Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          8HZfdWdLrqzvl+1SnQ4o2SXnmkJfv3qwwGTf5JGsDf4=
Subject key identifier:   9A:E4:9F:AC:80:83:7A:8A:24:AF:A6:1E:F3:7F:45:27:55:09:CC:E2
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       5BE0CDCA4023581C1F98E112A11260CFAF0EB233
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:00 +0000
ROA not before:           Mon 19 Feb 2024 13:55:00 +0000
ROA not after:            Mon 17 Feb 2025 14:00:00 +0000
asID:                     266320
IP address blocks:        170.238.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e0:cd:ca:40:23:58:1c:1f:98:e1:12:a1:12:60:cf:af:0e:b2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:00 2024 GMT
            Not After : Feb 17 14:00:00 2025 GMT
        Subject: CN=9AE49FAC80837A8A24AFA61EF37F45275509CCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:37:0c:3b:78:18:51:f2:8f:5e:17:68:c3:
                    7c:48:4d:c8:d2:81:59:0a:19:e5:a6:a0:4d:e3:33:
                    e5:5f:d4:55:bf:d9:a0:9b:13:f6:c3:35:54:5e:49:
                    bd:12:e2:ee:43:26:a1:79:f1:78:19:1b:cf:4f:ba:
                    d3:4d:b4:18:33:13:50:1c:7d:d2:24:ea:25:2b:f3:
                    ee:fb:e2:31:18:c6:d1:4e:58:1b:a8:c8:20:0c:c6:
                    6b:92:d0:67:b4:db:68:d7:ca:9e:c3:7a:a6:13:23:
                    0b:0a:d1:0a:39:b8:1f:07:45:66:10:fa:7f:9a:2e:
                    e7:21:7f:81:dd:6c:9f:a5:8e:68:aa:ab:ea:47:9c:
                    b7:86:3b:54:fb:05:9b:98:fb:a3:79:c3:09:00:0b:
                    a0:a5:fe:fd:c3:1d:a7:a4:fb:32:d6:a4:44:3a:fe:
                    7d:54:9c:fa:44:76:81:3d:ea:2a:25:a3:ff:0d:ed:
                    fa:3b:ab:bd:57:b8:b1:fc:04:b6:ff:6e:45:03:ed:
                    69:8b:a9:4b:18:33:86:c3:74:71:68:fe:66:05:3a:
                    24:a0:c3:af:45:55:b9:f0:e7:50:7b:eb:a5:c1:43:
                    08:4a:fd:09:6b:ee:25:4d:f6:c4:8f:b8:0e:39:a7:
                    12:6b:09:25:55:07:2e:e5:f8:5c:8b:a1:31:ca:4b:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E4:9F:AC:80:83:7A:8A:24:AF:A6:1E:F3:7F:45:27:55:09:CC:E2
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:62:07:17:f8:47:e4:b5:57:d9:a2:9d:c2:24:40:7e:06:e5:
         ee:f0:13:b2:59:bc:fc:7b:98:4d:83:da:c8:82:78:e9:63:a8:
         ab:7f:6d:9a:3a:93:b8:8a:75:e5:a5:83:4e:66:68:1d:55:05:
         6b:6b:ad:1f:11:77:0c:62:bb:44:c7:66:e5:9f:ae:99:b4:f6:
         bb:96:36:c2:e7:3d:69:c2:61:f3:cf:91:6e:a2:aa:71:91:cf:
         38:a2:e9:06:1a:16:95:0b:e5:77:ca:d1:60:e7:99:28:2a:63:
         c7:94:17:c6:2b:15:6e:dc:01:3a:6a:75:01:b0:20:da:3f:e6:
         17:e2:81:18:e8:f3:af:9b:07:79:0f:87:73:04:19:00:3b:2f:
         b3:2d:40:d3:70:59:a0:a8:86:04:a5:ef:06:62:f6:00:1c:9d:
         db:c3:f6:0b:a0:1e:58:c7:34:75:67:70:de:f7:d2:f7:75:5c:
         c7:06:69:f4:89:1e:f9:62:8e:90:3d:f8:f3:39:d3:7c:45:79:
         ad:be:e3:a4:ca:b3:0c:75:f4:cc:62:16:db:89:08:23:38:af:
         7b:26:d7:ff:c6:6e:ec:84:1f:02:0a:a7:0f:21:b0:93:d4:5e:
         3b:95:85:0e:13:7b:ae:97:96:9b:ef:71:1e:44:6c:d0:9a:15:
         ca:91:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org