Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa
File:                     3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          DXPrB9mBrWKKCi73595coguVMsYyxQQEMuWaTYZFd9M=
Subject key identifier:   1F:8A:25:11:B7:91:59:44:6F:7F:C7:5B:C1:79:80:D4:54:75:7D:4E
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       18EB66462F88C83EFE412A712407984C4C945CE1
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 14:01:36 +0000
ROA not before:           Wed 28 Feb 2024 13:56:36 +0000
ROA not after:            Wed 26 Feb 2025 14:01:36 +0000
asID:                     267420
IP address blocks:        186.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:66:46:2f:88:c8:3e:fe:41:2a:71:24:07:98:4c:4c:94:5c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:56:36 2024 GMT
            Not After : Feb 26 14:01:36 2025 GMT
        Subject: CN=1F8A2511B79159446F7FC75BC17980D454757D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:b4:1c:0e:d8:29:d6:72:a9:7d:83:bc:47:
                    52:3b:c8:25:f7:dc:33:90:fa:10:c1:af:c2:9d:72:
                    e7:a0:2b:bf:57:87:c8:df:8b:76:68:5f:46:ee:01:
                    b6:68:59:8b:77:c2:d1:2d:1d:11:ce:60:e4:5d:19:
                    e6:42:67:30:4a:e3:f4:db:d1:cc:aa:46:8e:71:d5:
                    7e:1e:47:e1:b9:32:3b:c2:a5:e8:75:6e:ad:d4:65:
                    64:86:82:c2:ed:5e:41:0e:ed:ac:a2:33:d0:37:bb:
                    4e:0b:16:da:74:53:0f:d7:4b:d4:cc:11:b6:74:9e:
                    55:7f:87:17:4d:2e:0e:c2:61:01:97:99:5d:75:62:
                    68:a7:8d:5a:8c:c1:ba:76:02:39:92:d3:e0:2f:5c:
                    68:02:90:cd:c8:e9:1c:37:a1:83:7d:40:99:e5:5a:
                    9a:95:75:e6:8a:42:c9:c6:7b:88:ef:2a:37:9b:3f:
                    9b:5b:a3:bb:5c:16:42:af:dd:e2:28:9b:e6:51:64:
                    73:20:a2:24:1c:60:a9:a7:c0:85:d7:d5:9a:e1:e9:
                    26:a4:fc:cb:e2:3a:92:18:05:12:e9:29:1c:92:4f:
                    b5:d6:fd:4c:11:33:21:35:5a:2d:03:fe:1f:92:73:
                    b1:52:38:99:c5:1a:63:06:d8:09:a2:13:62:6a:e6:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:25:11:B7:91:59:44:6F:7F:C7:5B:C1:79:80:D4:54:75:7D:4E
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:42:56:57:f5:c3:c1:52:3a:e8:20:b7:38:cc:01:f8:44:81:
         8f:fb:db:85:a8:c3:cd:c0:f3:de:2c:23:be:9d:07:2f:f3:f0:
         39:6d:5b:93:70:e5:cc:f6:d4:2b:33:96:7c:4a:d6:d9:ff:ad:
         24:9e:65:94:c7:47:e9:8c:d5:3f:a6:32:ba:64:66:77:05:a0:
         b0:ae:f3:b9:0d:75:eb:43:e3:1f:46:9c:36:bd:13:06:ec:60:
         01:3d:8a:49:14:62:93:06:db:8c:28:34:77:62:e4:63:e3:11:
         d6:a0:a4:c2:c5:ca:a8:e0:7b:32:f7:16:65:ee:5b:53:ed:fc:
         4a:c1:11:24:ea:84:3d:e3:34:e4:98:06:66:c7:d5:2f:68:c4:
         c9:22:a8:67:60:3f:73:8e:11:ff:75:13:75:c2:1e:1d:5b:50:
         5f:ae:d3:12:f9:31:f8:83:0b:d2:39:c9:69:57:63:58:2e:33:
         08:b1:82:82:93:f2:ca:3d:a1:6c:dd:21:fc:f1:a2:23:19:c9:
         47:61:95:ec:06:5a:c7:ec:74:87:c4:51:d8:49:b9:c3:34:54:
         ba:f1:63:37:b8:08:d2:9c:87:70:fc:7d:f2:f6:e2:94:18:3a:
         c3:77:08:11:1a:f6:d9:78:77:c6:d5:7d:5e:63:aa:de:bd:18:
         79:1e:eb:d4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGOtmRi+IyD7+QSpxJAeYTEyUXOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTNFNEU3QTQ2OTQ4MkY0OERFNkM1NTdDMUJFNDE1
RTE5MkEzNDAeFw0yNDAyMjgxMzU2MzZaFw0yNTAyMjYxNDAxMzZaMDMxMTAvBgNV
BAMTKDFGOEEyNTExQjc5MTU5NDQ2RjdGQzc1QkMxNzk4MEQ0NTQ3NTdENEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiLQcDtgp1nKpfYO8R1I7yCX3
3DOQ+hDBr8KdcuegK79Xh8jfi3ZoX0buAbZoWYt3wtEtHRHOYORdGeZCZzBK4/Tb
0cyqRo5x1X4eR+G5MjvCpeh1bq3UZWSGgsLtXkEO7ayiM9A3u04LFtp0Uw/XS9TM
EbZ0nlV/hxdNLg7CYQGXmV11YminjVqMwbp2AjmS0+AvXGgCkM3I6Rw3oYN9QJnl
WpqVdeaKQsnGe4jvKjebP5tbo7tcFkKv3eIom+ZRZHMgoiQcYKmnwIXX1Zrh6Sak
/MviOpIYBRLpKRyST7XW/UwRMyE1Wi0D/h+Sc7FSOJnFGmMG2AmiE2Jq5hbbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH4olEbeRWURvf8dbwXmA1FR1fU4wHwYDVR0j
BBgwFoAUyZk+TnpGlIL0jebFV8G+QV4ZKjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9DOTk5M0U0RTdBNDY5NDgyRjQ4REU2QzU1N0MxQkU0MTVFMTkyQTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OTkzRTRFN0E0Njk0ODJG
NDhERTZDNTU3QzFCRTQxNUUxOTJBMzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzEzODM2MmUzMjMwMzkyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrR3zANBgkqhkiG9w0BAQsFAAOCAQEAWUJW
V/XDwVI66CC3OMwB+ESBj/vbhajDzcDz3iwjvp0HL/PwOW1bk3DlzPbUKzOWfErW
2f+tJJ5llMdH6YzVP6YyumRmdwWgsK7zuQ1160PjH0acNr0TBuxgAT2KSRRikwbb
jCg0d2LkY+MR1qCkwsXKqOB7MvcWZe5bU+38SsERJOqEPeM05JgGZsfVL2jEySKo
Z2A/c44R/3UTdcIeHVtQX67TEvkx+IML0jnJaVdjWC4zCLGCgpPyyj2hbN0h/PGi
IxnJR2GV7AZax+x0h8RR2Em5wzRUuvFjN7gI0pyHcPx98vbilBg6w3cIERr22Xh3
xtV9XmOq3r0YeR7r1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org