Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          eQo2eatsA68A1Od5p7BqbXO6bKX46FS2ly6eYCa/rS0=
Subject key identifier:   C7:F7:95:03:6C:BA:EC:E5:5A:B4:C9:96:0E:4C:1F:05:41:4B:B5:52
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       65275FBF2E124C4512F3CB5DB4410E52214B565C
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:17 +0000
ROA not before:           Wed 28 Feb 2024 13:56:17 +0000
ROA not after:            Wed 26 Feb 2025 14:01:17 +0000
asID:                     267420
IP address blocks:        170.231.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:5f:bf:2e:12:4c:45:12:f3:cb:5d:b4:41:0e:52:21:4b:56:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:17 2024 GMT
            Not After : Feb 26 14:01:17 2025 GMT
        Subject: CN=C7F795036CBAECE55AB4C9960E4C1F05414BB552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:ad:92:7c:73:a7:b0:e9:36:b2:3b:b5:47:
                    c6:fb:89:6a:41:1b:03:85:8d:cc:50:53:47:cd:3e:
                    0e:00:c4:42:7b:86:82:46:25:a2:f9:73:8f:db:51:
                    e1:fb:1d:01:e5:97:fa:bd:d2:ac:fa:56:b4:e0:ae:
                    5e:3f:01:47:73:8d:19:16:35:b0:33:2d:ad:0b:ef:
                    cc:3a:88:74:eb:86:00:ea:1c:0e:4e:c2:2d:b3:dd:
                    e3:e0:59:7e:ee:7b:7b:1f:f7:32:9e:27:fa:87:9c:
                    0e:1c:01:a3:2d:df:4c:7c:89:23:eb:0e:18:31:bf:
                    ab:7e:80:55:af:3f:1f:8e:d5:a7:8b:5e:bc:82:4b:
                    08:ec:2a:7f:2d:50:51:d9:eb:27:38:29:7d:c5:6b:
                    c2:66:09:76:71:49:32:20:9c:12:a2:ce:21:7e:2f:
                    2f:84:4b:bc:e7:9b:cf:b6:36:52:45:6d:78:c5:bf:
                    a7:38:9e:24:f0:bd:6d:8a:ac:3c:83:92:3c:74:b4:
                    ae:19:43:72:bd:6a:c9:15:df:95:e8:bd:1a:7b:37:
                    0e:ba:37:1b:42:fc:f8:13:ad:2a:c6:b1:5e:6d:59:
                    89:5f:9e:e9:df:b9:a8:ea:f8:a4:93:f9:a8:a5:50:
                    5a:96:b6:3c:aa:ff:c2:f3:f8:e3:86:98:8d:41:0b:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:95:03:6C:BA:EC:E5:5A:B4:C9:96:0E:4C:1F:05:41:4B:B5:52
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:11:9f:f8:8b:bf:2f:89:f4:d8:f8:69:00:75:5a:a4:be:fa:
         a7:9a:d6:df:16:6c:14:7b:05:f1:1b:8f:b7:68:d9:d4:43:37:
         60:86:60:25:09:fb:d8:0b:31:f3:49:df:4e:4c:9a:70:25:02:
         e7:b2:36:ce:35:4e:1b:20:0a:9c:c6:45:1a:45:2a:ee:21:d0:
         b5:5b:36:07:1d:86:36:26:74:dc:40:0f:81:b0:65:6f:9f:63:
         a6:6b:9e:ce:66:b7:62:16:03:51:b2:e8:72:26:b9:0e:eb:90:
         a3:31:11:92:45:79:cf:2f:64:ea:e2:b1:d2:f8:8c:c0:f8:ef:
         6e:6d:5f:aa:94:d7:e9:8a:75:15:94:a1:8e:b8:37:b3:d7:d2:
         00:a0:db:28:11:86:64:20:6a:e7:24:9d:bf:4b:ec:d8:3a:69:
         2c:b4:11:e8:fc:26:96:8f:34:61:ee:ed:1d:d0:e0:1a:71:49:
         4c:03:b1:c0:b9:08:c3:2b:52:b0:3b:c1:60:a1:a9:69:87:69:
         9b:c9:81:06:d6:06:34:91:c3:0e:7c:b0:69:b6:74:43:8d:3e:
         8e:69:13:78:56:48:f9:5c:bc:c9:3d:eb:42:0e:a1:9e:4b:bb:
         36:ce:ab:a3:dc:5e:5e:d7:67:04:a4:a4:ce:4f:1e:90:89:63:
         1d:66:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org