Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          XFZY3u6mGQpdLFG77egbL3FpuKUzBfCaD0u0OZwyO+w=
Subject key identifier:   FF:49:D8:D6:C2:D1:E5:74:74:CF:34:C6:76:F4:B5:2D:D1:77:54:F1
Certificate issuer:       /CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
Certificate serial:       3A7EFEA4D383C23C66CBB0AE7ACCED1D75CB4A9E
Authority key identifier: A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
Signing time:             Tue 11 Jul 2023 19:02:43 +0000
ROA not before:           Tue 11 Jul 2023 18:57:43 +0000
ROA not after:            Tue 09 Jul 2024 19:02:43 +0000
asID:                     266327
IP address blocks:        170.238.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7e:fe:a4:d3:83:c2:3c:66:cb:b0:ae:7a:cc:ed:1d:75:cb:4a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
        Validity
            Not Before: Jul 11 18:57:43 2023 GMT
            Not After : Jul  9 19:02:43 2024 GMT
        Subject: CN=FF49D8D6C2D1E57474CF34C676F4B52DD17754F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:5d:84:51:05:07:56:41:3e:26:67:b9:9b:
                    ef:df:5a:9b:a6:93:3e:07:b8:73:59:34:c5:5f:7c:
                    75:fb:62:7d:3f:cc:c6:5e:5e:16:ad:d1:94:9a:c3:
                    2f:36:ec:fe:ba:34:76:9b:32:17:f9:c7:6c:3a:1b:
                    9f:6f:6d:fb:62:d3:8e:5f:c4:77:f6:5c:df:25:ed:
                    39:de:60:b3:d7:8c:6c:ee:f8:39:fe:66:36:92:92:
                    6a:fb:25:f7:e0:95:81:b0:e3:e5:d8:92:b0:7e:7c:
                    cf:40:d4:33:8b:9c:46:65:13:44:81:93:5f:ee:05:
                    01:ee:4f:01:29:77:5e:67:3f:9b:d6:37:52:a6:5e:
                    ab:97:7e:04:86:6a:70:51:9b:18:7e:7f:8b:3b:38:
                    5c:dd:b3:0e:73:bd:95:20:63:b7:3d:b3:f2:49:4d:
                    62:b4:30:4e:f3:a7:85:29:a4:23:80:09:65:e8:91:
                    e6:40:fb:66:bb:d9:95:76:04:9b:d3:8e:e6:dc:82:
                    1d:b7:8f:ef:7f:f9:45:5a:5a:17:ed:67:d6:d2:84:
                    d8:77:40:66:8a:49:a9:b1:d0:4c:e4:11:54:b1:e4:
                    dd:89:1c:4a:0a:30:9f:d4:c8:45:68:29:43:a8:8a:
                    9a:c9:2c:32:31:0c:24:e7:8e:cb:95:ea:6e:d1:bb:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:49:D8:D6:C2:D1:E5:74:74:CF:34:C6:76:F4:B5:2D:D1:77:54:F1
            X509v3 Authority Key Identifier:
                keyid:A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:11:30:7e:2b:7a:ab:6b:8f:ab:7d:b5:66:bc:a9:23:57:9a:
         61:78:a7:d5:d9:ce:bb:bb:fa:ce:41:88:e3:64:22:86:22:13:
         7e:68:38:e7:48:66:c0:aa:de:99:85:24:01:c5:e2:bc:38:49:
         05:3d:38:3c:6c:86:85:1c:09:8a:0e:7f:01:c5:76:93:e5:5e:
         84:59:91:a3:f7:3f:3a:e9:b2:01:44:b8:28:0b:71:d6:66:c4:
         a3:ea:9a:b3:8a:08:32:99:96:b4:0c:c7:39:5a:a3:56:a9:af:
         73:eb:4e:da:9a:af:57:7b:2d:a8:8b:41:5e:a2:51:d0:44:d1:
         65:95:a7:ca:6a:8b:3c:92:b8:6a:07:88:15:0a:6d:94:fc:e5:
         84:69:5d:ec:bd:db:26:21:f4:cc:ce:0f:0d:4c:8b:87:36:93:
         47:71:d8:d0:da:95:03:df:f0:f7:22:7e:2d:c0:a9:17:3c:3c:
         45:b1:d7:20:92:cc:ec:00:28:45:ce:40:f1:f2:03:51:dc:2b:
         c7:8e:a9:c5:b2:8d:c6:7d:8f:02:05:29:c2:ac:e8:ed:e4:dc:
         af:ee:fe:3d:ec:b5:91:c2:11:db:0b:ba:92:f7:92:e8:97:0c:
         6e:9d:fd:28:2f:16:eb:70:96:7e:2e:3b:61:ca:8a:a2:6e:66:
         0e:55:5b:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOn7+pNODwjxmy7CuesztHXXLSp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMwQTBFQ0QwRkVDOTE5OUU2MEEzNDFGMDZDMjc2ODAz
NjhEQ0UwOTAeFw0yMzA3MTExODU3NDNaFw0yNDA3MDkxOTAyNDNaMDMxMTAvBgNV
BAMTKEZGNDlEOEQ2QzJEMUU1NzQ3NENGMzRDNjc2RjRCNTJERDE3NzU0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMV2EUQUHVkE+Jme5m+/fWpum
kz4HuHNZNMVffHX7Yn0/zMZeXhat0ZSawy827P66NHabMhf5x2w6G59vbfti045f
xHf2XN8l7TneYLPXjGzu+Dn+ZjaSkmr7JffglYGw4+XYkrB+fM9A1DOLnEZlE0SB
k1/uBQHuTwEpd15nP5vWN1KmXquXfgSGanBRmxh+f4s7OFzdsw5zvZUgY7c9s/JJ
TWK0ME7zp4UppCOACWXokeZA+2a72ZV2BJvTjubcgh23j+9/+UVaWhftZ9bShNh3
QGaKSamx0EzkEVSx5N2JHEoKMJ/UyEVoKUOoiprJLDIxDCTnjsuV6m7RuzH7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/0nY1sLR5XR0zzTGdvS1LdF3VPEwHwYDVR0j
BBgwFoAUowoOzQ/skZnmCjQfBsJ2gDaNzgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR214ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJY
MUcvMC9BMzBBMEVDRDBGRUM5MTk5RTYwQTM0MUYwNkMyNzY4MDM2OERDRTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzMEEwRUNEMEZFQzkxOTlF
NjBBMzQxRjA2QzI3NjgwMzY4RENFMDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dteGVDSDRNV0FUcXhWdzlteUExcFFvWU5zTXVDQmZ4anJtNzQzQ1ZCWDFHLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKruozANBgkqhkiG9w0BAQsFAAOCAQEAFxEw
fit6q2uPq321ZrypI1eaYXin1dnOu7v6zkGI42QihiITfmg450hmwKremYUkAcXi
vDhJBT04PGyGhRwJig5/AcV2k+VehFmRo/c/OumyAUS4KAtx1mbEo+qas4oIMpmW
tAzHOVqjVqmvc+tO2pqvV3stqItBXqJR0ETRZZWnymqLPJK4ageIFQptlPzlhGld
7L3bJiH0zM4PDUyLhzaTR3HY0NqVA9/w9yJ+LcCpFzw8RbHXIJLM7AAoRc5A8fID
Udwrx46pxbKNxn2PAgUpwqzo7eTcr+7+Pey1kcIR2wu6kveS6JcMbp39KC8W63CW
fi47YcqKom5mDlVbAg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org