Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
File:                     3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          m2gRncOiku0Nn/04sE7GEdTNSyJelofne3fjGnOeiW0=
Subject key identifier:   07:08:74:CE:D8:11:15:47:E3:33:D7:2E:39:EC:85:82:7C:DA:D1:06
Certificate issuer:       /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial:       44DF282B702C113A2C4BE17DFD617265189A7CF5
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
Signing time:             Thu 14 Dec 2023 12:52:35 +0000
ROA not before:           Thu 14 Dec 2023 12:47:35 +0000
ROA not after:            Thu 12 Dec 2024 12:52:35 +0000
asID:                     265080
IP address blocks:        170.233.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:28:2b:70:2c:11:3a:2c:4b:e1:7d:fd:61:72:65:18:9a:7c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
        Validity
            Not Before: Dec 14 12:47:35 2023 GMT
            Not After : Dec 12 12:52:35 2024 GMT
        Subject: CN=070874CED8111547E333D72E39EC85827CDAD106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:f6:c1:a6:8d:19:45:9f:c8:04:95:c6:b0:
                    39:fe:95:4e:0d:94:12:39:42:22:11:ef:81:d9:b0:
                    dc:88:34:50:b3:01:ed:96:c5:fe:e9:8a:ea:c9:6e:
                    7b:e2:ac:61:2e:fa:1e:88:4c:9a:b4:4d:84:02:2f:
                    0f:29:35:6d:74:e7:43:12:c3:d8:02:6f:1c:52:93:
                    95:7e:b3:d4:2f:ea:42:30:93:18:ab:68:2d:10:59:
                    f3:4c:7d:fe:2b:09:c1:cb:f4:c6:c9:a9:5a:95:e9:
                    c9:7f:e7:f0:f5:1d:0c:e7:2a:a9:5a:c6:22:8c:87:
                    b6:f0:77:49:23:88:24:a7:29:75:8b:08:98:3b:f6:
                    5d:97:1f:4e:bc:17:eb:0d:13:84:f3:da:f1:e5:fd:
                    f4:b7:79:0b:ce:1e:d7:81:47:12:15:21:c7:f7:77:
                    04:e9:21:6a:58:9d:8c:62:74:fd:50:b8:86:85:e8:
                    17:bb:8e:89:6c:bc:8a:f2:55:47:67:25:e6:32:62:
                    fd:50:ac:6b:aa:74:e2:43:c0:2b:57:e1:9e:12:f3:
                    a4:27:53:9f:7a:86:8e:da:a7:27:bc:60:88:5c:e4:
                    ef:ef:5d:a4:14:91:b6:b8:d2:bb:f5:5f:64:1f:13:
                    d5:08:be:82:30:2d:e9:4b:ed:f6:f1:55:83:8c:46:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:74:CE:D8:11:15:47:E3:33:D7:2E:39:EC:85:82:7C:DA:D1:06
            X509v3 Authority Key Identifier:
                keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:d6:8d:9c:62:c4:bb:f5:36:89:f4:4a:2a:d7:46:a9:be:
         b4:b3:41:3a:76:b7:8a:47:ba:b1:2e:a3:e2:cd:fb:4c:2e:8a:
         98:e2:00:4e:91:0f:db:16:4e:5e:7c:d0:e2:1c:e6:81:f9:d0:
         a4:0a:b0:72:e6:07:b3:82:54:1a:ff:1d:b1:09:e6:9b:64:bc:
         c7:7a:2d:1b:34:8a:9d:83:64:d7:63:07:cf:c3:e1:3b:de:f1:
         30:3b:3f:83:f8:dd:0a:61:fc:39:ea:dd:5d:b4:b4:46:65:7d:
         80:73:d9:f8:44:f9:c9:c7:9d:9c:d5:05:fd:f6:5e:1b:58:f4:
         40:27:e2:38:9b:6d:b3:6e:7b:7a:39:e0:4d:05:79:f6:60:0c:
         68:0c:2d:3e:83:0d:a7:54:a0:eb:95:e5:18:6e:34:85:25:dc:
         e1:36:e3:23:18:d8:36:11:93:c3:49:e2:b7:46:56:2b:65:1c:
         d5:65:20:88:0a:5f:01:8c:5a:67:76:8c:11:16:73:4b:64:07:
         2b:d9:6c:07:d6:3b:13:f0:b1:dd:0a:5a:84:89:31:84:a3:3e:
         84:fd:6c:2d:b7:7a:1b:e5:c1:1f:c9:88:66:65:df:15:bd:18:
         6e:64:ab:4c:23:8a:50:cc:4f:d6:c3:86:cc:ce:c8:24:15:9e:
         8b:e2:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org