Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          xI4jluyBjJ6H6bcFgxZ9WVVA53w+emsN2wnYQOC7KxM=
Subject key identifier:   8D:9A:7D:B3:0E:E1:B3:57:54:88:8C:61:6C:25:31:20:8B:5F:50:2C
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       2F470765679A468FFC27A988EE9285DD4F851F
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:47:07:65:67:9a:46:8f:fc:27:a9:88:ee:92:85:dd:4f:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject: CN=3082010A0282010100986DD50FB83F49516A79F35DE0210F944F12CA7362A4E440DA76FB0D25E2DE8FD40B16AC55A0D196BBED9DCA6579C0D269682186E48993CC5B1F30A360A0EAE2704CC0D9EB51D4BF655C056150306800A2344BAD5F0F7587B1E1FF270ABD2D1E53DAB1B30E78ADE08DFE81B8B9A6FE999D8D33C75F224BDDB368954C4D9A262DB671243C31AEBA4A5B1CF2C94BF687D0E9FA85CEB8FD1693CFBD9C79C16A9EAD40C83D7657C7E18B66FA3F6255BA83D78CD3E0B16A87D1D9F33F97D5B2AD38AD7879047E20ACD6E42EC0342B244FCB3B9388F0606E4930810344FC63823F74ACA9AAEEAA347DFE09777020386E80C9A8DA28497D5DAD7EC8D6908FBD3BAE1A170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:d5:0f:b8:3f:49:51:6a:79:f3:5d:e0:21:
                    0f:94:4f:12:ca:73:62:a4:e4:40:da:76:fb:0d:25:
                    e2:de:8f:d4:0b:16:ac:55:a0:d1:96:bb:ed:9d:ca:
                    65:79:c0:d2:69:68:21:86:e4:89:93:cc:5b:1f:30:
                    a3:60:a0:ea:e2:70:4c:c0:d9:eb:51:d4:bf:65:5c:
                    05:61:50:30:68:00:a2:34:4b:ad:5f:0f:75:87:b1:
                    e1:ff:27:0a:bd:2d:1e:53:da:b1:b3:0e:78:ad:e0:
                    8d:fe:81:b8:b9:a6:fe:99:9d:8d:33:c7:5f:22:4b:
                    dd:b3:68:95:4c:4d:9a:26:2d:b6:71:24:3c:31:ae:
                    ba:4a:5b:1c:f2:c9:4b:f6:87:d0:e9:fa:85:ce:b8:
                    fd:16:93:cf:bd:9c:79:c1:6a:9e:ad:40:c8:3d:76:
                    57:c7:e1:8b:66:fa:3f:62:55:ba:83:d7:8c:d3:e0:
                    b1:6a:87:d1:d9:f3:3f:97:d5:b2:ad:38:ad:78:79:
                    04:7e:20:ac:d6:e4:2e:c0:34:2b:24:4f:cb:3b:93:
                    88:f0:60:6e:49:30:81:03:44:fc:63:82:3f:74:ac:
                    a9:aa:ee:aa:34:7d:fe:09:77:70:20:38:6e:80:c9:
                    a8:da:28:49:7d:5d:ad:7e:c8:d6:90:8f:bd:3b:ae:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:7D:B3:0E:E1:B3:57:54:88:8C:61:6C:25:31:20:8B:5F:50:2C
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:72:e2:48:23:df:56:ce:59:50:33:cf:0d:ca:3b:56:63:97:
         53:e9:8b:92:15:0f:06:64:8c:c0:d6:9f:5d:30:8b:5d:f3:c6:
         12:36:5a:b3:04:be:12:80:58:e6:7f:44:70:60:83:79:49:2b:
         d3:7a:81:29:0a:5c:7c:a4:cb:57:1d:a7:f9:fe:de:14:df:cb:
         00:b3:ad:d6:98:46:0a:10:08:b9:99:d1:fb:35:d6:b2:a3:10:
         79:ab:8e:d4:9e:0d:f7:3f:17:0b:08:fc:da:9f:5a:9f:60:35:
         c7:c5:f8:d8:37:2f:c0:77:8d:18:5e:8d:f8:e4:2d:ae:b4:c0:
         8a:3a:32:4d:e6:54:d0:7a:a8:aa:ce:74:1a:82:fb:c7:af:fa:
         4c:d8:ae:79:33:d8:92:3e:35:41:35:b1:e9:d8:fc:40:07:0e:
         70:c9:8e:08:fa:28:00:48:fb:f6:c1:db:ad:a6:7b:3c:2a:d7:
         85:3f:3e:62:41:e5:67:56:a5:f9:d7:0c:e2:7d:c9:a9:e4:76:
         a9:bb:b6:1a:1c:90:30:d7:be:70:04:eb:78:e9:5c:f4:dd:b5:
         08:a6:fb:af:07:76:03:12:79:f0:88:21:b3:a3:28:69:fb:86:
         18:f3:87:31:76:d0:c2:b0:d8:52:70:72:35:9d:ff:fc:9a:fc:
         dc:3a:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org