Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32332d3233203d3e20323635323239.roa
File:                     3137302e3234372e3231302e302f32332d3233203d3e20323635323239.roa (raw, json)
Hash identifier:          tsfP3x3MF3h2DR6QDTa/7uiuUoJE5H9wfUHLYypeyik=
Subject key identifier:   E2:B5:9A:A2:A9:EF:C9:BE:70:44:FB:34:C3:36:97:D8:39:5D:E7:AB
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       7F4DA9920F807865B147E8EE499DAC0A0AC371B2
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32332d3233203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:51 +0000
ROA not before:           Mon 09 Oct 2023 23:46:51 +0000
ROA not after:            Mon 07 Oct 2024 23:51:51 +0000
asID:                     265229
IP address blocks:        170.247.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4d:a9:92:0f:80:78:65:b1:47:e8:ee:49:9d:ac:0a:0a:c3:71:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:51 2023 GMT
            Not After : Oct  7 23:51:51 2024 GMT
        Subject: CN=E2B59AA2A9EFC9BE7044FB34C33697D8395DE7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:31:c7:b9:8f:26:91:eb:60:90:a3:58:2d:
                    ec:53:fe:3b:7d:ad:ad:ab:22:65:a6:dc:4f:bc:90:
                    43:15:3a:27:43:3b:30:5d:7f:57:57:ed:22:d8:95:
                    79:b6:15:86:96:2f:30:5a:33:03:40:fe:e9:9f:b7:
                    fd:32:46:f5:61:3e:3f:0d:3a:e7:74:ae:ec:0e:88:
                    48:81:8a:36:97:78:2c:10:e0:b0:69:5a:f9:70:f6:
                    10:53:3e:70:28:e2:80:aa:73:16:92:aa:c3:21:2b:
                    48:c6:f7:97:f5:5c:6d:ef:e0:30:00:eb:fa:8d:17:
                    c0:de:21:8f:99:5a:36:4a:36:5a:1c:11:33:57:86:
                    70:da:b4:92:a5:cd:ce:7c:31:9e:f7:b5:0e:5e:85:
                    56:dc:6a:2e:c9:f1:fa:b9:3b:e8:19:8b:1b:78:ab:
                    45:f0:b0:cf:5b:da:3e:92:7b:ab:ec:23:cb:ca:2d:
                    e7:e7:01:08:4a:1a:6b:e0:8d:d6:29:62:6e:53:91:
                    25:ca:f1:e2:5c:62:6b:2e:6d:41:45:3d:d8:55:4f:
                    3a:2b:db:c6:5b:fb:61:69:f5:d6:87:04:30:e6:4d:
                    46:b8:3c:ba:42:34:9b:87:a6:4f:dc:08:9c:db:d5:
                    df:07:b9:94:88:6f:31:47:6e:53:7e:c1:85:32:87:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:9A:A2:A9:EF:C9:BE:70:44:FB:34:C3:36:97:D8:39:5D:E7:AB
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32332d3233203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:2f:dd:92:7f:ab:53:6c:ec:fd:0a:b1:ae:d4:9b:ed:e5:
         b9:15:5e:17:69:b0:04:7a:4c:3b:9d:6e:12:c2:46:e6:4d:d3:
         5b:ce:cd:85:74:05:1f:e1:3f:d6:32:3f:62:c6:ed:b0:1a:7e:
         dd:7a:f6:c0:95:22:e1:46:c9:bc:c5:d7:b8:ae:10:6c:89:b6:
         9b:a8:b5:72:0a:e9:94:cc:bc:20:26:b4:6d:3f:b2:a4:2f:c9:
         44:c9:63:d4:2e:6b:db:2c:6b:22:03:6a:8e:11:7f:9e:bc:42:
         14:5c:1a:1b:93:25:ea:f8:10:a6:b5:aa:44:31:97:0a:85:2d:
         c1:b1:95:de:16:22:73:dd:7e:53:4e:3f:1d:08:51:08:6d:70:
         74:83:1c:25:08:86:3d:54:0c:49:29:cf:90:14:f4:ba:ea:07:
         86:cd:20:ce:e8:4f:71:7f:c0:82:f9:03:65:ac:10:6e:c9:14:
         6c:b6:76:ff:46:60:b6:73:08:17:fe:0f:ae:8a:ff:a7:56:50:
         26:46:1b:59:a4:0a:5e:f0:c5:59:be:df:d6:93:83:7a:3a:c0:
         f7:d9:ac:59:b7:e3:e2:3f:7c:bd:4c:26:fa:cd:77:3f:4e:28:
         df:18:c8:9f:4d:3b:87:e5:9d:a4:82:62:7a:cf:1f:26:e2:6a:
         2d:cc:ff:10
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf02pkg+AeGWxR+juSZ2sCgrDcbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcx
Qjg4QTlDOTAeFw0yMzEwMDkyMzQ2NTFaFw0yNDEwMDcyMzUxNTFaMDMxMTAvBgNV
BAMTKEUyQjU5QUEyQTlFRkM5QkU3MDQ0RkIzNEMzMzY5N0Q4Mzk1REU3QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFjHHuY8mketgkKNYLexT/jt9
ra2rImWm3E+8kEMVOidDOzBdf1dX7SLYlXm2FYaWLzBaMwNA/umft/0yRvVhPj8N
Oud0ruwOiEiBijaXeCwQ4LBpWvlw9hBTPnAo4oCqcxaSqsMhK0jG95f1XG3v4DAA
6/qNF8DeIY+ZWjZKNlocETNXhnDatJKlzc58MZ73tQ5ehVbcai7J8fq5O+gZixt4
q0XwsM9b2j6Se6vsI8vKLefnAQhKGmvgjdYpYm5TkSXK8eJcYmsubUFFPdhVTzor
28Zb+2Fp9daHBDDmTUa4PLpCNJuHpk/cCJzb1d8HuZSIbzFHblN+wYUyh4SxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4rWaoqnvyb5wRPs0wzaX2Dld56swHwYDVR0j
BBgwFoAUD5shypQZ2v32Y/+sXYFYlxuIqckwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRV
LzAvMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcxQjg4QTlDOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRjlCMjFDQTk0MTlEQUZERjY2
M0ZGQUM1RDgxNTg5NzFCODhBOUM5LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
QTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRVLzAvMzEz
NzMwMmUzMjM0MzcyZTMyMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NTMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAar30jANBgkqhkiG9w0BAQsFAAOCAQEApbwv3ZJ/
q1Ns7P0Ksa7Um+3luRVeF2mwBHpMO51uEsJG5k3TW87NhXQFH+E/1jI/YsbtsBp+
3Xr2wJUi4UbJvMXXuK4QbIm2m6i1cgrplMy8ICa0bT+ypC/JRMlj1C5r2yxrIgNq
jhF/nrxCFFwaG5Ml6vgQprWqRDGXCoUtwbGV3hYic91+U04/HQhRCG1wdIMcJQiG
PVQMSSnPkBT0uuoHhs0gzuhPcX/AgvkDZawQbskUbLZ2/0ZgtnMIF/4Pror/p1ZQ
JkYbWaQKXvDFWb7f1pODejrA99msWbfj4j98vUwm+s13P04o3xjIn007h+WdpIJi
es8fJuJqLcz/EA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org