d:15:53:95:4a:11:22:
         15:6f:a5:a5:29:6d:d3:57:d6:7d:9d:5d:55:48:06:b7:e8:9b:
         aa:66:93:e4:ab:13:61:f5:71:0c:1c:4a:eb:1a:21:3e:28:a1:
         4f:9c:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org