Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          2vhirIP6AUJfMwRQJwzmFidNzgEeqXgWwSDT0H4Yw4w=
Subject key identifier:   47:81:88:4A:8B:DD:6A:DC:07:18:E7:51:1C:78:10:3A:E0:81:4C:1E
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       41FCCD454980761F8E3D05AA72256ED28821CF0E
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:01 +0000
ROA not before:           Mon 19 Feb 2024 13:55:01 +0000
ROA not after:            Mon 17 Feb 2025 14:00:01 +0000
asID:                     266320
IP address blocks:        170.238.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fc:cd:45:49:80:76:1f:8e:3d:05:aa:72:25:6e:d2:88:21:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:01 2024 GMT
            Not After : Feb 17 14:00:01 2025 GMT
        Subject: CN=4781884A8BDD6ADC0718E7511C78103AE0814C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:57:4d:e3:9c:23:9c:4d:1a:f3:f6:fd:0e:
                    9c:02:68:4e:89:d4:62:ae:d9:39:4d:43:3e:1f:b9:
                    31:99:ac:e4:8a:1b:29:63:64:77:c5:ba:a6:a4:e0:
                    4c:38:ac:69:51:a1:b7:5e:8f:42:61:9e:e9:40:1e:
                    98:f3:43:7f:b8:b3:96:b0:6c:2f:67:19:69:40:01:
                    ab:d2:3e:5a:ec:53:a6:98:fb:04:a2:bb:2e:be:bb:
                    0d:c6:ce:0b:2f:32:6f:3c:1a:e9:14:59:57:73:33:
                    6a:a8:29:bc:43:f8:ab:a3:0e:30:56:96:18:5d:d6:
                    8c:60:e8:2f:72:8d:c2:3c:30:57:e8:08:c0:f5:ac:
                    6a:93:a1:be:c2:cb:d3:4c:39:08:9d:48:01:eb:0d:
                    0c:56:5c:45:ae:fe:c9:26:52:5c:94:9b:dc:1e:ad:
                    84:cc:21:fb:3d:e6:49:89:56:89:4c:d4:cd:ba:44:
                    0b:d1:ff:55:93:c2:fe:9e:0d:55:6e:a2:42:30:5f:
                    ba:6c:5b:7e:7d:75:d7:67:99:c0:dd:11:76:1a:0b:
                    60:5f:02:73:28:47:60:e2:4d:cd:79:41:78:81:da:
                    ea:01:90:39:a3:c0:99:1c:45:d2:9a:7a:d7:d5:c1:
                    49:22:34:bb:64:01:bd:01:04:e3:c8:5f:88:0c:c1:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:88:4A:8B:DD:6A:DC:07:18:E7:51:1C:78:10:3A:E0:81:4C:1E
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:c0:65:98:25:f9:a2:24:17:92:68:68:d6:60:86:af:97:
         79:49:44:b2:9c:0b:35:fd:94:be:a6:39:9d:ea:55:70:6a:77:
         80:4c:51:ca:9c:bc:4c:2a:b8:a2:09:98:da:0c:a9:00:0a:f3:
         ef:a7:1f:ad:71:44:a2:6e:19:52:c3:e3:65:93:22:e8:49:98:
         e1:35:1a:e7:66:d2:21:ed:6b:96:9c:9e:20:28:69:3f:0c:23:
         f4:93:b2:a8:f5:f5:77:9c:4c:90:77:6e:b9:55:5a:c0:b5:b9:
         80:a4:ea:02:5c:33:b2:28:84:f0:de:8d:c4:d3:4e:a6:3c:03:
         40:23:6c:10:d1:79:42:5c:ab:ee:07:97:c0:f4:fa:fc:c3:01:
         c3:78:48:3e:bd:39:7b:15:d8:21:28:33:97:b5:1a:24:11:22:
         e8:3e:5d:8a:87:77:fe:58:79:43:2d:64:e6:b9:76:3a:49:74:
         40:e6:50:ef:8a:fd:74:d8:14:86:5f:52:2d:a1:54:31:8d:2b:
         01:85:80:09:e2:2e:9d:21:fe:c8:a8:f8:a1:90:ca:11:d4:19:
         28:ae:53:22:32:b2:61:7f:f7:36:7c:37:0b:67:45:13:31:2e:
         9e:7e:8d:1a:6d:c3:c2:98:43:53:cc:fe:87:8e:f0:ec:4e:9a:
         66:1d:dc:12
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQfzNRUmAdh+OPQWqciVu0oghzw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNCNjJGNDVERkE0QkIzNDVDRTk5OTVGQzA1NTAwQTI5
RkQ3QUM0RjAeFw0yNDAyMTkxMzU1MDFaFw0yNTAyMTcxNDAwMDFaMDMxMTAvBgNV
BAMTKDQ3ODE4ODRBOEJERDZBREMwNzE4RTc1MTFDNzgxMDNBRTA4MTRDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmH1dN45wjnE0a8/b9DpwCaE6J
1GKu2TlNQz4fuTGZrOSKGyljZHfFuqak4Ew4rGlRobdej0JhnulAHpjzQ3+4s5aw
bC9nGWlAAavSPlrsU6aY+wSiuy6+uw3GzgsvMm88GukUWVdzM2qoKbxD+KujDjBW
lhhd1oxg6C9yjcI8MFfoCMD1rGqTob7Cy9NMOQidSAHrDQxWXEWu/skmUlyUm9we
rYTMIfs95kmJVolM1M26RAvR/1WTwv6eDVVuokIwX7psW359dddnmcDdEXYaC2Bf
AnMoR2DiTc15QXiB2uoBkDmjwJkcRdKaetfVwUkiNLtkAb0BBOPIX4gMwfXXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUR4GISovdatwHGOdRHHgQOuCBTB4wHwYDVR0j
BBgwFoAU47YvRd+kuzRc6ZlfwFUAop/XrE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMC9FM0I2MkY0NURGQTRCQjM0NUNFOTk5NUZDMDU1MDBBMjlGRDdBQzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzQjYyRjQ1REZBNEJCMzQ1
Q0U5OTk1RkMwNTUwMEEyOUZEN0FDNEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2Uk55VmppcVpIUUpzNHhlOTlQbmk1NVp3YzM2YXJXYXR6RFRSMzNCNThXLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKruiTANBgkqhkiG9w0BAQsFAAOCAQEAGoTA
ZZgl+aIkF5JoaNZghq+XeUlEspwLNf2UvqY5nepVcGp3gExRypy8TCq4ogmY2gyp
AArz76cfrXFEom4ZUsPjZZMi6EmY4TUa52bSIe1rlpyeIChpPwwj9JOyqPX1d5xM
kHduuVVawLW5gKTqAlwzsiiE8N6NxNNOpjwDQCNsENF5Qlyr7geXwPT6/MMBw3hI
Pr05exXYISgzl7UaJBEi6D5diod3/lh5Qy1k5rl2Okl0QOZQ74r9dNgUhl9SLaFU
MY0rAYWACeIunSH+yKj4oZDKEdQZKK5TIjKyYX/3Nnw3C2dFEzEunn6NGm3DwphD
U8z+h47w7E6aZh3cEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org