Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231312e302f32342d3234203d3e20323635323239.roa
File:                     3137302e3234372e3231312e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          UBETnsViEjlx4GJ8AHI6Sl0Zy4wijo/ND6jUH/+tYus=
Subject key identifier:   51:08:78:B5:03:C4:B8:63:1C:58:15:CD:EF:D7:67:3B:03:07:54:F1
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       4943418AEF2B6F6D40172BF69D6C984A0EDAC257
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231312e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:54 +0000
ROA not before:           Mon 09 Oct 2023 23:46:54 +0000
ROA not after:            Mon 07 Oct 2024 23:51:54 +0000
asID:                     265229
IP address blocks:        170.247.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:43:41:8a:ef:2b:6f:6d:40:17:2b:f6:9d:6c:98:4a:0e:da:c2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:54 2023 GMT
            Not After : Oct  7 23:51:54 2024 GMT
        Subject: CN=510878B503C4B8631C5815CDEFD7673B030754F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:f2:8c:b9:ce:c7:b9:25:f0:14:e3:6b:d7:
                    32:f2:97:31:be:04:aa:77:a8:93:99:d6:5a:dd:ec:
                    77:a4:89:8e:c8:4b:36:b2:9f:da:b2:2f:c1:23:fa:
                    d0:cb:c2:85:87:cf:e8:be:8d:32:bd:5d:7a:b9:1a:
                    47:98:66:df:a6:57:f9:ac:7c:97:0d:ec:80:7c:1d:
                    fc:fc:a9:bd:cc:1d:54:98:04:7e:de:23:14:f0:1e:
                    cd:43:38:38:79:5e:38:d7:1e:3a:f7:28:4a:d7:29:
                    74:b8:bf:5d:85:03:dc:0b:6f:39:b2:cd:22:31:2d:
                    e7:d7:97:82:a6:bf:49:5e:1c:58:7e:94:ed:7a:d0:
                    4d:12:9f:0a:76:1a:04:b1:20:6e:24:21:9a:03:7b:
                    c7:bb:29:d2:be:f7:a0:19:03:f2:3f:be:d4:21:b1:
                    21:0d:7a:26:b7:bc:61:15:d8:79:b2:6d:27:a0:01:
                    a7:63:a9:b1:90:28:a1:97:c7:45:de:68:e7:c5:9c:
                    b1:34:2b:73:ed:79:14:79:2b:4b:e6:38:0e:aa:2c:
                    89:f3:97:5e:b6:66:24:89:9f:17:a1:b2:1a:e9:85:
                    69:1b:2f:15:6a:0e:06:de:3f:e5:6d:6b:c5:da:8f:
                    2d:46:6c:da:00:18:cf:f1:5a:93:86:c6:bf:8c:5b:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:78:B5:03:C4:B8:63:1C:58:15:CD:EF:D7:67:3B:03:07:54:F1
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3231312e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:6e:66:f9:33:26:57:ef:17:6c:71:34:a7:85:23:7b:6c:
         41:9f:8a:82:62:d5:9f:ab:cb:a7:81:dc:23:37:82:2b:56:a6:
         56:52:4b:f3:e9:0f:4a:5f:b6:9c:ad:f2:0c:27:fa:24:a0:c8:
         7a:0d:16:9e:4f:7f:c4:3f:34:06:66:4b:5f:44:7d:1d:c1:38:
         eb:24:7a:d1:3a:6f:87:bd:07:e6:e5:c6:b1:e6:b1:50:d4:33:
         f6:57:f2:80:11:d3:3a:79:79:a6:e9:a2:ff:0a:e6:e2:23:f8:
         10:d0:90:3b:df:97:1c:30:8f:dc:06:ca:36:87:ca:49:7d:0c:
         24:70:05:1f:3e:4e:b2:dc:f5:d8:46:c4:e6:ef:90:f8:33:58:
         3a:54:a2:09:93:74:99:e9:26:af:ba:3d:ca:78:99:60:8d:db:
         e1:27:0b:05:64:66:29:ee:f8:95:2b:fa:69:aa:91:38:86:ee:
         19:73:f0:05:a0:5e:6c:60:f3:c8:be:8b:88:a1:83:be:90:05:
         77:7b:1f:22:e4:92:67:33:21:70:50:9d:18:e7:13:69:5f:c9:
         30:2e:6f:96:ad:6b:b1:58:95:6e:e6:2a:ca:1a:9e:07:3d:47:
         2c:42:a9:62:00:ea:71:33:ce:3d:79:cd:ca:26:3d:65:f5:7f:
         68:33:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org