Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          bX8vQPnH4OhXjGulQuXBM3+us6H0DZn1XO7xj82Uw7o=
Subject key identifier:   B8:6F:3E:FC:80:30:7E:48:F4:F9:3F:23:3A:8F:08:62:3D:6B:5A:DA
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       22893E4476E52C35570D45F36F1E6649B0221FF2
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:22 +0000
ROA not before:           Wed 28 Feb 2024 13:56:22 +0000
ROA not after:            Wed 26 Feb 2025 14:01:22 +0000
asID:                     267420
IP address blocks:        170.231.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:3e:44:76:e5:2c:35:57:0d:45:f3:6f:1e:66:49:b0:22:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:22 2024 GMT
            Not After : Feb 26 14:01:22 2025 GMT
        Subject: CN=B86F3EFC80307E48F4F93F233A8F08623D6B5ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:6b:93:ed:ef:72:91:c1:2c:11:12:a2:a6:
                    33:d6:2a:db:7d:1a:81:df:b6:f1:96:f2:17:41:ef:
                    64:9e:47:f3:2f:b0:ea:e7:db:ef:71:7b:a3:d5:7f:
                    b6:62:4c:6f:8d:62:d9:91:81:07:14:03:5d:fb:29:
                    eb:17:fc:07:28:c2:17:88:f7:1c:ae:72:db:ff:40:
                    f2:63:fb:ec:fd:3b:63:85:2c:65:2a:bc:a9:10:30:
                    23:9b:83:7b:17:bd:90:be:fa:61:c0:2c:eb:2b:af:
                    e6:ff:97:64:62:57:b6:bf:41:0f:8f:b5:0b:20:df:
                    e7:4f:f9:df:da:de:d5:c8:cc:00:17:0b:42:33:3e:
                    64:fb:de:46:05:40:d2:61:0a:eb:79:95:83:94:bb:
                    c1:e6:3d:7a:45:ff:b5:ce:78:f1:49:29:96:42:5f:
                    f0:51:18:f1:a5:74:f7:31:7d:5f:4e:3c:59:80:ad:
                    ba:a2:1f:55:c6:cd:e8:29:80:ba:da:66:98:03:2e:
                    28:ec:36:74:e1:a3:11:d6:32:28:34:6d:6c:20:c0:
                    fe:53:9c:13:83:84:2b:07:45:eb:2b:5d:ee:d1:a1:
                    c1:a4:a9:8d:03:9c:b5:11:7e:e7:e5:a3:40:bd:a5:
                    89:2e:b1:15:b5:2e:66:75:82:50:d5:6a:f4:39:0c:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:3E:FC:80:30:7E:48:F4:F9:3F:23:3A:8F:08:62:3D:6B:5A:DA
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:9e:af:49:dd:72:36:19:d6:69:73:74:3b:d8:f5:5f:c1:
         32:ec:01:78:94:0e:9a:a3:5f:5b:61:ee:fb:db:df:c9:82:9d:
         10:45:c3:c8:b9:d8:d9:31:6f:97:93:c1:4a:b8:ea:c5:7f:2e:
         ce:2f:13:5a:65:56:9e:22:2f:80:10:95:f3:7c:a9:26:32:40:
         31:20:7f:f6:a6:6e:76:cd:fc:78:b8:60:a6:94:40:59:b6:31:
         64:26:fe:4c:03:8e:06:5b:c7:98:dc:91:50:27:92:86:25:2e:
         f8:90:04:71:44:49:07:5e:24:47:f2:cc:1d:be:20:41:36:28:
         46:fa:15:06:96:8b:62:a2:3d:4b:6d:13:46:a5:0c:96:80:c6:
         dd:19:3d:92:6f:c9:d9:56:62:39:ea:2d:49:58:6c:ea:34:6f:
         ef:dd:96:17:b5:3e:0e:c1:71:71:d5:29:73:47:eb:6a:4b:9e:
         1f:d4:55:81:a8:6a:01:6d:bf:f5:2f:78:4c:90:77:1e:fc:46:
         f9:66:06:29:b7:78:21:b4:d0:b7:5e:bb:2c:dc:55:df:d3:c8:
         b2:86:61:f0:fa:65:6e:fa:1d:5e:f5:28:65:d9:b7:45:7e:63:
         87:f2:35:e3:6b:db:7e:49:d1:21:bf:81:9b:80:9f:ed:08:3d:
         e1:f8:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org