Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32342d3234203d3e20323635323239.roa
File:                     3137302e3234372e3231302e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          Xr7RRfwolVY0o8wItE5lbcQ7qCBFy0ytlv+fsN02W6c=
Subject key identifier:   22:25:F1:D1:F6:2E:1E:38:D8:E6:3D:F2:84:44:2B:CE:BE:8C:BF:72
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       644BE06C8DC4753D27BD84E3BE1F5B8EF816D43D
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:55 +0000
ROA not before:           Mon 09 Oct 2023 23:46:55 +0000
ROA not after:            Mon 07 Oct 2024 23:51:55 +0000
asID:                     265229
IP address blocks:        170.247.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4b:e0:6c:8d:c4:75:3d:27:bd:84:e3:be:1f:5b:8e:f8:16:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:55 2023 GMT
            Not After : Oct  7 23:51:55 2024 GMT
        Subject: CN=2225F1D1F62E1E38D8E63DF284442BCEBE8CBF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:c7:dd:b6:69:d6:e6:17:fd:1c:11:40:2d:
                    9d:ca:ae:36:9f:0e:97:fc:97:14:74:8f:cf:9a:b3:
                    e6:32:2e:01:47:1b:76:0a:79:14:b6:2c:82:05:81:
                    90:00:3a:71:a4:5c:7c:ac:ad:30:28:20:82:65:da:
                    48:8f:cc:74:0a:99:93:84:91:58:e3:bc:4c:29:a2:
                    a8:e4:ff:ff:66:dc:c0:13:32:ea:01:a7:b2:7b:e1:
                    d2:e0:bc:36:4f:27:7b:59:0a:43:ed:e7:af:fd:7a:
                    f0:19:bd:96:25:70:8a:72:3f:ac:f9:7b:52:37:e9:
                    d5:79:1d:79:bf:56:2b:60:12:48:24:b3:40:4c:7b:
                    83:d8:ee:8c:ce:3e:2c:51:68:9a:2a:90:6c:8c:5c:
                    f1:19:73:be:98:21:ce:9c:b9:0f:b9:f0:e9:24:4e:
                    ee:94:d8:a8:09:93:e9:81:8a:d7:38:65:2d:c9:5b:
                    b6:d2:f6:30:1c:73:27:b0:c3:9e:ca:63:2b:6c:45:
                    68:53:39:05:25:50:90:c7:4a:17:21:c4:0a:ae:eb:
                    2c:10:6c:e3:3a:6b:5a:9b:c3:ae:1c:fc:a5:75:12:
                    4f:19:a4:0f:cf:64:86:af:3f:df:62:7e:05:70:ce:
                    a4:59:2a:bb:79:50:b4:78:86:a3:40:df:2a:07:b8:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:F1:D1:F6:2E:1E:38:D8:E6:3D:F2:84:44:2B:CE:BE:8C:BF:72
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231302e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:f9:ac:5e:3c:ba:41:28:bf:06:87:b7:89:ca:41:b9:ec:bf:
         03:b6:4b:36:db:6f:89:6b:52:f7:b2:00:5c:79:20:c4:8e:eb:
         ca:44:5e:57:66:2e:f9:63:8a:50:f2:96:8c:b9:db:87:fa:e4:
         e6:36:b4:d5:f9:fd:d2:d1:47:aa:34:44:fa:a3:18:97:00:84:
         f4:be:0c:b6:df:3d:97:25:04:b2:d8:76:89:b2:18:19:60:7e:
         ef:5c:ae:d8:e2:3c:34:28:33:cc:6b:9e:de:f7:94:dc:9a:a9:
         13:3f:04:e8:9d:d0:07:72:83:7c:be:67:cf:06:c5:89:01:56:
         9a:5d:1c:75:68:6d:e1:ef:b5:eb:f8:2d:99:4a:ee:1b:3b:7b:
         32:d1:1e:bb:36:23:d3:1d:5a:55:33:62:3f:50:31:55:60:b1:
         9a:96:b4:50:6d:6c:53:70:d4:48:71:f1:f9:92:a8:0c:bb:1e:
         31:c2:bc:48:da:93:05:27:1d:6f:cb:83:8c:bf:1f:e4:8b:d2:
         b7:19:16:61:a8:5f:85:ba:11:c3:ee:15:b6:87:99:51:d3:7c:
         21:c7:23:a8:59:26:0b:31:fb:1b:15:e9:28:ac:63:77:63:8c:
         cd:bd:bd:ac:83:03:7f:61:b9:45:91:e3:d4:1b:2d:2a:76:d2:
         a3:54:1b:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZEvgbI3EdT0nvYTjvh9bjvgW1D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcx
Qjg4QTlDOTAeFw0yMzEwMDkyMzQ2NTVaFw0yNDEwMDcyMzUxNTVaMDMxMTAvBgNV
BAMTKDIyMjVGMUQxRjYyRTFFMzhEOEU2M0RGMjg0NDQyQkNFQkU4Q0JGNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+z8fdtmnW5hf9HBFALZ3Krjaf
Dpf8lxR0j8+as+YyLgFHG3YKeRS2LIIFgZAAOnGkXHysrTAoIIJl2kiPzHQKmZOE
kVjjvEwpoqjk//9m3MATMuoBp7J74dLgvDZPJ3tZCkPt56/9evAZvZYlcIpyP6z5
e1I36dV5HXm/VitgEkgks0BMe4PY7ozOPixRaJoqkGyMXPEZc76YIc6cuQ+58Okk
Tu6U2KgJk+mBitc4ZS3JW7bS9jAccyeww57KYytsRWhTOQUlUJDHShchxAqu6ywQ
bOM6a1qbw64c/KV1Ek8ZpA/PZIavP99ifgVwzqRZKrt5ULR4hqNA3yoHuNpTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIiXx0fYuHjjY5j3yhEQrzr6Mv3IwHwYDVR0j
BBgwFoAUD5shypQZ2v32Y/+sXYFYlxuIqckwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRV
LzAvMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcxQjg4QTlDOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRjlCMjFDQTk0MTlEQUZERjY2
M0ZGQUM1RDgxNTg5NzFCODhBOUM5LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
QTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRVLzAvMzEz
NzMwMmUzMjM0MzcyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NTMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKr30jANBgkqhkiG9w0BAQsFAAOCAQEA3/msXjy6
QSi/Boe3icpBuey/A7ZLNttviWtS97IAXHkgxI7rykReV2Yu+WOKUPKWjLnbh/rk
5ja01fn90tFHqjRE+qMYlwCE9L4Mtt89lyUEsth2ibIYGWB+71yu2OI8NCgzzGue
3veU3JqpEz8E6J3QB3KDfL5nzwbFiQFWml0cdWht4e+16/gtmUruGzt7MtEeuzYj
0x1aVTNiP1AxVWCxmpa0UG1sU3DUSHHx+ZKoDLseMcK8SNqTBScdb8uDjL8f5IvS
txkWYahfhboRw+4VtoeZUdN8IccjqFkmCzH7GxXpKKxjd2OMzb29rIMDf2G5RZHj
1BstKnbSo1QbYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org