Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a373030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a373030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          uysbydMLrYrkETbOBjoT3dU0bUBtUBKkI2tqkk40Au0=
Subject key identifier:   C7:F3:D2:10:7B:C0:02:DB:99:71:25:54:D1:6D:6D:0B:D9:FA:60:51
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       3A812901FE2DB887F16372434A800C785ECA8B0E
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a373030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:81:29:01:fe:2d:b8:87:f1:63:72:43:4a:80:0c:78:5e:ca:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:c7:ed:4d:ab:6a:71:46:8a:d5:e8:d3:0a:
                    c3:7e:f0:07:dd:f6:f2:63:3c:27:eb:69:c7:65:ec:
                    20:c5:01:5b:35:a2:3f:6b:4b:4d:b9:71:90:95:fe:
                    92:49:c4:5c:c0:be:c2:9e:2b:1e:ee:41:e8:0b:ae:
                    62:b2:1a:9d:20:d8:c8:49:f3:cc:59:29:d5:46:61:
                    c1:e7:d0:68:26:ed:59:58:b0:03:db:d8:6e:00:3b:
                    46:07:72:7b:10:e9:28:02:ee:41:ca:a1:63:c4:0b:
                    5a:34:46:1e:7d:a1:e3:97:e2:99:0b:f2:dd:93:0a:
                    05:f4:9a:ad:f8:58:3c:dc:99:db:3b:dc:7c:73:2a:
                    ba:f5:78:0d:a1:5b:59:0c:f4:ce:8e:fd:a1:18:33:
                    55:db:73:f9:70:f0:7e:0c:65:89:4c:b3:1e:02:8f:
                    c9:9f:b5:6a:e3:c9:78:da:78:50:a7:ff:35:7b:9b:
                    15:4c:45:1e:33:98:68:8e:2c:33:e8:ec:e0:52:2b:
                    ea:b0:52:d0:bd:14:e7:9a:82:97:5f:4a:df:46:a6:
                    79:00:81:c7:06:98:8a:a0:19:c1:3e:bd:a1:d7:14:
                    1b:50:52:d8:26:2c:b8:23:23:a1:ad:60:5d:08:71:
                    ea:77:bc:78:a3:61:29:11:32:43:b6:ed:91:54:87:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:D2:10:7B:C0:02:DB:99:71:25:54:D1:6D:6D:0B:D9:FA:60:51
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a373030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:01:28:e0:43:86:f4:c5:47:11:74:14:7c:d6:f0:f4:a1:
         20:67:6c:ed:64:65:06:67:2b:3c:fe:dd:d8:2a:e5:53:06:d7:
         73:60:f5:a1:81:5d:80:10:3d:1a:bf:62:46:32:3c:45:db:7f:
         a5:b3:22:f5:07:5a:45:d5:2f:f8:e1:d9:d5:16:7b:d0:67:75:
         15:5b:3a:45:e2:1c:bf:1b:e1:99:45:4d:11:fb:fc:37:89:c1:
         4f:84:f9:dd:9f:0d:d5:ff:4b:69:45:06:c2:b4:72:68:70:81:
         92:73:c2:9a:85:6d:4c:4a:ec:8d:20:16:27:ca:b9:bf:2e:34:
         2d:19:a5:79:53:ee:c0:13:7b:c5:15:0e:3e:a2:fa:2f:12:81:
         a2:1c:82:66:33:49:20:e6:51:2f:14:8e:2e:c1:8f:90:52:49:
         4a:47:e8:ce:15:9f:3a:58:64:1d:0a:ce:68:64:be:7c:b3:a5:
         bb:13:ef:ed:05:9c:e4:8d:3a:7b:c6:b2:0c:ca:25:5c:aa:ee:
         50:27:0d:dc:24:bf:ca:b4:af:e7:77:79:04:c2:c1:7e:20:1d:
         ce:15:4f:79:8c:c5:e8:17:f1:e2:fe:c6:7d:93:0a:cf:b1:60:
         02:b7:d6:e3:e7:f5:c5:bb:d2:a0:5b:26:bf:72:63:9e:25:1b:
         97:f6:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org