Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36332e302f32342d3234203d3e20323635303038.roa
File:                     3137302e302e36332e302f32342d3234203d3e20323635303038.roa (raw, json)
Hash identifier:          F/DlEI9SwNlebcQuLNtISQ3SWIqDYffivaxIg6+xgok=
Subject key identifier:   B2:42:78:33:F4:9F:25:BF:A8:F2:16:C9:2A:3C:DF:4A:13:40:30:51
Certificate issuer:       /CN=9BF4C504127062EA15EF9A1D492CA846D91F8226
Certificate serial:       1F8ABF2262E382C42F2DEF98E6CC28EF8C715671
Authority key identifier: 9B:F4:C5:04:12:70:62:EA:15:EF:9A:1D:49:2C:A8:46:D9:1F:82:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BF4C504127062EA15EF9A1D492CA846D91F8226.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36332e302f32342d3234203d3e20323635303038.roa
Signing time:             Fri 18 Aug 2023 15:22:53 +0000
ROA not before:           Fri 18 Aug 2023 15:17:53 +0000
ROA not after:            Fri 16 Aug 2024 15:22:53 +0000
asID:                     265008
IP address blocks:        170.0.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8a:bf:22:62:e3:82:c4:2f:2d:ef:98:e6:cc:28:ef:8c:71:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF4C504127062EA15EF9A1D492CA846D91F8226
        Validity
            Not Before: Aug 18 15:17:53 2023 GMT
            Not After : Aug 16 15:22:53 2024 GMT
        Subject: CN=B2427833F49F25BFA8F216C92A3CDF4A13403051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:0e:ed:07:4c:27:c0:3c:cc:09:8e:9b:48:
                    73:60:33:06:c8:3b:b7:c4:3d:e9:55:6f:f3:5d:12:
                    4b:bc:82:db:3b:98:b1:c2:81:eb:1e:b0:0f:5a:e1:
                    28:01:06:33:59:83:55:a0:1d:61:44:dd:60:ee:b0:
                    15:dc:8d:c9:af:85:4e:26:00:2b:21:7e:7a:6c:e5:
                    ed:c4:b4:52:b2:eb:cc:65:23:f0:8d:99:44:3b:c8:
                    f1:09:b1:63:d2:d1:48:a5:c9:25:d3:cc:b0:d3:cb:
                    41:4d:77:54:55:b9:7d:d5:70:bc:96:aa:66:fc:9b:
                    d0:2f:91:80:0c:81:af:17:b0:ed:b2:9f:cb:e7:fe:
                    2a:1b:eb:4d:f4:ed:67:39:83:cb:b0:1f:8a:2b:96:
                    68:20:b4:db:15:b8:29:9f:f6:3b:47:c8:61:3c:3e:
                    58:a9:de:e8:88:10:e8:3e:a3:34:02:75:87:30:69:
                    91:80:77:b9:5d:7a:9d:fa:89:75:28:42:52:41:9f:
                    c6:b0:51:de:43:3e:d3:0c:69:b5:da:2d:8b:dd:a5:
                    31:0e:04:09:8e:7b:65:c8:52:99:b8:af:34:55:b0:
                    7e:43:09:4c:24:d0:c2:0d:5c:15:f6:72:2f:8f:50:
                    8c:f4:b7:40:f2:32:8a:af:69:06:b9:ec:f7:32:f0:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:78:33:F4:9F:25:BF:A8:F2:16:C9:2A:3C:DF:4A:13:40:30:51
            X509v3 Authority Key Identifier:
                keyid:9B:F4:C5:04:12:70:62:EA:15:EF:9A:1D:49:2C:A8:46:D9:1F:82:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/9BF4C504127062EA15EF9A1D492CA846D91F8226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BF4C504127062EA15EF9A1D492CA846D91F8226.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36332e302f32342d3234203d3e20323635303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:09:e5:3e:b0:c1:66:b1:bf:04:60:05:36:2d:f6:4d:c4:
         39:2f:60:e0:5d:36:c6:8c:2c:0d:f7:e4:81:bd:a6:e3:c9:2f:
         d4:0c:21:04:8e:a8:d5:d8:c2:58:f3:f5:ff:1d:b6:51:73:29:
         bd:46:16:6d:04:2d:c3:15:52:a4:cc:6a:ea:ac:59:df:59:0c:
         51:aa:3f:f3:6b:e3:17:a8:12:be:01:6b:fb:3d:0c:5c:0d:cc:
         41:3a:d5:34:b7:bf:05:c9:b5:8b:34:78:40:61:8c:58:0e:82:
         26:96:6b:a1:02:06:0d:d4:3c:32:87:40:34:b1:96:91:b9:69:
         a3:dc:86:96:f6:85:8d:a9:8f:dc:a1:68:0d:ca:84:f8:7e:49:
         6b:14:e1:e9:1f:08:bd:50:4b:47:1a:c9:54:ee:d4:20:da:99:
         d7:9d:a9:65:54:b4:c7:8f:19:fa:50:ce:5e:19:c8:3d:8b:45:
         ac:c2:a1:db:25:55:e8:ac:f7:5c:b3:7d:1e:b2:a3:95:6a:d5:
         ab:ec:be:5c:fe:09:6e:7b:43:bc:ea:fa:ed:3a:28:31:c6:05:
         73:47:42:63:db:c8:c8:fb:df:90:92:bc:fc:da:b2:07:e5:99:
         0e:c3:84:e2:10:47:84:32:45:b6:26:ce:3a:c7:81:a1:a9:ae:
         f2:e6:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org