Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33322d3332203d3e20323635313735.roa (raw, json)
Hash identifier:          stoAP+wJh/az7aXvniKdAYbXeka5tTcaEVZ0zbo5g3M=
Subject key identifier:   D6:BC:31:53:C2:12:36:0A:B0:67:13:12:63:D7:53:C0:2F:80:F2:BD
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       6A8307E0EFD0DDC846E32A8C64284654442F97B5
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:08:00 +0000
ROA not before:           Fri 29 Mar 2024 14:03:00 +0000
ROA not after:            Fri 28 Mar 2025 14:08:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:83:07:e0:ef:d0:dd:c8:46:e3:2a:8c:64:28:46:54:44:2f:97:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:03:00 2024 GMT
            Not After : Mar 28 14:08:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:83:46:10:e8:2f:66:fa:da:1e:1a:7e:a0:
                    b4:94:76:59:60:0e:3e:b6:f6:58:c6:86:bd:d9:9c:
                    ab:59:b6:f4:ae:0f:17:64:ef:e6:b6:20:65:dd:c6:
                    de:a5:5c:27:c1:83:06:32:53:1c:42:ff:2c:ff:8e:
                    41:b0:3e:88:90:23:c6:b4:1b:12:86:f9:a7:6f:5a:
                    4b:28:15:6a:ce:b7:f2:8e:4c:33:b8:ff:c5:ed:30:
                    3c:d0:de:83:fb:00:77:8c:c4:50:91:26:9f:50:06:
                    ec:11:e3:2a:bf:ba:b6:5a:68:7f:17:b5:2a:a5:fd:
                    16:6b:ad:ad:77:51:1c:91:65:1c:a5:79:60:71:47:
                    ea:60:4e:a4:96:b4:69:1a:c1:f1:6d:25:d5:1b:b9:
                    70:2b:e9:e6:42:a8:da:fc:87:4e:9b:27:96:f8:4a:
                    fa:8e:11:7b:13:76:f3:c6:83:d9:ff:e8:a8:b6:21:
                    1c:10:d0:58:2b:6c:67:99:bc:98:57:24:bc:fa:56:
                    1e:56:9a:cc:fc:35:57:97:6c:cc:1d:34:fb:c0:1e:
                    bf:0e:d6:c8:62:f5:60:50:ca:10:e9:17:ec:c1:0c:
                    fc:fc:0c:de:f4:c5:40:11:1c:f2:d8:84:3e:c7:e4:
                    26:56:d8:c9:fa:20:1a:f4:da:67:19:61:58:fc:d3:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:31:53:C2:12:36:0A:B0:67:13:12:63:D7:53:C0:2F:80:F2:BD
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:c0:db:2c:35:51:cd:82:7a:87:76:ec:24:40:fb:8f:2a:
         78:06:32:9d:7d:35:1f:3d:02:dc:76:6c:30:d3:db:12:23:f8:
         0a:f6:17:92:5f:89:a3:75:7e:f4:da:c7:69:6a:b8:6d:66:71:
         13:0e:4b:b0:9a:f5:ee:98:db:58:df:bb:78:66:62:7b:d0:55:
         34:62:21:9a:d4:be:29:90:da:b4:8e:23:ce:a6:12:84:90:88:
         e3:aa:f3:b7:b0:a4:4e:c8:3b:fc:dc:a9:48:a6:2d:e2:fb:53:
         66:3f:4a:08:b8:7f:a6:34:09:58:f1:4a:5c:53:69:cd:df:b4:
         59:23:ce:04:a2:22:76:4c:89:6f:02:23:c0:59:d2:3c:b4:14:
         1e:b6:a4:46:b1:19:af:d0:c2:31:e2:53:fd:c5:f5:b2:09:9c:
         1e:1f:c0:8c:2f:49:27:87:e0:a3:56:09:78:18:6b:85:6f:35:
         0e:54:4c:2b:96:dc:2e:d3:47:56:1f:a2:36:12:82:c6:ef:11:
         8b:57:41:52:de:1a:a8:1c:36:70:03:ed:87:09:25:1c:00:c1:
         56:38:dc:7c:44:92:60:3f:36:fc:00:1a:56:1e:51:5a:60:67:
         a2:23:54:a5:ce:fa:63:7c:bf:c0:3c:4d:e6:9a:0b:27:53:1b:
         38:4b:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org