Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          OCyury5PW0wrItbdhV9+bONmjBe3LmEWhTGooqisAio=
Subject key identifier:   EB:84:21:16:4A:EF:2A:36:73:F1:DB:17:89:FF:65:2F:6C:FF:F5:CA
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       5744463D6967A0F7767E1BC7F80D0AC76552BC35
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:00 +0000
ROA not before:           Mon 19 Feb 2024 13:55:00 +0000
ROA not after:            Mon 17 Feb 2025 14:00:00 +0000
asID:                     266320
IP address blocks:        170.238.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:46:3d:69:67:a0:f7:76:7e:1b:c7:f8:0d:0a:c7:65:52:bc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:00 2024 GMT
            Not After : Feb 17 14:00:00 2025 GMT
        Subject: CN=EB8421164AEF2A3673F1DB1789FF652F6CFFF5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:30:aa:e4:fc:1e:43:51:71:9c:fa:3d:8b:
                    d1:97:99:8e:a6:fe:6f:94:18:31:a5:a8:d0:30:c9:
                    aa:21:f3:b5:d6:b3:ae:9f:a8:56:d7:10:e1:2b:20:
                    93:50:f2:b8:e1:82:63:4b:cb:ad:27:fb:1a:67:a2:
                    ba:41:57:74:9a:31:6c:8b:8b:3b:4f:18:92:07:7e:
                    10:58:fe:e2:74:91:6b:c1:b0:c0:57:3f:30:d0:90:
                    a1:69:f2:55:cb:76:3b:6c:dc:1a:06:d5:ba:b1:1c:
                    f0:7e:dc:0a:aa:fe:53:0e:db:aa:54:09:5c:e9:c0:
                    05:b6:47:96:8d:06:5c:c4:3d:b0:4c:e8:68:45:3e:
                    b7:4a:81:cc:51:e6:b5:a3:4e:ea:71:5e:c2:b1:29:
                    3e:37:01:51:53:83:32:de:99:14:92:bd:b4:81:59:
                    d4:9f:dc:b7:9d:53:1f:75:4e:e1:55:f4:83:6f:5f:
                    ac:49:ee:d1:19:7b:91:5c:21:f9:52:96:ed:32:e6:
                    7e:57:55:98:15:0f:1f:d8:77:16:d3:9f:c3:08:af:
                    52:66:b9:2e:fc:6d:7a:34:ef:bf:b3:1f:02:c7:08:
                    f2:dc:02:e6:48:d4:62:ad:48:2a:fc:3f:b7:4d:1b:
                    6c:56:76:46:01:95:a2:70:25:4e:3e:30:16:40:54:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:21:16:4A:EF:2A:36:73:F1:DB:17:89:FF:65:2F:6C:FF:F5:CA
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:5d:72:4d:7c:f5:cb:27:58:02:7a:ed:6a:59:ec:82:6c:18:
         0a:49:e3:db:1d:21:6f:c2:b4:32:6e:e0:ce:6a:ab:ec:37:9d:
         77:03:3c:0c:77:ad:bb:7f:5b:3d:2b:13:18:f7:b8:12:cd:00:
         d0:8b:4d:6c:40:c1:3e:d2:0b:ce:b9:63:ec:48:48:a7:f7:a4:
         5d:64:eb:30:c1:88:3d:5b:da:1b:37:89:4a:56:12:f2:a5:2a:
         7a:5b:b3:01:50:09:b8:53:b3:31:ca:62:17:ad:42:cd:78:b9:
         db:4a:6b:da:ad:4e:73:f4:d1:30:d1:51:ed:96:eb:f2:72:50:
         08:b7:bd:46:73:39:4d:c8:8f:66:fd:24:26:2c:94:4f:13:b7:
         20:6e:6d:70:ce:65:7c:11:75:ed:e8:7c:89:f7:c4:d5:c9:04:
         1b:85:dc:84:9c:4d:f3:8f:33:8f:4e:9d:3b:f6:21:c6:d6:aa:
         11:0d:ba:f2:c1:f8:7e:84:17:71:97:4b:1e:d2:09:55:02:77:
         bb:ca:d6:60:37:34:4a:41:29:ad:71:3a:67:5a:3f:45:a5:93:
         ba:ff:dd:5b:f5:d3:65:97:9d:16:e9:fc:8f:47:9c:6f:d6:04:
         3f:d2:93:80:ab:36:0b:da:fa:0d:6c:48:5f:ce:1f:cd:85:d0:
         83:82:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org