Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          S/DjwHeFUm7XJ1fkLiiR/nWcRzUa+sSXC2CnizMcMO0=
Subject key identifier:   E7:9D:01:66:9E:B1:04:41:20:D0:FC:B9:31:64:AF:FD:3F:F1:72:1D
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       4882E2CFD74855F72F4907CDCC1A8942728E2065
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:00 +0000
ROA not before:           Sun 31 Dec 2023 15:39:00 +0000
ROA not after:            Sun 29 Dec 2024 15:44:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:82:e2:cf:d7:48:55:f7:2f:49:07:cd:cc:1a:89:42:72:8e:20:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:00 2023 GMT
            Not After : Dec 29 15:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:76:d8:8a:4b:1a:0b:fe:55:13:1a:09:15:
                    d6:b7:07:14:7a:c8:92:1f:36:69:e4:48:e6:ec:ab:
                    ae:0e:7a:97:75:3a:d3:f2:a1:c6:d5:68:1d:24:78:
                    8a:f4:3d:06:69:94:84:80:4e:b1:d1:ee:11:ab:3f:
                    83:a2:32:2b:87:78:cf:31:c6:60:11:fc:42:30:bb:
                    d2:63:dd:89:89:c9:1f:4c:ca:3a:c7:71:1e:53:18:
                    01:a0:0e:e8:f8:1b:ce:8d:2a:27:38:0e:91:cc:f4:
                    df:65:cf:89:5c:ce:bd:40:34:f0:f2:47:5c:43:7f:
                    43:47:71:33:7a:99:14:fa:67:fe:8a:8b:4c:c7:e4:
                    56:ce:2e:fd:d2:d5:12:40:ce:62:8f:f4:84:d9:a2:
                    d2:a0:69:df:36:38:ec:90:36:0e:45:73:e0:0a:7c:
                    fc:7a:a9:2a:d2:f8:ab:80:e1:ad:b0:81:27:92:8d:
                    7a:c8:77:13:58:17:40:d1:69:ee:7d:f2:83:8a:ec:
                    ad:05:59:91:98:53:5b:40:b1:7e:da:b0:57:60:92:
                    84:be:fc:48:a9:3e:4a:ad:33:2e:58:49:87:28:bb:
                    24:a4:3e:06:dc:20:8a:f1:3d:08:0f:be:02:91:00:
                    59:a2:c4:b0:54:5d:92:d3:8c:46:c5:c2:11:0a:6c:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:01:66:9E:B1:04:41:20:D0:FC:B9:31:64:AF:FD:3F:F1:72:1D
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:82:14:0b:45:8c:2b:a1:ed:a7:a7:db:8f:6d:d3:01:95:
         5b:4c:c2:1d:87:56:78:8f:79:bc:75:36:c5:d0:9a:a3:ac:2c:
         ed:5c:68:27:a3:d6:b1:97:53:c5:c3:5f:96:48:3c:29:71:8f:
         ae:40:10:1f:16:90:86:79:30:57:aa:56:b4:d3:49:06:1a:a2:
         06:fd:9e:fd:62:e7:5f:31:ae:68:a7:0e:c6:d7:52:49:4c:4f:
         d8:a0:fb:10:5c:3c:a6:2a:6a:93:1a:ac:a8:c7:50:e0:c5:fe:
         a8:3e:5c:6d:32:09:c2:17:c6:66:d0:84:57:e7:a0:7d:b9:9c:
         e7:76:73:b2:5b:c7:d2:e1:72:0f:bf:e5:99:29:f2:6c:89:5f:
         ea:d8:18:42:a1:1d:00:61:a5:8c:ae:cf:21:e8:dd:b4:91:1a:
         c4:ae:f9:4b:1c:34:b5:45:f8:0f:42:d7:7e:bb:2c:fa:e5:ae:
         58:f6:24:26:4b:71:53:44:bf:63:7d:2e:3f:f8:f5:93:7c:14:
         02:98:7c:c7:2f:10:70:d7:a7:36:d0:1a:57:6b:2e:6b:0e:41:
         3d:81:0d:cf:b5:69:ba:b8:43:7f:9b:bf:a0:a5:2a:80:5c:a2:
         b6:2a:6d:39:4f:ab:2c:6c:a9:6e:6a:76:4c:1a:5a:c9:b8:41:
         0e:21:c1:be
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUSILiz9dIVfcvSQfNzBqJQnKOIGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yMzEyMzExNTM5MDBaFw0yNDEyMjkxNTQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTIwOTc2RDg4QTRCMUEwQkZF
NTUxMzFBMDkxNUQ2QjcwNzE0N0FDODkyMUYzNjY5RTQ0OEU2RUNBQkFFMEU3QTk3
NzUzQUQzRjJBMUM2RDU2ODFEMjQ3ODhBRjQzRDA2Njk5NDg0ODA0RUIxRDFFRTEx
QUIzRjgzQTIzMjJCODc3OENGMzFDNjYwMTFGQzQyMzBCQkQyNjNERDg5ODlDOTFG
NENDQTNBQzc3MTFFNTMxODAxQTAwRUU4RjgxQkNFOEQyQTI3MzgwRTkxQ0NGNERG
NjVDRjg5NUNDRUJENDAzNEYwRjI0NzVDNDM3RjQzNDc3MTMzN0E5OTE0RkE2N0ZF
OEE4QjRDQzdFNDU2Q0UyRUZERDJENTEyNDBDRTYyOEZGNDg0RDlBMkQyQTA2OURG
MzYzOEVDOTAzNjBFNDU3M0UwMEE3Q0ZDN0FBOTJBRDJGOEFCODBFMUFEQjA4MTI3
OTI4RDdBQzg3NzEzNTgxNzQwRDE2OUVFN0RGMjgzOEFFQ0FEMDU1OTkxOTg1MzVC
NDBCMTdFREFCMDU3NjA5Mjg0QkVGQzQ4QTkzRTRBQUQzMzJFNTg0OTg3MjhCQjI0
QTQzRTA2REMyMDhBRjEzRDA4MEZCRTAyOTEwMDU5QTJDNEIwNTQ1RDkyRDM4QzQ2
QzVDMjExMEE2QzBFRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAogl22IpLGgv+VRMaCRXWtwcUesiSHzZp5Ejm7KuuDnqXdTrT8qHG
1WgdJHiK9D0GaZSEgE6x0e4Rqz+DojIrh3jPMcZgEfxCMLvSY92JickfTMo6x3Ee
UxgBoA7o+BvOjSonOA6RzPTfZc+JXM69QDTw8kdcQ39DR3EzepkU+mf+iotMx+RW
zi790tUSQM5ij/SE2aLSoGnfNjjskDYORXPgCnz8eqkq0virgOGtsIEnko16yHcT
WBdA0WnuffKDiuytBVmRmFNbQLF+2rBXYJKEvvxIqT5KrTMuWEmHKLskpD4G3CCK
8T0ID74CkQBZosSwVF2S04xGxcIRCmwO0wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOedAWaesQRBIND8uTFkr/0/8XIdMB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMyMzgzMDM0M2EzMjYyNjMzODNh
NjIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIsDANBgkqhkiG9w0BAQsFAAOCAQEAW/KCFAtFjCuh7aen249t
0wGVW0zCHYdWeI95vHU2xdCao6ws7VxoJ6PWsZdTxcNflkg8KXGPrkAQHxaQhnkw
V6pWtNNJBhqiBv2e/WLnXzGuaKcOxtdSSUxP2KD7EFw8pipqkxqsqMdQ4MX+qD5c
bTIJwhfGZtCEV+egfbmc53ZzslvH0uFyD7/lmSnybIlf6tgYQqEdAGGljK7PIejd
tJEaxK75Sxw0tUX4D0LXfrss+uWuWPYkJktxU0S/Y30uP/j1k3wUAph8xy8QcNen
NtAaV2suaw5BPYENz7VpurhDf5u/oKUqgFyitiptOU+rLGypbmp2TBpaybhBDiHB
vg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org