Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          vS178gZc9IZllxMJ/Koh1ei+WPpP43uvq96s1SvzspI=
Subject key identifier:   EC:01:87:17:85:7E:93:95:8E:D4:3E:49:E7:15:B8:08:C2:84:DD:EE
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       0D9A8BC9925A7E83E600B5DF42E4F79F716411C2
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9a:8b:c9:92:5a:7e:83:e6:00:b5:df:42:e4:f7:9f:71:64:11:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:50:0b:03:0e:8b:0b:c3:28:72:e5:19:fd:
                    59:07:e8:26:d1:80:3c:85:9f:4b:45:77:b6:d0:3f:
                    16:31:3b:ca:cd:d7:b9:2f:3d:ae:c0:f6:20:e7:aa:
                    68:0f:40:7a:de:f1:5f:22:47:63:91:11:5d:05:38:
                    22:58:df:d9:7c:33:f6:35:39:c6:18:fb:41:47:05:
                    5b:a0:bc:a0:78:85:c1:ac:91:23:8f:53:b2:ff:8a:
                    a8:93:04:cb:bf:08:f4:b6:a1:95:10:93:df:7b:bb:
                    4a:40:52:f0:21:43:65:a8:37:94:fe:76:48:39:59:
                    a0:68:9e:44:a0:d2:c0:43:ee:e9:6b:07:b1:92:09:
                    54:3b:f6:b8:96:79:99:b3:73:67:af:99:78:2d:aa:
                    07:8a:c0:c0:63:e4:ee:87:89:92:d5:e3:99:28:0c:
                    d0:fa:fd:8d:b1:6a:0a:66:c2:3b:9e:15:e3:7e:ff:
                    9b:f5:9a:86:6e:10:93:8e:63:88:b7:36:a6:2a:7d:
                    c5:82:8e:7a:3c:42:8a:75:f8:ff:e6:07:2f:f5:ce:
                    4c:0c:a4:2c:0c:71:7c:70:98:d4:fe:b8:7e:50:fe:
                    5b:62:07:1d:87:29:c7:c1:9d:28:08:f7:8b:44:c2:
                    b3:e2:ca:a2:9d:b0:6e:1a:84:04:06:2f:43:f5:0b:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:01:87:17:85:7E:93:95:8E:D4:3E:49:E7:15:B8:08:C2:84:DD:EE
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:df:99:87:5e:1d:d3:e3:f9:64:27:9a:27:13:48:2f:a3:ea:
         f0:2f:99:9f:03:e1:f7:24:67:22:4c:45:0e:7d:77:33:c9:fc:
         e7:ce:34:00:8a:00:b7:09:5e:4c:a3:0b:33:29:db:95:8d:e7:
         39:0c:a3:29:1a:fd:64:f8:f4:45:b4:1c:be:38:ee:ac:18:d5:
         c1:15:4b:90:0d:78:2a:8f:e9:a9:2d:f7:18:ba:3e:98:2d:29:
         56:25:96:e3:a3:12:bc:47:6c:10:b8:e8:64:e2:9c:c9:04:19:
         0b:2b:62:a3:07:ad:8f:90:2a:5f:ac:cc:75:e4:94:a7:d4:49:
         a5:ff:92:b3:c8:4d:da:cb:0b:ff:2c:59:fc:75:d4:40:ab:cd:
         58:fc:9a:8a:f1:82:8c:2f:f4:3e:fc:4c:34:36:4b:e6:de:48:
         3e:f5:ae:d5:45:e8:84:e5:d5:83:a4:69:a9:ce:d9:21:d0:7c:
         40:d0:3f:44:93:55:aa:87:7d:a0:db:45:ee:17:14:4c:65:1e:
         a0:17:1a:ab:f4:13:f5:55:53:f1:f3:c5:0c:45:1c:e8:62:74:
         a5:2f:ff:f0:fd:44:1e:66:3f:f6:a0:63:90:c9:85:94:da:e3:
         0f:39:c6:45:1b:bf:ad:d6:16:ce:3a:85:6d:8c:2d:f4:c2:c8:
         19:31:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org