Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          tFdODwa+77w4ie10B2qqEUWfveDvDbwxU+7RHF2D7Ic=
Subject key identifier:   A9:C6:6E:32:DF:30:FD:19:6F:16:4B:8B:B6:58:13:61:4F:1F:D1:38
Certificate issuer:       /CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
Certificate serial:       7A02E05608737A6027F196DFCAF39EF3C4D3991C
Authority key identifier: E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa
Signing time:             Mon 19 Feb 2024 14:00:00 +0000
ROA not before:           Mon 19 Feb 2024 13:55:00 +0000
ROA not after:            Mon 17 Feb 2025 14:00:00 +0000
asID:                     266320
IP address blocks:        170.238.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:02:e0:56:08:73:7a:60:27:f1:96:df:ca:f3:9e:f3:c4:d3:99:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Validity
            Not Before: Feb 19 13:55:00 2024 GMT
            Not After : Feb 17 14:00:00 2025 GMT
        Subject: CN=A9C66E32DF30FD196F164B8BB65813614F1FD138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:1e:fd:ae:50:26:53:21:ca:58:63:6e:ca:
                    67:66:3a:95:a6:7c:54:53:50:d2:f6:43:af:46:dd:
                    57:6f:56:95:0f:26:59:cf:66:93:4e:b1:33:c3:2e:
                    0a:92:f3:e8:61:77:13:f4:cd:0b:3d:e4:09:9e:73:
                    bd:57:31:40:eb:90:f8:ba:c5:67:e4:c5:fe:a1:9d:
                    86:0f:53:dc:ce:d8:79:a9:ed:bd:01:d1:52:de:92:
                    39:05:d6:b9:06:7b:18:98:57:c0:62:dc:db:9c:f4:
                    f0:4b:3f:8a:82:2f:0a:98:48:21:22:27:dc:19:42:
                    2f:3e:b6:e3:ac:f9:da:86:0a:4d:10:ae:07:c4:27:
                    b8:c3:4f:e6:3e:28:56:51:30:21:46:83:9e:7b:d8:
                    7e:69:96:e2:2c:8b:4f:c5:ba:68:ef:1d:2e:58:43:
                    5b:53:9e:7e:5f:bf:3b:b7:08:37:89:c5:eb:1e:f0:
                    4b:73:75:b9:37:15:55:98:08:84:fc:f3:09:0c:26:
                    fc:2e:be:0c:70:33:93:07:5c:75:e7:d4:d6:3b:bf:
                    59:d0:62:c4:dc:56:4c:8d:90:04:38:ea:4a:a0:a5:
                    48:33:e5:c1:4c:20:59:b0:64:8f:da:d3:8d:ac:b2:
                    35:10:8d:26:9a:4e:1e:af:74:2c:92:59:7f:96:d5:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:6E:32:DF:30:FD:19:6F:16:4B:8B:B6:58:13:61:4F:1F:D1:38
            X509v3 Authority Key Identifier:
                keyid:E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:aa:ef:45:bb:88:8e:b5:09:53:58:5a:e7:4f:b5:b8:1b:
         7f:a3:1a:5c:52:ad:a1:80:95:3f:10:be:cd:49:e7:26:13:d2:
         67:8c:47:d7:16:7b:4b:61:19:fe:96:96:c7:6b:38:4c:81:79:
         ff:3b:24:57:77:2c:61:38:d6:38:fa:8e:ba:e7:60:69:1f:32:
         00:89:7d:70:aa:1c:a5:e3:41:a5:57:e7:41:26:31:c0:c8:04:
         bd:71:ad:a1:19:61:68:94:6f:df:6b:01:a1:05:9a:52:41:dc:
         28:bc:7f:5a:bd:7a:22:fe:83:2d:19:4f:0b:77:a9:8e:20:a0:
         5c:99:f7:f8:71:31:85:52:70:c5:97:9c:73:3b:43:6f:ab:28:
         be:3f:da:ff:55:c4:00:3b:c8:d2:8b:4a:24:9b:63:9d:52:d1:
         46:76:6f:ba:80:a9:31:a8:01:90:9c:fb:f7:87:3b:e0:8f:d0:
         61:ba:7a:4f:31:9b:c2:43:8e:aa:93:ab:b6:97:e8:98:36:28:
         1d:11:b0:5c:8a:2a:c4:b0:68:91:a8:1e:01:d8:57:91:0b:dd:
         02:15:45:31:f2:c2:9d:e8:5f:7e:74:58:9a:d7:fd:1c:1e:83:
         96:95:46:c8:ba:96:4e:c8:b3:03:0c:1e:6c:db:cd:82:32:17:
         e3:c9:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org