Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          WQb5N1oqdwg2bCvllj4rPzO8x2L3fFP9lWsTMUuPp9E=
Subject key identifier:   C0:9E:74:3E:C1:EC:B7:91:BF:87:4C:58:CF:21:DE:F6:A7:7B:A2:E1
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       1794BBE0F3DFABA3A3668E6E18C3B9534AF3CD60
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:04 +0000
ROA not before:           Wed 28 Feb 2024 13:56:04 +0000
ROA not after:            Wed 26 Feb 2025 14:01:04 +0000
asID:                     267420
IP address blocks:        170.231.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:bb:e0:f3:df:ab:a3:a3:66:8e:6e:18:c3:b9:53:4a:f3:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:04 2024 GMT
            Not After : Feb 26 14:01:04 2025 GMT
        Subject: CN=C09E743EC1ECB791BF874C58CF21DEF6A77BA2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:de:04:9b:4a:3d:f3:09:e5:57:4c:cd:27:
                    0f:f5:17:6e:d1:a8:90:87:ce:7d:85:e3:cc:0c:4d:
                    6d:02:70:2b:f1:f1:24:f9:c1:9f:7c:0e:68:7b:c3:
                    3a:cc:9e:59:a7:87:4c:d3:07:e4:ae:5b:ba:a9:b1:
                    57:74:46:1a:ca:eb:28:3b:0a:62:6e:7c:40:26:cd:
                    04:3d:65:f8:31:13:5e:d7:10:58:6d:00:35:81:a0:
                    c5:95:c6:5a:22:4f:52:0a:66:22:88:71:67:00:4b:
                    a5:46:3b:7e:a6:f4:0e:23:c6:05:d7:7c:86:23:78:
                    92:8f:eb:1f:0a:02:b0:d7:df:c8:bf:c9:71:48:8a:
                    e4:cc:7b:22:a8:c1:af:f4:d5:74:b6:00:99:43:d4:
                    4d:6e:2e:46:99:34:27:3e:92:28:32:de:49:59:9e:
                    8d:83:95:01:39:20:a8:47:5e:a2:16:df:97:90:2f:
                    67:48:83:22:16:d8:45:45:23:88:53:ef:3c:69:c3:
                    2f:9b:7f:b2:ba:f0:92:db:a1:ca:32:bb:0d:ef:c0:
                    74:5f:f8:6a:ef:27:47:25:96:ce:df:1e:39:4a:0b:
                    ca:e3:91:0e:55:ea:79:44:ec:70:e7:37:15:1c:6e:
                    a0:73:27:33:e1:04:ef:92:68:50:b4:d1:5f:59:28:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:74:3E:C1:EC:B7:91:BF:87:4C:58:CF:21:DE:F6:A7:7B:A2:E1
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:ee:1d:c3:e4:9a:69:83:14:7c:8d:d0:e6:26:9a:1d:4b:
         29:56:ce:54:eb:8a:60:2b:07:94:ba:25:68:19:ad:d8:ca:63:
         64:d1:10:d4:80:d8:d7:ed:48:3c:e3:55:b6:80:d6:ef:22:b5:
         5c:a5:01:6f:f2:14:19:14:50:b2:f4:c2:7e:48:5d:75:2d:8b:
         9c:36:65:e3:29:cb:7b:1e:25:91:ed:fb:f1:6e:eb:a2:4e:c7:
         fb:43:59:78:85:43:62:49:ec:08:b5:2c:4f:ff:b3:e9:89:a9:
         c7:3f:82:32:29:f8:84:28:26:d4:75:f2:d6:2c:74:65:cd:ad:
         9d:dd:f9:3e:c4:f5:9b:b4:d7:86:94:3f:25:d2:31:ee:5e:2a:
         26:5c:8f:57:cc:79:29:a8:97:35:c7:76:c9:be:69:c1:da:13:
         b1:2f:8e:d4:91:6d:56:7a:a5:4f:d2:b7:91:9b:e3:83:d8:3a:
         63:f5:a8:c5:8f:13:a1:2f:85:b3:2d:7b:3e:f9:1d:7e:cc:bf:
         46:c9:6c:10:50:82:3b:17:06:5b:b0:51:c0:ad:d1:e4:80:44:
         98:8b:b0:59:36:26:d5:69:24:2f:29:b9:d3:81:ff:d8:a8:1b:
         7c:e9:60:2e:ab:c5:bf:41:ee:48:c6:81:60:a9:5c:a6:0d:f6:
         7b:72:62:26
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF5S74PPfq6OjZo5uGMO5U0rzzWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTNFNEU3QTQ2OTQ4MkY0OERFNkM1NTdDMUJFNDE1
RTE5MkEzNDAeFw0yNDAyMjgxMzU2MDRaFw0yNTAyMjYxNDAxMDRaMDMxMTAvBgNV
BAMTKEMwOUU3NDNFQzFFQ0I3OTFCRjg3NEM1OENGMjFERUY2QTc3QkEyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Nd4Em0o98wnlV0zNJw/1F27R
qJCHzn2F48wMTW0CcCvx8ST5wZ98Dmh7wzrMnlmnh0zTB+SuW7qpsVd0RhrK6yg7
CmJufEAmzQQ9ZfgxE17XEFhtADWBoMWVxloiT1IKZiKIcWcAS6VGO36m9A4jxgXX
fIYjeJKP6x8KArDX38i/yXFIiuTMeyKowa/01XS2AJlD1E1uLkaZNCc+kigy3klZ
no2DlQE5IKhHXqIW35eQL2dIgyIW2EVFI4hT7zxpwy+bf7K68JLbocoyuw3vwHRf
+GrvJ0clls7fHjlKC8rjkQ5V6nlE7HDnNxUcbqBzJzPhBO+SaFC00V9ZKAjXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwJ50PsHst5G/h0xYzyHe9qd7ouEwHwYDVR0j
BBgwFoAUyZk+TnpGlIL0jebFV8G+QV4ZKjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9DOTk5M0U0RTdBNDY5NDgyRjQ4REU2QzU1N0MxQkU0MTVFMTkyQTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OTkzRTRFN0E0Njk0ODJG
NDhERTZDNTU3QzFCRTQxNUUxOTJBMzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzEzNzMwMmUzMjMzMzEyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrn0DANBgkqhkiG9w0BAQsFAAOCAQEApaTu
HcPkmmmDFHyN0OYmmh1LKVbOVOuKYCsHlLolaBmt2MpjZNEQ1IDY1+1IPONVtoDW
7yK1XKUBb/IUGRRQsvTCfkhddS2LnDZl4ynLex4lke378W7rok7H+0NZeIVDYkns
CLUsT/+z6Ympxz+CMin4hCgm1HXy1ix0Zc2tnd35PsT1m7TXhpQ/JdIx7l4qJlyP
V8x5KaiXNcd2yb5pwdoTsS+O1JFtVnqlT9K3kZvjg9g6Y/WoxY8ToS+Fsy17Pvkd
fsy/RslsEFCCOxcGW7BRwK3R5IBEmIuwWTYm1WkkLym504H/2KgbfOlgLqvFv0Hu
SMaBYKlcpg32e3JiJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org