Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          k0ku+BqnJP7csaxuUwwv4NkLPCHShx4V+S75k7oYq8M=
Subject key identifier:   FE:8D:C8:1B:0C:18:9E:A4:69:3E:C3:0B:F5:7F:83:AB:97:74:4C:D8
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       425032C671143DD4DEEF57396481A0FBF16B2E6F
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:08:00 +0000
ROA not before:           Fri 29 Mar 2024 14:03:00 +0000
ROA not after:            Fri 28 Mar 2025 14:08:00 +0000
asID:                     265175
IP address blocks:        167.249.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:32:c6:71:14:3d:d4:de:ef:57:39:64:81:a0:fb:f1:6b:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:03:00 2024 GMT
            Not After : Mar 28 14:08:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:d1:60:84:3b:70:2d:36:83:a1:cc:99:67:
                    e3:7d:dd:3b:57:73:ee:8f:fa:fb:36:a2:9a:24:f5:
                    de:95:70:c1:44:3e:ef:f2:a4:cf:d3:fc:d3:c0:32:
                    48:10:b0:53:f3:82:68:62:04:45:c6:27:4e:79:7e:
                    4e:fc:44:68:ac:b8:06:d4:d5:77:1a:01:c8:16:b6:
                    11:74:7d:de:e5:77:5b:20:8c:82:30:28:0a:a0:1e:
                    8f:b3:71:58:13:57:ec:62:42:89:74:f9:b6:51:3b:
                    ab:36:b7:d0:6d:94:ce:77:c7:9f:7f:51:30:f4:b5:
                    ca:08:89:b9:53:66:1b:47:0a:a2:9f:f3:5c:ac:e2:
                    53:0e:e0:dc:e0:fa:9a:ff:4f:33:88:71:9d:2b:d8:
                    ce:60:a2:48:56:80:12:f0:c3:b2:28:20:01:22:0b:
                    c1:fb:af:c6:59:c2:68:1c:b5:81:31:7f:d0:29:0b:
                    86:bc:87:64:fd:3f:80:8a:81:17:19:9e:e1:d9:5f:
                    5d:f8:d2:19:5e:d4:e5:39:b6:ca:34:f5:c6:dc:73:
                    05:85:0b:46:81:7a:53:e2:85:52:0e:8b:29:e1:e6:
                    5f:bb:d2:bf:38:a4:76:5a:ae:62:a6:dc:ec:b1:f5:
                    71:db:1c:68:1b:b3:82:d5:48:7b:6e:b3:6c:b6:ee:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:C8:1B:0C:18:9E:A4:69:3E:C3:0B:F5:7F:83:AB:97:74:4C:D8
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:b0:17:85:4f:fd:b5:66:a0:6a:26:4b:c6:06:62:74:cb:
         ef:0b:b3:4f:c6:c9:5e:b2:d3:95:7b:c8:66:b6:f9:ad:06:1d:
         ab:72:13:d4:22:b7:2a:e6:37:ff:19:14:a9:ff:95:21:45:93:
         46:30:b4:01:4f:22:7e:c7:8f:c3:4d:24:29:e8:a3:4e:5c:b2:
         14:f9:cd:5a:9a:8b:8d:4c:05:0e:49:85:0d:5d:91:9d:54:f0:
         3c:68:99:52:15:cd:be:e5:25:28:52:3f:8b:cb:71:3a:d9:30:
         dc:bd:ae:fe:ad:df:81:bd:6e:b6:cf:61:9c:0e:b8:23:5c:bf:
         3e:e6:ef:94:1a:66:45:d2:c8:10:6c:94:1c:08:52:f6:a0:04:
         54:9e:d5:55:97:e1:35:5f:ef:31:4b:4e:de:b7:a1:cf:5a:4a:
         a5:18:ab:b3:76:ef:2b:da:f3:a4:92:39:e2:ed:0d:bd:6a:e4:
         fe:93:ef:4f:04:52:df:a3:a6:80:fe:fe:21:3f:ae:4a:7c:bb:
         3f:5a:7a:34:39:50:75:f4:27:f2:80:59:ae:e3:c1:02:fa:25:
         e5:85:c1:01:66:73:02:80:e3:6a:2b:59:4b:d4:12:b2:2a:eb:
         33:77:6c:68:cd:ed:b9:1f:a1:25:8c:d4:0a:85:bf:36:1a:74:
         e5:53:f5:b8
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUQlAyxnEUPdTe71c5ZIGg+/FrLm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQkMxNzZERjgyQjk3QzIwQzMyOURDRkYxRDE4Njky
RUM1NTIwNzAeFw0yNDAzMjkxNDAzMDBaFw0yNTAzMjgxNDA4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2OUQxNjA4NDNCNzAyRDM2
ODNBMUNDOTk2N0UzN0RERDNCNTc3M0VFOEZGQUZCMzZBMjlBMjRGNURFOTU3MEMx
NDQzRUVGRjJBNENGRDNGQ0QzQzAzMjQ4MTBCMDUzRjM4MjY4NjIwNDQ1QzYyNzRF
Nzk3RTRFRkM0NDY4QUNCODA2RDRENTc3MUEwMUM4MTZCNjExNzQ3RERFRTU3NzVC
MjA4QzgyMzAyODBBQTAxRThGQjM3MTU4MTM1N0VDNjI0Mjg5NzRGOUI2NTEzQkFC
MzZCN0QwNkQ5NENFNzdDNzlGN0Y1MTMwRjRCNUNBMDg4OUI5NTM2NjFCNDcwQUEy
OUZGMzVDQUNFMjUzMEVFMERDRTBGQTlBRkY0RjMzODg3MTlEMkJEOENFNjBBMjQ4
NTY4MDEyRjBDM0IyMjgyMDAxMjIwQkMxRkJBRkM2NTlDMjY4MUNCNTgxMzE3RkQw
MjkwQjg2QkM4NzY0RkQzRjgwOEE4MTE3MTk5RUUxRDk1RjVERjhEMjE5NUVENEU1
MzlCNkNBMzRGNUM2REM3MzA1ODUwQjQ2ODE3QTUzRTI4NTUyMEU4QjI5RTFFNjVG
QkJEMkJGMzhBNDc2NUFBRTYyQTZEQ0VDQjFGNTcxREIxQzY4MUJCMzgyRDU0ODdC
NkVCMzZDQjZFRTJEMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2nRYIQ7cC02g6HMmWfjfd07V3Puj/r7NqKaJPXelXDBRD7v8qTP
0/zTwDJIELBT84JoYgRFxidOeX5O/ERorLgG1NV3GgHIFrYRdH3e5XdbIIyCMCgK
oB6Ps3FYE1fsYkKJdPm2UTurNrfQbZTOd8eff1Ew9LXKCIm5U2YbRwqin/NcrOJT
DuDc4Pqa/08ziHGdK9jOYKJIVoAS8MOyKCABIgvB+6/GWcJoHLWBMX/QKQuGvIdk
/T+AioEXGZ7h2V9d+NIZXtTlObbKNPXG3HMFhQtGgXpT4oVSDosp4eZfu9K/OKR2
Wq5iptzssfVx2xxoG7OC1Uh7brNstu4tAwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FP6NyBsMGJ6kaT7DC/V/g6uXdEzYMB8GA1UdIwQYMBaAFN7bwXbfgrl8IMMp3P8d
GGkuxVIHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzAvREVEQkMxNzZERjgyQjk3
QzIwQzMyOURDRkYxRDE4NjkyRUM1NTIwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERURCQzE3NkRGODJCOTdDMjBDMzI5RENGRjFEMTg2OTJFQzU1
MjA3LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8wLzMxMzYzNzJlMzIzNDM5MmUzMjMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACn+dMwDQYJKoZIhvcNAQELBQADggEBAKbUsBeFT/21ZqBqJkvGBmJ0y+8Ls0/G
yV6y05V7yGa2+a0GHatyE9QityrmN/8ZFKn/lSFFk0YwtAFPIn7Hj8NNJCnoo05c
shT5zVqai41MBQ5JhQ1dkZ1U8DxomVIVzb7lJShSP4vLcTrZMNy9rv6t34G9brbP
YZwOuCNcvz7m75QaZkXSyBBslBwIUvagBFSe1VWX4TVf7zFLTt63oc9aSqUYq7N2
7yva86SSOeLtDb1q5P6T708EUt+jpoD+/iE/rkp8uz9aejQ5UHX0J/KAWa7jwQL6
JeWFwQFmcwKA42orWUvUErIq6zN3bGjN7bkfoSWM1AqFvzYadOVT9bg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org