Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32342d3234203d3e20323635323239.roa
File:                     3137302e3234372e3230382e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          R5bfKMg8u+FXtYJoErQXW4idtnHVrCIVdFtwyvxVY4w=
Subject key identifier:   CF:34:FC:BD:86:A9:A4:FE:49:35:A9:DB:70:0D:B8:1F:55:FC:7A:87
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       222EDBB276776BF00C3334869EADA08E34D671CF
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:53 +0000
ROA not before:           Mon 09 Oct 2023 23:46:53 +0000
ROA not after:            Mon 07 Oct 2024 23:51:53 +0000
asID:                     265229
IP address blocks:        170.247.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2e:db:b2:76:77:6b:f0:0c:33:34:86:9e:ad:a0:8e:34:d6:71:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:53 2023 GMT
            Not After : Oct  7 23:51:53 2024 GMT
        Subject: CN=CF34FCBD86A9A4FE4935A9DB700DB81F55FC7A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:23:a4:32:0c:c7:bc:9c:90:0b:78:93:ce:
                    d0:7f:35:27:68:1d:b3:ee:a8:2f:c3:64:d9:1e:ad:
                    6b:37:0a:23:60:48:fa:65:71:dc:01:8d:59:14:c5:
                    a2:a5:e1:19:b8:46:72:3b:1f:c5:99:e7:03:3a:6d:
                    d9:9b:0b:b6:3e:18:fe:a7:48:97:18:42:65:64:76:
                    05:79:7e:07:24:87:74:ca:b0:ea:08:a0:29:12:66:
                    1c:c1:7f:9e:39:f8:3c:75:f8:83:77:35:29:2c:9e:
                    8a:ae:c3:8e:cc:f8:52:10:f5:d4:fc:43:28:93:f3:
                    50:af:5d:8e:36:5b:e0:40:6f:f4:99:4b:5c:3a:07:
                    44:05:5f:d1:a8:40:a9:1d:74:43:c5:bd:17:7d:c6:
                    30:f7:4e:f0:ff:83:88:ae:28:bd:ae:18:82:a9:c5:
                    c6:95:79:e9:ab:3c:ef:e3:5c:62:bd:f4:e1:0e:79:
                    1b:d8:d5:74:81:84:9b:52:c0:b3:0e:33:20:27:ce:
                    79:36:59:f2:b5:a4:a7:9f:ea:20:c2:88:da:43:66:
                    2f:d7:5b:bd:41:a8:df:82:05:15:f9:02:83:65:e2:
                    f7:6b:09:3a:24:b4:d2:db:fb:27:dd:7f:60:bd:85:
                    72:02:fd:e1:8d:28:16:63:36:e7:93:ff:b7:f0:9e:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:FC:BD:86:A9:A4:FE:49:35:A9:DB:70:0D:B8:1F:55:FC:7A:87
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:58:10:33:7b:79:ed:1a:a5:12:b8:8c:63:6c:36:67:86:
         40:b8:62:99:df:d6:8d:51:3d:9d:cb:d0:4a:c1:95:44:f4:d2:
         98:15:a8:1f:bb:c1:25:53:ae:23:dd:d9:5a:bb:5f:51:fb:ee:
         a4:13:b3:ed:83:a2:37:27:4f:43:a4:01:01:d1:24:82:bf:07:
         ba:ea:0b:c8:c5:40:3f:1e:f2:d1:a6:bc:ad:54:db:1d:ac:26:
         92:69:ad:a7:03:18:2a:74:6d:ab:03:d7:6e:ba:39:17:97:a9:
         fb:51:82:f0:e5:88:8a:fc:36:68:d0:a5:f1:b5:89:39:ae:96:
         e5:fa:12:75:af:2d:2c:a3:75:a8:bf:c6:5d:e0:26:41:9d:94:
         ff:d6:01:29:29:69:0e:c0:ed:ae:34:20:ae:c3:3d:3d:3d:77:
         5b:1c:85:da:39:5e:a8:c5:13:7d:ba:06:34:21:f8:ea:e0:98:
         e6:88:42:d9:49:38:c5:8b:25:9b:20:f8:d5:02:7f:40:f5:13:
         6a:a7:8c:48:c3:4f:cc:f7:6e:ab:d7:8c:5c:84:c2:ce:b0:54:
         a3:36:6c:56:7d:c8:d0:69:0e:c0:42:ba:16:4d:81:85:f3:26:
         79:d9:8f:4d:0b:44:e5:7e:5f:a5:22:4e:b8:f4:be:69:fc:30:
         a0:88:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org