Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323637343230.roa
File:                     3138362e3230392e3232322e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          Y1rYLmZJdFzS6U/B8hgirJQA+Fij6wC34ZHBLPjH440=
Subject key identifier:   F9:5D:D7:E3:E4:40:A2:53:71:71:73:6C:1A:3A:11:EB:4A:50:D6:48
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       2189D93B111216B239436B0B0D143D2DDE09A939
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:33 +0000
ROA not before:           Wed 28 Feb 2024 13:56:33 +0000
ROA not after:            Wed 26 Feb 2025 14:01:33 +0000
asID:                     267420
IP address blocks:        186.209.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:89:d9:3b:11:12:16:b2:39:43:6b:0b:0d:14:3d:2d:de:09:a9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:33 2024 GMT
            Not After : Feb 26 14:01:33 2025 GMT
        Subject: CN=F95DD7E3E440A2537171736C1A3A11EB4A50D648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:b7:c4:8e:84:4a:2c:7f:dc:93:db:b4:6b:
                    0d:43:07:64:d8:cf:d8:33:fc:15:e3:5e:ca:c9:b7:
                    39:db:08:7e:d0:55:51:66:e4:83:6c:25:69:55:f8:
                    13:6c:0b:a1:07:b4:c3:50:d3:67:79:34:90:4b:3a:
                    9d:8c:d6:2c:83:79:5e:ea:04:37:ed:c7:d4:c7:5e:
                    56:55:e4:45:90:0d:7c:eb:da:fd:a1:70:f3:a1:02:
                    fe:3f:57:f3:03:ba:26:59:56:58:c8:6e:63:cf:d6:
                    c6:51:b9:2e:7c:46:08:04:ad:a6:51:38:6d:3e:6c:
                    9a:8c:d9:af:93:3f:34:92:90:c9:f1:05:13:02:b2:
                    de:4c:63:8d:99:82:28:d7:90:7d:e7:6a:7a:47:b8:
                    cb:43:18:11:02:a6:ed:f0:82:86:4e:00:19:b3:10:
                    e8:b0:e9:a0:a8:de:fe:f6:b9:41:0b:69:2c:d8:fe:
                    0f:99:a4:0f:ed:3d:8a:96:f6:4b:7b:b8:df:94:af:
                    8b:e8:95:ca:4c:d1:a4:5a:39:6d:15:67:68:40:2d:
                    90:63:a3:6a:b7:14:66:76:55:3b:b1:75:5c:5e:25:
                    75:6b:82:98:4b:c5:98:2f:3e:c0:50:61:00:60:67:
                    4b:2e:df:24:2b:c0:09:0d:78:37:d9:8b:95:ab:fd:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:D7:E3:E4:40:A2:53:71:71:73:6C:1A:3A:11:EB:4A:50:D6:48
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:58:9b:31:e7:82:4c:d8:a0:50:52:36:ac:8d:57:b1:48:ab:
         5b:0a:d7:17:6f:24:21:08:93:a4:cf:46:47:4d:27:f3:7c:e8:
         b8:3f:f3:0a:16:e0:99:af:b4:1f:8f:29:30:d0:15:32:fe:23:
         9e:ab:8a:92:02:d1:c5:f5:69:79:03:05:09:38:c2:54:f3:2f:
         e0:10:00:83:c6:67:71:32:2c:e9:85:6f:fe:76:80:1e:45:07:
         98:6f:2a:e4:25:4a:ff:53:c7:74:9b:e5:0b:db:bf:e1:0a:3b:
         2a:4a:bc:e5:97:47:27:47:33:0b:d2:ef:c8:be:18:f7:79:61:
         0d:d6:66:97:6e:33:b0:a7:e1:f3:33:d5:f9:24:17:35:5f:53:
         d3:ae:c7:b8:0a:73:8e:b9:56:c5:5b:4a:be:7b:27:43:69:c2:
         5f:88:fe:7f:39:e0:a5:7b:2b:25:0d:97:eb:0f:b6:f1:08:5b:
         e0:7b:6d:b3:88:6d:ce:31:9d:34:b4:77:69:0a:73:0b:3f:2d:
         8f:af:d0:be:4c:c8:21:f5:31:83:98:ed:4f:46:8d:fc:e4:72:
         78:9c:0a:9b:07:a4:af:9b:4a:dd:57:de:77:36:12:9d:86:01:
         d4:ea:68:2c:62:b5:3d:27:98:07:b2:8b:9c:fa:bd:c4:85:58:
         12:fe:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org