Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa
File:                     3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          gKduNmLQfZ8l14TiT4w4F2BZO9L8UGc7/mzDYy1Dlt0=
Subject key identifier:   2D:3A:82:43:4A:24:D9:DC:92:DE:13:FF:AF:03:50:F2:FF:07:BD:28
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       65EC9AF6C54CBEED0FA6BD5B6E34ACE6860D9C29
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:13 +0000
ROA not before:           Wed 28 Feb 2024 13:56:13 +0000
ROA not after:            Wed 26 Feb 2025 14:01:13 +0000
asID:                     267420
IP address blocks:        170.231.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:9a:f6:c5:4c:be:ed:0f:a6:bd:5b:6e:34:ac:e6:86:0d:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:13 2024 GMT
            Not After : Feb 26 14:01:13 2025 GMT
        Subject: CN=2D3A82434A24D9DC92DE13FFAF0350F2FF07BD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:6e:09:74:04:4c:97:85:47:fc:d3:6e:fd:
                    6d:bf:f5:af:9e:41:0a:4b:28:e8:a4:37:c6:8d:10:
                    9c:1b:c7:76:3d:10:15:3e:8c:ac:13:b2:25:8e:90:
                    58:d7:8d:a3:16:b1:b5:6e:bd:91:15:a6:64:db:93:
                    a5:14:c8:c4:74:08:c8:8a:02:41:9f:89:98:ef:b4:
                    2f:d1:05:5f:18:c6:87:ba:d3:6d:0c:2a:b0:cf:e8:
                    bb:6b:db:2e:db:e8:fe:23:33:2c:74:20:11:13:7a:
                    c2:ba:65:6a:b1:45:de:3b:e5:45:f1:52:aa:a4:93:
                    c8:be:e3:b4:49:ea:ae:78:76:30:4d:db:7c:7d:1d:
                    4e:53:7d:30:cd:c0:72:7b:80:4e:e1:ae:b5:4e:9c:
                    b4:61:8d:e8:f7:13:36:e2:ad:c3:42:d2:94:cb:16:
                    9a:02:2c:14:90:3f:b3:af:6b:a5:6e:d3:39:5d:01:
                    c8:e2:68:e5:d6:81:53:28:e6:cd:26:8d:76:0d:32:
                    f8:bd:c9:84:eb:59:34:7a:82:f5:03:8d:09:8c:c2:
                    3a:05:a2:7f:f3:b4:31:88:a9:b0:9a:db:9f:b0:04:
                    c0:dc:7d:3a:6d:7f:bc:aa:bb:07:b1:61:52:6b:e7:
                    0c:07:0e:e2:16:29:c9:f8:26:c5:8d:09:24:a9:9e:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:82:43:4A:24:D9:DC:92:DE:13:FF:AF:03:50:F2:FF:07:BD:28
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:a1:98:cb:af:56:09:75:b0:be:ec:56:4f:13:d5:40:c0:
         7d:df:63:51:41:d7:47:92:b0:fe:e7:28:6f:20:1d:97:ec:35:
         11:01:6e:04:0b:a6:89:35:47:5b:51:92:91:26:a1:88:73:5e:
         98:93:95:3f:fa:3b:be:ea:d4:41:c1:a8:e9:74:d1:10:9a:ca:
         52:12:6b:fc:74:aa:82:f7:6b:58:04:92:aa:10:e6:38:1a:ed:
         d3:ba:ea:a2:f2:4d:7b:1f:3c:bf:17:59:16:03:ed:12:9a:79:
         db:72:c4:c1:d6:86:56:64:c4:66:bd:03:70:3c:0e:5f:e2:6f:
         ab:d4:6e:75:34:f5:38:65:e0:b5:db:00:ba:f4:f9:d5:d5:c5:
         ea:ed:f3:87:23:b8:16:15:98:3f:98:c2:4b:4a:fc:e3:2d:23:
         59:9e:3e:69:be:d3:ac:2a:6a:dc:39:45:50:e6:79:7e:e1:b4:
         51:5f:f2:78:e8:dd:40:38:e6:9d:a3:2c:c0:bc:63:5e:86:05:
         be:16:61:72:4b:f8:5f:1a:61:ad:60:5f:34:87:35:44:f0:8d:
         d3:a4:87:91:11:7d:6b:f3:8d:ab:5e:16:aa:63:08:18:d1:15:
         bf:97:65:0c:13:d2:a4:23:c1:9c:ed:ec:08:0f:67:0d:e5:aa:
         10:8d:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org