Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230392e302f32342d3234203d3e20323635323239.roa
File:                     3137302e3234372e3230392e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          9uCrSxA1dAlcLqtjKAED9iA/tkApc2asaIzjq83wdEU=
Subject key identifier:   41:42:F2:28:20:03:17:32:0B:18:70:B3:B4:D9:CB:75:3D:91:04:CE
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       505F94AD69BB50CEC7DBAA0E8C892E062D24A024
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230392e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:54 +0000
ROA not before:           Mon 09 Oct 2023 23:46:54 +0000
ROA not after:            Mon 07 Oct 2024 23:51:54 +0000
asID:                     265229
IP address blocks:        170.247.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:94:ad:69:bb:50:ce:c7:db:aa:0e:8c:89:2e:06:2d:24:a0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:54 2023 GMT
            Not After : Oct  7 23:51:54 2024 GMT
        Subject: CN=4142F228200317320B1870B3B4D9CB753D9104CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:64:ae:0e:37:47:81:1d:a4:fc:1a:11:11:
                    dc:88:a4:c0:d4:99:a3:59:64:83:10:65:52:1a:8e:
                    b2:e1:38:dd:80:a9:94:81:13:f2:c1:a5:bb:f1:44:
                    59:bd:45:91:36:26:9e:20:70:07:a4:90:9c:b9:f0:
                    f0:cb:e2:07:52:28:6e:48:84:12:7d:ab:34:fa:1d:
                    7b:48:ea:4e:99:40:2d:8e:b6:c2:f8:35:fd:76:02:
                    01:09:e1:64:6e:27:0e:77:60:ed:ed:9b:dd:eb:af:
                    0f:51:d9:52:0b:e8:a8:1b:0c:2e:9d:8c:73:61:3f:
                    10:2d:48:73:24:6e:18:49:70:f3:a4:96:61:40:2d:
                    1b:41:fe:40:58:1a:11:50:41:72:1c:0f:a7:c6:a8:
                    ef:97:46:15:94:3d:9b:90:95:e5:7d:ec:44:c2:f8:
                    6e:c4:dd:14:5b:5b:16:fd:5d:46:d8:7a:a4:d1:c3:
                    f0:9e:7a:a0:1b:fd:4b:6b:e3:2c:3e:5d:21:9c:0e:
                    c2:62:49:71:fd:70:cd:89:50:ac:b8:fb:97:20:cd:
                    fc:c8:86:11:8f:41:d1:41:3b:d5:d9:00:12:19:c7:
                    46:b9:e1:db:db:d0:a5:3a:92:06:a5:44:2e:ca:31:
                    d2:76:e4:ce:5c:af:a1:64:26:85:f8:8c:83:c0:d7:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:F2:28:20:03:17:32:0B:18:70:B3:B4:D9:CB:75:3D:91:04:CE
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230392e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:86:f7:3f:2e:80:ba:20:d5:da:5a:5c:67:cf:b0:fc:5e:8e:
         48:3a:b4:95:83:af:45:06:df:35:a9:e9:46:81:c8:3e:ef:98:
         b9:6e:43:78:e6:2c:6f:2d:2d:2a:ea:ac:b5:e9:d9:b8:58:47:
         41:78:57:b0:6c:bb:ac:b0:c8:dc:2f:69:55:c3:38:26:09:58:
         7c:3f:4b:34:6d:58:b5:5b:62:b7:dd:04:fc:5c:c9:5f:99:a3:
         06:18:b2:ee:d5:61:ed:6b:aa:60:b7:b9:95:a0:df:36:0c:42:
         3a:9c:24:3c:a6:aa:7a:5c:ac:59:a2:bf:ee:2a:5c:b8:12:f4:
         9e:0f:d8:cf:d4:91:c2:0b:86:44:6d:78:7f:da:ec:81:0c:0e:
         31:80:1d:46:41:a1:6d:cd:8b:9e:5c:82:2d:15:c9:cb:43:f2:
         a6:fc:1f:62:f8:aa:f1:43:20:d2:86:6f:7d:1a:14:42:17:b2:
         33:b2:a2:11:d1:61:22:fa:3b:8d:2d:db:88:4a:78:e2:d5:32:
         cf:24:02:b6:a8:9d:ce:02:55:c8:9f:a0:95:fe:9b:2e:ba:10:
         d2:35:43:e3:ab:a1:9d:64:01:bd:55:c6:6b:be:a3:58:40:0c:
         37:9f:46:96:05:8c:1a:5d:ee:c4:fe:88:87:f9:92:84:8e:ee:
         27:a9:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org