Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          RZ4JCnKn3gMgYrlQYkezQc9XmuZ0zt3p51pYlZVb8oo=
Subject key identifier:   4F:62:3E:FA:B8:F6:1E:6B:85:34:C4:25:92:89:BC:9C:94:32:FF:BC
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       5569913A354714C813C383CEAB7C34F7C2BE054C
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:01 +0000
ROA not before:           Sun 31 Dec 2023 15:39:01 +0000
ROA not after:            Sun 29 Dec 2024 15:44:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:69:91:3a:35:47:14:c8:13:c3:83:ce:ab:7c:34:f7:c2:be:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:01 2023 GMT
            Not After : Dec 29 15:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:16:54:ef:b3:2b:16:2a:f8:6d:5c:27:05:
                    88:ad:1c:0a:39:bc:ae:82:ae:e5:ef:dc:64:ae:5e:
                    5e:42:17:9a:6a:2f:16:c4:4f:cd:70:56:87:25:e8:
                    10:24:08:f1:46:e4:43:c1:4e:7e:9a:ae:d9:2b:50:
                    65:3b:94:4a:2f:ac:a8:5e:23:e2:ee:63:7d:c9:08:
                    71:17:06:57:d5:37:a7:e9:a0:d7:b3:8b:cf:98:38:
                    df:29:dc:3c:1b:6a:98:6e:3f:a5:50:a2:fe:e3:a5:
                    52:37:8c:6e:65:1c:69:6f:23:29:fd:e9:a0:a3:2a:
                    60:03:7a:b0:e0:a9:a3:f7:3f:49:83:1e:47:4b:e8:
                    c6:16:9e:c4:27:8a:b5:fc:24:44:23:3e:aa:e5:52:
                    09:a2:d2:2a:7b:82:68:c2:05:fb:65:60:28:b0:15:
                    d9:93:bd:29:38:0e:41:5e:81:3c:27:6d:d2:f0:f3:
                    2e:77:4f:57:df:43:08:fe:22:9d:d8:ad:d8:c1:db:
                    1b:53:95:2f:44:ce:02:cc:0f:0c:a6:d2:a3:fe:82:
                    67:12:f4:d4:ca:e9:4b:37:81:84:e7:07:48:b7:1b:
                    f3:f5:2f:81:a8:9f:e0:9c:a4:d6:26:9f:71:09:82:
                    1f:50:09:65:3c:4c:10:d0:1b:0c:61:16:aa:f0:16:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:62:3E:FA:B8:F6:1E:6B:85:34:C4:25:92:89:BC:9C:94:32:FF:BC
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:62:98:2d:cf:77:4e:3a:9e:e3:6e:c4:2b:22:49:98:69:bb:
         a2:9e:2b:77:c6:81:02:e8:c5:f9:69:63:b0:f2:7f:25:d7:7d:
         c2:52:1b:a9:7b:1c:d2:a6:b3:39:d4:ee:70:46:f6:a0:60:10:
         b8:46:f4:9c:a2:72:77:91:fe:0a:ab:c5:9a:96:f6:1d:6b:1b:
         94:24:3d:30:f5:b6:82:b8:3d:a5:e4:13:84:a9:70:bd:6c:c4:
         72:19:1b:72:bd:43:f4:4e:86:cb:41:c3:ca:f2:b7:fe:7e:bb:
         62:53:e3:cb:95:32:79:93:3c:7d:fe:ee:6d:8b:70:a2:9f:3a:
         81:7a:53:82:55:4e:9d:7a:58:04:1b:1b:19:5a:ed:78:24:5e:
         e6:c8:ff:e7:a2:97:fa:8e:70:7b:f3:cb:3d:d9:bd:ca:cf:d2:
         5f:96:45:ec:e9:c1:1f:ee:e7:a1:69:32:0f:20:b8:e1:32:7d:
         09:f8:14:81:b7:b6:6d:98:c1:0c:44:b2:2b:bc:de:54:f4:23:
         eb:5c:c0:05:3c:ee:b5:81:86:a2:50:84:93:60:32:5a:fd:74:
         a5:72:02:06:f5:f5:b8:94:52:aa:4e:9c:81:05:43:c2:53:6a:
         76:6d:20:d6:5a:24:4d:ff:81:9a:6f:f7:09:f9:43:93:b2:f4:
         34:d1:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org