Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33332d3333203d3e20323635313735.roa (raw, json)
Hash identifier:          zCsEJU9fUyk1BJlmw0f1skUTGi5X2YDQ7BWq9ISqdOk=
Subject key identifier:   36:A7:F5:9F:F0:1C:4B:CA:DD:23:7A:70:69:00:76:11:9A:5A:09:36
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       57BDF57C16C7202A1A8370B19514EB9207683697
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:01 +0000
ROA not before:           Fri 29 Mar 2024 14:05:01 +0000
ROA not after:            Fri 28 Mar 2025 14:10:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bd:f5:7c:16:c7:20:2a:1a:83:70:b1:95:14:eb:92:07:68:36:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:01 2024 GMT
            Not After : Mar 28 14:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:23:80:c6:64:fc:3a:62:c0:87:05:7d:a4:
                    24:8c:57:61:85:83:7d:f0:ff:56:a8:10:ea:35:61:
                    70:b4:bd:b7:4b:98:dc:59:39:ce:5a:e4:26:23:eb:
                    5a:a7:83:b6:8d:46:29:e7:66:29:b9:27:aa:e6:03:
                    01:07:da:42:28:f0:d6:aa:52:43:28:ef:35:97:c8:
                    f3:48:df:3f:39:93:ea:f8:89:4e:94:8a:8b:5f:59:
                    0a:98:4b:9c:d4:17:94:13:2b:c2:78:53:07:25:12:
                    4c:bd:cb:d7:f0:76:b9:8b:6f:85:8b:e8:1e:08:11:
                    58:6d:1e:2d:0c:13:39:ac:88:47:1e:c4:73:9f:86:
                    dc:ac:f1:20:0b:d9:14:38:eb:81:ce:aa:bc:b6:9e:
                    e3:15:87:37:48:04:e6:2b:e6:9b:91:89:ef:e0:8b:
                    ea:32:22:34:1f:1d:72:bf:81:8d:81:f6:3b:4f:c5:
                    db:0a:62:cb:5c:eb:91:86:fc:84:9b:0b:e2:07:e5:
                    76:d3:0d:15:cc:c5:eb:05:37:0c:b5:3a:9d:2a:c0:
                    83:48:84:4d:c1:d1:66:43:3f:f5:31:59:97:ea:b8:
                    b6:d4:a9:80:34:15:16:6f:6d:f6:a5:92:39:9f:9a:
                    7a:9f:aa:e3:8a:cf:38:9f:24:32:64:85:2e:0b:b4:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:F5:9F:F0:1C:4B:CA:DD:23:7A:70:69:00:76:11:9A:5A:09:36
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:ef:7b:8c:d2:28:9e:47:f5:c7:36:e5:77:e4:32:f8:50:
         e2:49:9e:ce:97:ad:18:1f:8f:72:4c:2d:7e:cf:60:c3:ad:a6:
         1a:a8:7e:a7:e8:df:27:58:72:8a:ae:08:fe:74:ac:0f:c1:fc:
         a2:4f:ca:16:ad:12:26:05:18:fb:4c:cd:6d:41:cd:0e:b1:12:
         30:59:de:05:f6:8f:82:cd:fc:3a:6b:66:2f:c8:dc:19:fd:f1:
         63:1a:b4:e6:a0:2c:a9:ee:fc:11:28:f5:19:51:34:c9:4c:a2:
         d7:22:8e:ee:be:e2:4b:f5:2f:93:97:ca:b8:14:a7:81:a3:3c:
         7a:f1:ae:15:d1:e7:ee:c8:23:c6:36:bd:eb:7b:d6:bc:c2:01:
         43:6c:5d:94:9e:94:68:22:05:a9:83:6d:83:e1:56:0b:b5:6e:
         1b:db:ac:89:15:41:a7:cf:3d:e1:bf:c5:10:7f:13:3b:bc:42:
         16:c8:31:83:24:f0:4d:39:af:81:47:ed:31:ab:bc:b8:1f:1d:
         6d:d4:e3:da:4a:3b:6b:25:b6:b5:cb:40:d1:fe:83:c6:78:96:
         a6:ee:37:ce:f7:94:b9:83:1f:ef:ba:1f:c3:59:dc:7c:76:99:
         bd:18:38:08:4f:87:ab:90:7a:77:44:49:f5:a2:c4:b8:08:5c:
         47:20:56:cc
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUV731fBbHICoag3CxlRTrkgdoNpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yNDAzMjkxNDA1MDFaFw0yNTAzMjgxNDEwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUEzNzIzODBDNjY0RkMzQTYy
QzA4NzA1N0RBNDI0OEM1NzYxODU4MzdERjBGRjU2QTgxMEVBMzU2MTcwQjRCREI3
NEI5OERDNTkzOUNFNUFFNDI2MjNFQjVBQTc4M0I2OEQ0NjI5RTc2NjI5QjkyN0FB
RTYwMzAxMDdEQTQyMjhGMEQ2QUE1MjQzMjhFRjM1OTdDOEYzNDhERjNGMzk5M0VB
Rjg4OTRFOTQ4QThCNUY1OTBBOTg0QjlDRDQxNzk0MTMyQkMyNzg1MzA3MjUxMjRD
QkRDQkQ3RjA3NkI5OEI2Rjg1OEJFODFFMDgxMTU4NkQxRTJEMEMxMzM5QUM4ODQ3
MUVDNDczOUY4NkRDQUNGMTIwMEJEOTE0MzhFQjgxQ0VBQUJDQjY5RUUzMTU4NzM3
NDgwNEU2MkJFNjlCOTE4OUVGRTA4QkVBMzIyMjM0MUYxRDcyQkY4MThEODFGNjNC
NEZDNURCMEE2MkNCNUNFQjkxODZGQzg0OUIwQkUyMDdFNTc2RDMwRDE1Q0NDNUVC
MDUzNzBDQjUzQTlEMkFDMDgzNDg4NDREQzFEMTY2NDMzRkY1MzE1OTk3RUFCOEI2
RDRBOTgwMzQxNTE2NkY2REY2QTU5MjM5OUY5QTdBOUZBQUUzOEFDRjM4OUYyNDMy
NjQ4NTJFMEJCNDUwNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqjcjgMZk/DpiwIcFfaQkjFdhhYN98P9WqBDqNWFwtL23S5jcWTnO
WuQmI+tap4O2jUYp52YpuSeq5gMBB9pCKPDWqlJDKO81l8jzSN8/OZPq+IlOlIqL
X1kKmEuc1BeUEyvCeFMHJRJMvcvX8Ha5i2+Fi+geCBFYbR4tDBM5rIhHHsRzn4bc
rPEgC9kUOOuBzqq8tp7jFYc3SATmK+abkYnv4IvqMiI0Hx1yv4GNgfY7T8XbCmLL
XOuRhvyEmwviB+V20w0VzMXrBTcMtTqdKsCDSIRNwdFmQz/1MVmX6ri21KmANBUW
b232pZI5n5p6n6rjis84nyQyZIUuC7RQSQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDan9Z/wHEvK3SN6cGkAdhGaWgk2MB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMyMzgzMDM0M2EzMjYyNjMzODNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNTMxMzczNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
K8gAMA0GCSqGSIb3DQEBCwUAA4IBAQBsRO97jNIonkf1xzbld+Qy+FDiSZ7Ol60Y
H49yTC1+z2DDraYaqH6n6N8nWHKKrgj+dKwPwfyiT8oWrRImBRj7TM1tQc0OsRIw
Wd4F9o+Czfw6a2YvyNwZ/fFjGrTmoCyp7vwRKPUZUTTJTKLXIo7uvuJL9S+Tl8q4
FKeBozx68a4V0efuyCPGNr3re9a8wgFDbF2UnpRoIgWpg22D4VYLtW4b26yJFUGn
zz3hv8UQfxM7vEIWyDGDJPBNOa+BR+0xq7y4Hx1t1OPaSjtrJba1y0DR/oPGeJam
7jfO95S5gx/vuh/DWdx8dpm9GDgIT4erkHp3REn1osS4CFxHIFbM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org