Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa (raw, json)
Hash identifier:          dvS6lM7BURN9hkoE4HNaif+yvZPqtjsMtxsjEnIZxhE=
Subject key identifier:   FE:9B:19:70:EE:01:CB:D4:3B:46:B0:32:27:95:4D:FD:91:66:35:C1
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       42930914AB879520F136E95AC4C3593A4943D50C
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:00 +0000
ROA not before:           Mon 19 Feb 2024 13:55:00 +0000
ROA not after:            Mon 17 Feb 2025 14:00:00 +0000
asID:                     266320
IP address blocks:        170.238.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:93:09:14:ab:87:95:20:f1:36:e9:5a:c4:c3:59:3a:49:43:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:00 2024 GMT
            Not After : Feb 17 14:00:00 2025 GMT
        Subject: CN=FE9B1970EE01CBD43B46B03227954DFD916635C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:21:96:14:73:8d:bc:02:d0:2e:ee:e5:0f:
                    74:1f:94:4f:a9:b0:54:2a:4d:bf:c9:22:01:c2:30:
                    5e:e4:95:85:c9:c5:09:38:68:c7:8c:2f:73:a6:63:
                    f9:a5:eb:4f:65:43:5f:e3:20:d3:92:a7:53:07:cc:
                    04:f7:12:ee:12:a7:00:cd:e3:95:b3:33:5b:65:67:
                    9e:18:c1:35:07:7b:4c:eb:30:0f:fe:5f:01:2e:65:
                    e4:48:a6:85:bf:88:17:24:31:6c:86:30:6a:67:7e:
                    f8:80:5e:2c:d3:57:ed:32:80:bf:a1:70:62:eb:30:
                    e2:ea:6e:06:15:17:f2:36:67:3f:a9:d0:d7:f8:c1:
                    f2:34:d2:b3:cb:33:ae:4b:2d:6f:64:48:f4:80:d6:
                    b7:0b:49:97:54:96:ea:7c:e9:a4:ad:d1:ab:ca:f0:
                    30:15:db:93:a4:98:f0:1c:06:64:66:dd:52:23:c9:
                    e0:ee:cc:54:27:42:d5:41:4d:87:c6:20:b8:82:a2:
                    b1:3b:09:5f:dd:8e:d4:c8:14:df:73:9a:d9:3c:fa:
                    aa:c3:79:ac:57:eb:2c:98:24:1c:e4:de:12:aa:f1:
                    69:b9:bd:1c:43:64:39:37:67:2f:99:2d:9d:e8:1e:
                    98:b1:95:af:40:85:71:2b:55:9f:6f:a5:a6:a4:9f:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:19:70:EE:01:CB:D4:3B:46:B0:32:27:95:4D:FD:91:66:35:C1
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:72:34:f5:f4:d3:d7:b0:b3:90:02:51:11:10:ba:41:88:b2:
         c4:1d:bd:eb:e3:61:88:b3:ad:89:a2:6b:4d:09:ac:5a:aa:52:
         06:82:78:82:23:64:d9:47:02:a8:54:e9:a2:9b:49:a9:8a:01:
         4b:10:3d:1a:61:81:15:42:88:30:78:35:b2:2f:d4:50:a4:4e:
         43:50:c6:c7:ca:5e:94:b8:0a:59:53:10:a9:34:1a:a8:cb:1b:
         9b:c5:21:de:1c:f0:d9:a9:ba:2a:bb:63:96:16:2f:8a:e9:8b:
         e4:36:e0:af:30:70:49:fa:01:9d:57:86:2d:ad:b7:08:6c:e0:
         57:55:7e:d6:e7:bf:79:4e:cd:c0:45:a1:ca:f1:51:62:34:29:
         88:8a:f5:2e:b5:e6:0d:35:80:b0:c5:19:9c:2a:23:27:99:c3:
         39:30:84:9e:df:7c:46:f8:17:fb:ca:3a:c5:61:3a:4b:ca:cb:
         b4:72:ad:cf:3a:08:68:df:af:93:d2:45:de:7a:d7:16:5d:6d:
         79:32:f5:f1:3b:12:d4:f2:e0:cd:14:a8:be:47:66:9a:8d:c2:
         aa:ba:44:c6:91:83:6a:f5:1b:e5:ce:4f:0f:3e:03:65:96:45:
         29:2c:56:e1:9c:71:7e:96:53:27:98:14:c1:74:bf:41:ac:1e:
         a0:5e:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org