Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32332d3233203d3e20323635323239.roa
File:                     3137302e3234372e3230382e302f32332d3233203d3e20323635323239.roa (raw, json)
Hash identifier:          uhv3qFcL62kpM9miZhLgEWb4C50Pnbbmu2sGZC1RJzM=
Subject key identifier:   76:48:87:61:81:4C:69:48:3E:05:E0:5B:FC:5D:CD:1C:6E:3F:2E:4B
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       4F72E8668A6D4EDB726DB3B2EBA496563C5040D7
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32332d3233203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:55 +0000
ROA not before:           Mon 09 Oct 2023 23:46:55 +0000
ROA not after:            Mon 07 Oct 2024 23:51:55 +0000
asID:                     265229
IP address blocks:        170.247.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:72:e8:66:8a:6d:4e:db:72:6d:b3:b2:eb:a4:96:56:3c:50:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:55 2023 GMT
            Not After : Oct  7 23:51:55 2024 GMT
        Subject: CN=76488761814C69483E05E05BFC5DCD1C6E3F2E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:50:0f:c3:f1:d1:fa:75:c2:ae:f9:25:2c:12:
                    76:a1:c1:6e:67:e2:d9:8d:6c:29:fb:35:d9:fb:75:
                    7c:1c:0c:2d:7f:66:41:9d:b3:e6:03:ce:3f:b2:29:
                    64:29:4a:4c:4f:56:85:2b:97:3b:02:6c:fa:41:91:
                    bd:bd:86:67:f8:80:f1:a5:ed:47:46:4f:d0:ea:7f:
                    79:c2:55:ea:76:a5:73:a2:ec:a9:26:74:f2:7f:64:
                    37:3f:ad:be:3a:09:9c:5b:2d:55:87:d4:de:bb:7a:
                    11:1c:16:52:ee:b2:b6:a3:b3:38:35:b4:35:a3:9e:
                    15:7d:cc:5f:a5:7b:74:dc:fe:0d:44:a4:49:ef:b9:
                    3c:97:87:c9:0f:73:74:fe:5c:3b:b0:fb:85:3e:0b:
                    0e:6f:b6:44:69:d8:4a:a8:01:eb:4f:69:ba:d0:69:
                    bf:aa:11:16:96:7b:58:52:09:c7:3f:58:ab:a4:6c:
                    a6:7e:b1:58:42:12:f1:a8:ee:fb:a0:7e:06:cb:64:
                    c9:89:d1:57:66:9c:b1:66:86:53:1c:b0:e1:b1:25:
                    24:31:a4:b7:c1:89:c6:bc:fa:92:03:4b:17:c0:7b:
                    67:c6:36:3c:4f:7d:24:02:96:fd:b5:6e:6b:6f:bf:
                    a0:a9:99:d0:00:d8:4c:fc:0a:49:48:c5:c3:a9:1b:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:87:61:81:4C:69:48:3E:05:E0:5B:FC:5D:CD:1C:6E:3F:2E:4B
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32332d3233203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:23:9e:1d:93:fd:d1:12:86:fd:9e:84:38:71:16:ca:56:f2:
         25:aa:20:80:44:d5:5c:f3:51:56:83:21:20:d7:1b:69:5d:9a:
         ac:14:40:32:e2:e2:ee:b9:9b:25:e5:8b:86:a2:91:06:de:77:
         46:e9:63:ce:7e:e6:6f:d0:00:43:59:90:c2:45:96:1f:a8:4d:
         8d:01:d9:81:2f:62:f0:d7:d7:b0:76:0f:39:ad:66:89:42:7e:
         be:47:d9:4f:8f:08:3d:0d:f3:ce:19:ce:41:c7:8b:8d:b8:01:
         cb:82:ca:b0:a7:21:db:b9:fc:73:43:78:88:b6:33:d3:f9:fb:
         4b:59:d3:f9:ea:16:f6:50:1f:4f:d0:f8:d8:25:74:dc:ca:a8:
         4b:4a:0d:d8:22:94:9d:70:aa:c2:11:f3:3f:43:06:11:3b:94:
         c7:a6:6a:d9:45:b4:a1:65:2f:3c:e7:3b:5b:07:41:66:9d:3e:
         53:51:83:bf:40:2d:31:69:ec:c7:5a:c7:b0:b5:84:64:c6:40:
         44:c4:b6:c0:9c:c1:71:d6:75:52:95:e7:27:45:b8:7f:ea:ca:
         cc:1a:ce:f3:e1:c2:3c:29:d8:de:c5:2e:2c:3e:55:c0:fb:62:
         65:96:22:e8:38:cd:8d:5b:f9:b6:5b:64:e8:a2:3b:12:97:42:
         dc:8e:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org