Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          c2Mrc5Z8Ph2LZSFiqeiSKVAvV/glf7IAfcb1EB4m4Lc=
Subject key identifier:   CA:7A:43:59:7F:A5:AC:B2:A6:EB:2F:7F:C8:5B:D1:53:38:F3:1A:75
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       6B670F4957FEDE6C637A39E2F981B7D0E52D8CEA
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:46:00 +0000
ROA not before:           Sun 31 Dec 2023 15:41:00 +0000
ROA not after:            Sun 29 Dec 2024 15:46:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:67:0f:49:57:fe:de:6c:63:7a:39:e2:f9:81:b7:d0:e5:2d:8c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:41:00 2023 GMT
            Not After : Dec 29 15:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:a8:d7:5e:2c:da:69:16:a9:73:9d:79:7c:
                    b6:e1:27:78:38:58:4a:ae:cf:b5:59:52:36:eb:ee:
                    bd:1f:90:70:7a:d3:07:4b:8f:37:cb:1d:ea:93:45:
                    33:e3:5b:ed:3c:0c:55:15:c5:ec:1e:9a:70:1d:eb:
                    6b:ca:eb:a3:a9:e9:9f:f1:15:26:34:e5:2f:fa:12:
                    10:02:05:15:be:e7:e5:1f:2f:24:1d:0c:79:df:d2:
                    db:9e:7a:88:02:7f:05:3a:7f:02:ae:e9:88:90:57:
                    5c:ab:b9:7c:28:d9:60:2b:71:ca:ae:6b:3c:fd:2e:
                    aa:2b:17:dc:a4:ef:27:14:b9:f9:19:0e:19:7a:1c:
                    81:88:30:62:75:1b:ef:46:7e:b2:de:35:28:13:02:
                    f2:7f:91:e2:ce:5a:88:37:a8:f1:72:7d:c0:ae:76:
                    83:54:c7:47:02:3c:c8:16:c1:c6:ca:df:d4:1e:63:
                    df:80:9f:1c:46:4e:15:d5:7a:59:85:98:d4:64:a3:
                    53:20:92:83:44:53:88:60:3b:a9:22:30:96:2a:2d:
                    05:a6:cf:48:f0:24:45:7c:55:c7:4c:5d:25:90:09:
                    a3:1e:db:f0:90:a7:a6:b9:d4:f2:4b:20:11:45:69:
                    1c:dd:18:ad:ff:38:ee:db:20:65:67:60:a2:9b:4e:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7A:43:59:7F:A5:AC:B2:A6:EB:2F:7F:C8:5B:D1:53:38:F3:1A:75
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:a0:b3:9b:5e:1a:01:2a:24:f7:d6:5c:83:ff:a7:40:52:
         3f:7a:79:16:8a:72:cd:e7:2e:6d:58:b6:42:b6:59:31:d2:e7:
         28:2c:cc:5d:a9:dc:25:96:cf:e0:46:99:2e:78:71:f0:84:9c:
         19:ba:b6:3b:f7:a0:47:58:74:15:97:d5:33:31:92:3a:38:95:
         45:b0:5d:16:ac:6d:ee:b8:8b:39:af:b6:5d:77:a3:e2:0e:0e:
         be:3a:de:61:04:a8:20:50:71:2d:33:98:31:40:3c:83:57:c7:
         9b:9a:03:6c:73:47:f7:0b:8b:02:d7:7e:23:5f:46:a1:69:60:
         e8:f8:0b:b2:a7:9b:bf:3c:7f:5a:34:30:59:96:c1:9b:5d:a7:
         ce:56:4d:50:4a:e8:04:4a:54:f0:57:16:88:57:8d:cf:e7:f7:
         b5:f0:75:52:83:d2:d5:9f:e3:b2:b9:66:93:6e:d2:2e:0b:a4:
         19:1f:9b:62:65:96:67:db:74:9e:77:70:75:d7:25:8b:5c:d3:
         63:2d:8b:8c:ac:c0:9b:54:97:45:f3:05:ef:e6:40:ef:0a:24:
         eb:03:32:41:59:d6:81:36:45:8f:8f:18:6d:95:fe:2a:f3:1c:
         a3:5c:86:99:01:b3:58:e5:0f:b9:b4:2e:27:9f:3b:29:2f:2c:
         72:99:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org