Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          ZrFGbSrppw5WzZXilRaH8hjUW94HGievozLM+xpQDsY=
Subject key identifier:   1D:C3:7F:AE:B5:55:E7:63:46:8F:24:1D:78:58:0D:89:F4:91:85:9C
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       02F33335EF4E7972A90A1B7EAF4EB993A911651B
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:00 +0000
ROA not before:           Fri 29 Mar 2024 14:05:00 +0000
ROA not after:            Fri 28 Mar 2025 14:10:00 +0000
asID:                     265175
IP address blocks:        167.249.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:33:35:ef:4e:79:72:a9:0a:1b:7e:af:4e:b9:93:a9:11:65:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:00 2024 GMT
            Not After : Mar 28 14:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:fe:8e:df:21:60:e3:a9:e1:f9:2e:34:b3:
                    17:96:3b:77:23:15:1b:63:82:d0:33:f2:0d:60:0b:
                    cb:6d:47:09:b1:31:ac:29:3b:e4:e9:7f:9a:67:d1:
                    08:93:03:ed:3c:19:c4:ca:42:22:d7:ac:8d:aa:c0:
                    8d:76:f0:d8:75:5a:9e:e2:92:15:8e:f7:f7:2d:7b:
                    4f:38:b9:45:e6:3d:69:71:d9:b7:81:c0:1d:c2:19:
                    4e:6b:99:4b:a7:df:29:06:32:c6:5a:c2:d5:20:2d:
                    da:ff:14:96:8f:c1:2f:2d:c9:be:a9:f1:f3:2a:c1:
                    dd:d2:2b:c6:93:c9:1c:f9:48:93:26:0e:55:6a:2e:
                    2d:75:49:ec:4d:28:0d:a3:b2:37:4b:57:08:62:e0:
                    8c:eb:d5:54:2a:6a:17:02:67:aa:c4:fa:e4:5a:f8:
                    8f:b8:0b:89:90:7e:f8:e0:8a:a6:be:51:b8:12:05:
                    af:90:8f:33:f7:ec:4f:2d:78:0b:49:45:0e:de:79:
                    ac:4a:df:18:95:93:d9:4b:4d:d4:14:d3:c8:c3:87:
                    5b:38:85:73:c7:62:95:d2:95:13:7c:01:88:d7:11:
                    b7:54:99:fa:eb:81:d5:e4:64:c9:f4:06:94:4a:82:
                    37:8b:e6:fb:2f:62:6e:5f:b8:86:2a:fc:1b:ab:b2:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C3:7F:AE:B5:55:E7:63:46:8F:24:1D:78:58:0D:89:F4:91:85:9C
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:3b:5e:01:7c:61:4b:d5:9c:e2:41:23:c8:8c:3f:97:8b:70:
         a7:e1:40:a9:62:28:4d:09:91:13:4d:9d:0a:16:47:c6:9d:52:
         0b:26:4a:60:f3:ea:a5:83:1e:d4:cf:b8:d2:c5:2c:93:6a:cb:
         3d:06:82:fd:12:3b:d5:26:cf:ef:7d:b0:02:9a:de:a3:79:37:
         83:be:07:53:68:da:53:10:56:0e:4e:41:3a:de:5d:a8:a2:e9:
         9c:c8:e7:1b:dd:f4:d0:7a:54:21:a3:1e:1f:aa:13:6e:b9:91:
         0d:89:12:f1:c7:01:cf:3d:43:ed:ff:c5:5f:e4:df:6a:97:29:
         24:c9:20:f3:2f:35:a7:fc:cc:98:4d:da:0f:fa:f6:83:0b:88:
         15:f3:a4:3c:ff:f4:5e:33:62:f1:07:71:27:5c:8e:3a:2f:32:
         70:b2:f2:d5:89:c7:d2:4e:e6:82:74:4e:59:c3:57:c0:14:10:
         5f:5d:fc:f3:02:ce:73:75:81:3b:20:c0:6c:8e:7d:a9:b7:57:
         d3:ce:16:85:92:0b:f5:16:09:c4:27:9b:e2:88:18:5c:a2:b0:
         67:9f:c9:30:b3:b7:aa:ba:2e:57:9a:1f:a8:39:a7:ab:15:d8:
         e8:cb:ec:87:f4:7f:ce:13:4a:e5:49:1d:05:f0:9e:65:47:42:
         e8:08:fc:e4
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUAvMzNe9OeXKpCht+r065k6kRZRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yNDAzMjkxNDA1MDBaFw0yNTAzMjgxNDEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ5OEZFOEVERjIxNjBFM0E5
RTFGOTJFMzRCMzE3OTYzQjc3MjMxNTFCNjM4MkQwMzNGMjBENjAwQkNCNkQ0NzA5
QjEzMUFDMjkzQkU0RTk3RjlBNjdEMTA4OTMwM0VEM0MxOUM0Q0E0MjIyRDdBQzhE
QUFDMDhENzZGMEQ4NzU1QTlFRTI5MjE1OEVGN0Y3MkQ3QjRGMzhCOTQ1RTYzRDY5
NzFEOUI3ODFDMDFEQzIxOTRFNkI5OTRCQTdERjI5MDYzMkM2NUFDMkQ1MjAyRERB
RkYxNDk2OEZDMTJGMkRDOUJFQTlGMUYzMkFDMURERDIyQkM2OTNDOTFDRjk0ODkz
MjYwRTU1NkEyRTJENzU0OUVDNEQyODBEQTNCMjM3NEI1NzA4NjJFMDhDRUJENTU0
MkE2QTE3MDI2N0FBQzRGQUU0NUFGODhGQjgwQjg5OTA3RUY4RTA4QUE2QkU1MUI4
MTIwNUFGOTA4RjMzRjdFQzRGMkQ3ODBCNDk0NTBFREU3OUFDNEFERjE4OTU5M0Q5
NEI0REQ0MTREM0M4QzM4NzVCMzg4NTczQzc2Mjk1RDI5NTEzN0MwMTg4RDcxMUI3
NTQ5OUZBRUI4MUQ1RTQ2NEM5RjQwNjk0NEE4MjM3OEJFNkZCMkY2MjZFNUZCODg2
MkFGQzFCQUJCMjgzMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtJj+jt8hYOOp4fkuNLMXljt3IxUbY4LQM/INYAvLbUcJsTGsKTvk
6X+aZ9EIkwPtPBnEykIi16yNqsCNdvDYdVqe4pIVjvf3LXtPOLlF5j1pcdm3gcAd
whlOa5lLp98pBjLGWsLVIC3a/xSWj8EvLcm+qfHzKsHd0ivGk8kc+UiTJg5Vai4t
dUnsTSgNo7I3S1cIYuCM69VUKmoXAmeqxPrkWviPuAuJkH744IqmvlG4EgWvkI8z
9+xPLXgLSUUO3nmsSt8YlZPZS03UFNPIw4dbOIVzx2KV0pUTfAGI1xG3VJn664HV
5GTJ9AaUSoI3i+b7L2JuX7iGKvwbq7KDHwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FB3Df661VedjRo8kHXhYDYn0kYWcMB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMxMzYzNzJlMzIzNDM5MmUzMjMw
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACn+dEwDQYJKoZIhvcNAQELBQADggEBAEs7XgF8YUvVnOJBI8iMP5eLcKfhQKli
KE0JkRNNnQoWR8adUgsmSmDz6qWDHtTPuNLFLJNqyz0Ggv0SO9Umz+99sAKa3qN5
N4O+B1No2lMQVg5OQTreXaii6ZzI5xvd9NB6VCGjHh+qE265kQ2JEvHHAc89Q+3/
xV/k32qXKSTJIPMvNaf8zJhN2g/69oMLiBXzpDz/9F4zYvEHcSdcjjovMnCy8tWJ
x9JO5oJ0TlnDV8AUEF9d/PMCznN1gTsgwGyOfam3V9POFoWSC/UWCcQnm+KIGFyi
sGefyTCzt6q6LleaH6g5p6sV2OjL7If0f84TSuVJHQXwnmVHQugI/OQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org