Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa (raw, json)
Hash identifier:          O3GENL/S0Bc9UYhqCEDrHGxC6Dxch36c+K6pyuzAHyM=
Subject key identifier:   B2:4B:52:31:40:89:DA:29:B3:49:CA:78:73:9A:77:C6:F6:1D:D4:A1
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       1A0C19AFCE54EDB902D9FD4DB32A6A48EC957A91
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:00:56 +0000
ROA not before:           Wed 28 Feb 2024 13:55:56 +0000
ROA not after:            Wed 26 Feb 2025 14:00:56 +0000
asID:                     267420
IP address blocks:        170.231.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:19:af:ce:54:ed:b9:02:d9:fd:4d:b3:2a:6a:48:ec:95:7a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:55:56 2024 GMT
            Not After : Feb 26 14:00:56 2025 GMT
        Subject: CN=B24B52314089DA29B349CA78739A77C6F61DD4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:4c:47:75:36:2e:52:07:53:04:97:39:95:
                    0a:82:ad:d0:58:91:58:12:e5:4e:31:31:19:bd:11:
                    1f:0c:a0:2b:59:3c:5e:68:42:d2:6e:c3:1e:16:3b:
                    df:25:97:ce:cd:66:37:6d:71:79:8c:3c:5a:1e:8b:
                    c9:6c:af:cd:f0:7c:1f:4f:2c:61:f6:cc:5f:24:84:
                    de:25:03:05:c5:a7:2c:d3:31:ea:3d:93:c2:05:97:
                    d4:f1:de:63:3a:9f:a3:85:69:4c:77:9f:26:51:79:
                    c1:31:31:53:fe:07:7f:9d:5f:cc:0d:44:75:db:f2:
                    45:7f:e1:dd:87:ed:db:03:39:8a:d1:24:74:82:13:
                    1a:6e:05:0a:26:9e:9b:51:ae:d2:4b:af:93:9a:9c:
                    40:74:83:0c:f2:a2:03:c4:1e:7a:8d:43:05:d0:3d:
                    60:0e:ce:b5:ca:d1:7c:0f:03:00:cd:1a:98:12:62:
                    3f:61:46:4b:82:13:bd:00:8c:4e:ea:7a:eb:4a:68:
                    f5:7a:a6:e9:66:b8:8d:a5:87:00:84:c0:d5:ae:4e:
                    4e:7d:e3:fd:dd:73:ba:f1:cf:bf:96:9d:4f:03:3b:
                    93:d5:26:72:10:7c:90:14:db:0a:73:28:ba:2f:22:
                    2f:15:7e:73:19:4f:1f:58:f6:2d:2b:90:f7:6f:f1:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:52:31:40:89:DA:29:B3:49:CA:78:73:9A:77:C6:F6:1D:D4:A1
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:0a:4e:73:95:66:25:3c:83:be:bc:11:2d:31:65:97:eb:
         cc:82:c2:7a:34:0d:49:9e:e2:46:8b:e4:c6:2f:e9:b6:e8:3c:
         2f:0f:c3:52:32:91:e4:25:28:7f:36:18:26:36:2d:a9:33:25:
         b7:88:cf:b7:64:b6:24:89:94:05:02:43:fb:89:6e:05:fc:7e:
         d9:7a:e0:42:a9:8e:db:26:30:cf:39:28:8b:23:23:7f:4c:fe:
         d5:70:ea:93:76:cb:1c:fb:7b:5a:73:48:96:1b:d0:20:a8:a7:
         92:9c:cd:5f:9d:1c:df:7f:92:7e:c2:b3:f8:4b:79:b1:65:02:
         60:3e:f0:02:72:2b:0d:f9:91:ed:21:c5:0b:f2:11:f2:25:61:
         42:8e:8b:33:80:24:d7:55:06:eb:52:8f:79:70:4e:ee:31:19:
         12:b3:00:51:a9:2e:22:e3:e3:2e:16:52:b8:ed:28:fa:d6:60:
         d4:e7:f3:21:83:23:91:f9:1b:97:9a:dd:c7:54:14:0d:9b:56:
         e8:d6:f9:80:69:2c:ab:fe:e8:45:7a:c0:22:b5:d3:bf:02:e9:
         a6:4b:af:45:fc:50:d3:7c:d5:b0:2d:c7:20:5c:58:95:77:9d:
         83:4a:3c:f6:6a:36:9b:e1:4e:70:0f:bf:78:47:2a:9e:e8:63:
         c9:07:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org