Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          tmNg6n5JdFMizysVyTbgIzP2AKgfiRI5Cv1Ul45na7Y=
Subject key identifier:   9D:BF:38:21:64:F9:AB:BE:CF:A8:1F:F1:C3:5D:74:06:5E:89:C1:87
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       1D1F32226168AE7995AE4B52542DF0977E01D880
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:00 +0000
ROA not before:           Mon 19 Feb 2024 13:55:00 +0000
ROA not after:            Mon 17 Feb 2025 14:00:00 +0000
asID:                     266320
IP address blocks:        170.238.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:32:22:61:68:ae:79:95:ae:4b:52:54:2d:f0:97:7e:01:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:00 2024 GMT
            Not After : Feb 17 14:00:00 2025 GMT
        Subject: CN=9DBF382164F9ABBECFA81FF1C35D74065E89C187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:b2:3c:c1:8e:0a:d4:a6:d6:6c:e1:d5:d7:
                    fc:67:fc:d3:6e:80:35:21:ee:69:42:4a:10:06:8c:
                    cb:3b:2c:c2:de:7b:5d:18:cb:a5:57:c8:e6:65:65:
                    4d:f1:22:c3:1f:c1:36:bf:00:c8:cd:2b:cf:93:07:
                    3f:2b:56:fc:ea:bb:59:92:9c:d5:7f:43:b3:17:53:
                    c9:c2:f7:1f:ea:27:a4:cf:9b:f0:b4:41:69:fa:7d:
                    70:3b:b5:92:0b:0b:6d:21:ad:72:45:dd:18:5f:b9:
                    e5:b6:8b:bb:5d:46:f1:2c:11:4f:8c:27:16:99:21:
                    77:8c:42:40:36:87:4b:5e:9d:ba:e1:cd:3f:91:40:
                    02:3b:bb:db:c0:fb:e5:87:c9:9a:1d:d6:87:3b:b2:
                    1d:21:6c:a7:b0:17:b8:8a:19:41:cc:c4:b6:9c:6c:
                    8a:b0:82:a9:04:60:31:a4:2d:7e:c3:43:54:e0:c8:
                    1e:05:22:9b:d2:f1:a0:14:43:38:36:23:12:f8:cc:
                    52:8d:5b:78:2b:d6:21:dc:b8:17:bc:06:6b:67:f1:
                    32:08:a7:5b:c4:c1:6b:90:6c:1a:e4:c0:72:50:48:
                    ed:e0:d2:3c:3f:e7:c2:b4:2a:e2:52:20:0f:52:47:
                    92:b9:85:f7:74:b5:a1:20:dd:f4:74:14:cb:ed:b4:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:38:21:64:F9:AB:BE:CF:A8:1F:F1:C3:5D:74:06:5E:89:C1:87
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:75:89:6b:d9:89:79:62:e4:77:75:28:e6:6f:e9:8f:46:
         9e:00:85:55:ee:66:07:c5:46:76:28:a6:56:5a:97:01:0d:65:
         b6:7f:01:2c:e4:1c:e6:b6:57:18:4c:10:9f:cc:9f:5e:2b:83:
         3a:72:6f:29:1b:d3:b0:28:f8:92:dd:ca:d8:05:95:a9:8c:af:
         b1:a2:b4:25:82:07:3e:8d:11:73:17:1d:e5:88:91:c9:b1:de:
         e8:0a:4a:18:35:5b:7b:4d:a9:98:44:96:52:e5:5d:af:12:55:
         e0:fe:d6:99:99:39:c0:17:69:a9:1d:4e:cd:87:e0:21:b4:c1:
         7d:99:78:82:7b:b1:4a:c9:68:e3:05:6d:30:cc:9f:5b:f3:f2:
         fb:1d:55:d8:f3:15:71:db:49:a6:0f:08:3d:61:a0:07:22:de:
         90:d2:d5:b0:30:07:11:dc:62:df:cf:b5:35:c4:97:44:d6:b6:
         23:c6:9d:a6:41:f8:ad:c3:fe:51:2a:9d:2c:b3:11:44:ca:08:
         77:03:59:87:08:9d:5c:1d:16:4b:fd:c0:15:44:58:a2:e4:c6:
         24:3c:de:3c:20:26:11:e2:32:5c:1a:25:22:7b:66:f5:44:0e:
         62:b0:47:a3:90:d2:f6:6e:d8:4e:aa:70:6e:c3:72:05:94:a2:
         a0:65:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org