Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          AeAwlobR+fUz1zWQ0fvGUbHbeyd6CnA2ShD/m7/+hG0=
Subject key identifier:   DA:87:34:1B:55:D0:AE:68:E3:84:A5:F1:88:C0:A2:71:6C:54:59:E9
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       038995A4BB15CF4A56661A9DE160D41F3B04EC52
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:89:95:a4:bb:15:cf:4a:56:66:1a:9d:e1:60:d4:1f:3b:04:ec:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:78:c1:03:9a:2a:6f:52:a1:04:e2:18:5a:
                    ce:53:a4:11:3b:7d:95:6f:ef:a3:8d:5c:67:55:0b:
                    33:e0:06:cd:bf:b8:13:73:c7:03:be:b3:b7:51:43:
                    82:f2:07:eb:4e:8f:e9:e3:43:db:ee:08:ae:e0:60:
                    84:f5:8c:11:b9:28:87:d8:63:ad:35:9a:c9:ac:53:
                    e6:9d:2b:1d:0e:19:50:9d:f9:c8:6b:55:63:d1:e6:
                    8c:f7:b7:80:c0:98:cb:ad:e9:8a:8a:5b:ab:e8:3a:
                    21:03:b9:ef:28:c2:2c:b7:ee:98:98:6f:8d:87:e9:
                    ac:1e:e2:c1:97:00:df:cb:ba:72:8a:e2:18:02:b8:
                    05:54:7b:a9:58:5f:21:11:48:cf:4f:bf:ce:9e:94:
                    5d:3f:a5:e8:79:a6:17:e8:fc:af:87:c5:56:ec:1f:
                    68:bb:4c:62:13:f3:c6:3c:a3:0c:bf:26:7e:df:38:
                    01:90:d6:32:49:df:01:fa:e9:76:72:0e:02:ef:bd:
                    1a:d1:29:6e:c2:15:98:e5:3e:7a:f3:00:d9:28:f7:
                    d2:33:46:4c:b9:7a:68:5f:c0:91:db:9b:f4:0e:55:
                    ad:58:43:9d:e9:ed:2a:57:d7:d0:ff:0d:02:ec:e4:
                    38:f2:6c:91:49:45:99:22:6a:53:4f:e9:df:ce:43:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:34:1B:55:D0:AE:68:E3:84:A5:F1:88:C0:A2:71:6C:54:59:E9
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:60:e7:9e:75:31:55:7c:24:83:53:14:c4:1c:38:c6:14:
         56:3a:8b:90:9e:cd:88:cf:b8:9b:85:dd:1a:e5:12:70:64:d3:
         4b:eb:90:d4:09:a4:53:79:32:c6:fa:86:d7:5b:63:ff:c3:a7:
         10:98:a3:bc:61:48:2a:b1:7a:5d:de:da:9b:61:42:22:f3:ff:
         ae:43:f1:80:a9:f4:c7:37:6e:3c:b1:7b:76:60:fc:14:80:42:
         1c:8a:c0:b8:8b:71:ad:3b:78:a6:5d:84:7d:1c:49:a8:2f:a3:
         01:9a:78:9c:bf:5f:72:fc:86:56:05:65:c2:30:c9:f9:f6:3a:
         5b:f2:d6:87:05:a1:49:87:6e:62:40:dd:d0:2d:a1:66:6f:9d:
         1c:c4:bb:7c:72:a1:d0:93:87:00:f9:bf:93:c4:69:c4:84:57:
         48:eb:2c:4a:77:ef:bb:c5:8a:64:60:1b:04:ad:49:15:64:06:
         c8:b8:6c:0e:2b:88:05:58:a5:8f:a9:91:60:0f:cc:79:2f:63:
         22:31:fa:9d:63:14:c0:f8:79:b0:e2:79:10:72:b2:23:03:a9:
         1b:b2:37:dc:ec:47:80:7a:24:a9:2f:ea:7d:e3:85:4c:2b:6b:
         ae:1c:ac:f2:6d:17:f1:85:94:c9:89:15:67:8a:36:51:4c:1b:
         8d:d5:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org