Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a383030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          KbiejffKemNRRqD4zukJ2Z/QDVofUimvyg7F0PHFyMw=
Subject key identifier:   37:D0:EB:92:81:30:2A:98:B1:A7:28:5B:7F:51:CF:C9:A9:C7:84:0E
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       4AB85C26619938FA40214AA0F292946F4DA8F304
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:00 +0000
ROA not before:           Sun 31 Dec 2023 15:39:00 +0000
ROA not after:            Sun 29 Dec 2024 15:44:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:5c:26:61:99:38:fa:40:21:4a:a0:f2:92:94:6f:4d:a8:f3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:00 2023 GMT
            Not After : Dec 29 15:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:f3:25:fd:ac:b7:31:21:8e:91:0e:37:ae:
                    bd:40:5b:57:9d:c0:9f:83:89:5e:47:52:49:0f:9d:
                    b8:28:4b:5d:85:40:08:1a:96:bd:59:3e:6c:7a:13:
                    b8:16:2f:c2:d2:67:e7:05:e3:1e:68:2c:5e:f7:1f:
                    78:2a:b5:99:ff:da:2b:53:58:ee:95:fe:d4:5f:92:
                    f0:dd:39:ce:c6:04:9f:c4:27:75:97:93:56:7d:44:
                    c5:63:c4:28:ee:06:f5:77:2f:72:42:69:f9:c1:83:
                    74:f5:08:32:32:17:a7:38:28:b8:17:b6:2e:df:56:
                    36:f0:d1:52:4c:b1:9a:a6:40:6a:78:8b:34:f5:3e:
                    9c:5f:97:ae:e6:4c:aa:31:fb:ea:77:c8:29:1e:9e:
                    60:68:5d:81:35:cd:63:87:4a:71:8b:2e:7a:c5:0d:
                    bf:21:5f:f2:7a:64:d7:fd:06:42:10:ef:4e:cd:ab:
                    7e:9c:d3:b1:39:ac:35:7c:33:04:c1:28:ee:44:92:
                    13:20:10:52:9c:d8:7e:f6:ea:39:0d:5e:59:28:61:
                    d0:a0:8f:85:ce:c1:b3:bc:fc:74:8b:47:8e:ee:0f:
                    75:7f:64:fb:ef:e5:e1:cb:88:99:f7:12:44:3a:e6:
                    0c:ae:f0:2c:e0:40:66:54:51:c7:5d:54:9a:34:51:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:EB:92:81:30:2A:98:B1:A7:28:5B:7F:51:CF:C9:A9:C7:84:0E
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:41:a8:59:cc:23:da:f0:ae:34:a3:e0:c7:c6:b6:42:87:f4:
         2d:a0:9a:e6:71:d1:4b:fc:a9:c5:35:fd:38:85:24:0b:f8:60:
         d7:3a:2f:df:c2:a7:f8:4c:23:0d:7e:8f:1a:64:c2:98:9e:52:
         e8:fd:af:53:1f:ae:be:4a:3b:a8:9d:a4:b7:5c:41:6e:9e:85:
         29:2c:3a:84:8d:1b:85:01:e5:fd:a4:a2:1f:be:a8:66:cf:a0:
         ab:99:17:c4:b3:7c:40:bc:7a:de:74:fc:96:07:ee:c1:d0:ca:
         00:52:ef:77:14:05:3a:1f:0f:22:26:e6:51:59:43:87:e6:42:
         0a:f1:4f:91:06:a5:02:6d:5d:82:23:78:65:6b:52:04:d1:23:
         d9:be:1f:b2:4b:ce:12:41:e6:85:75:67:55:14:5a:c2:0b:de:
         fd:c1:b5:bf:7d:82:b2:f2:6e:43:64:06:ea:73:43:2e:fc:02:
         5b:c5:87:e1:23:34:45:bf:07:5d:2d:08:8a:55:98:21:f0:25:
         b0:90:12:58:12:a1:5f:97:cd:b3:8a:50:35:65:38:ec:e4:f8:
         b8:d0:eb:3d:72:ff:b9:6a:8c:cd:5c:a1:70:ea:1c:04:e1:d7:
         55:ed:5b:0b:da:e7:12:9e:3c:ae:2a:43:95:38:19:d5:1c:8f:
         da:09:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org