Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
File:                     3137302e3233392e302e302f32322d3234203d3e203532383738.roa (raw, json)
Hash identifier:          sNDr99zoxloXEmwlgkjlWlFv2zxYDJi8qrKOkPWfEyY=
Subject key identifier:   D8:06:C0:9B:41:75:1C:22:99:D3:A2:33:2C:D5:D9:72:71:54:8E:82
Certificate issuer:       /CN=E8E326619C7C719152A4AA0EDE71A409A12D0903
Certificate serial:       3B3D429FDCAEF90961450488BDD6E55CBBC7D925
Authority key identifier: E8:E3:26:61:9C:7C:71:91:52:A4:AA:0E:DE:71:A4:09:A1:2D:09:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
Signing time:             Fri 05 Apr 2024 04:22:16 +0000
ROA not before:           Fri 05 Apr 2024 04:17:16 +0000
ROA not after:            Fri 04 Apr 2025 04:22:16 +0000
asID:                     52878
IP address blocks:        170.239.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3d:42:9f:dc:ae:f9:09:61:45:04:88:bd:d6:e5:5c:bb:c7:d9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8E326619C7C719152A4AA0EDE71A409A12D0903
        Validity
            Not Before: Apr  5 04:17:16 2024 GMT
            Not After : Apr  4 04:22:16 2025 GMT
        Subject: CN=D806C09B41751C2299D3A2332CD5D97271548E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:b2:e8:f8:03:6f:cb:de:a2:9c:a4:38:e2:
                    eb:aa:51:31:fb:2b:98:46:ca:9f:38:c3:f2:b5:77:
                    21:df:c5:38:3f:bf:9e:15:ad:29:11:ce:be:b5:4a:
                    fe:1c:9d:d9:d3:47:e8:9f:5d:e3:6e:9a:a0:a3:8d:
                    d1:87:41:b2:81:e2:51:0a:f0:cd:ed:b1:34:27:38:
                    ac:fd:c5:9e:79:2b:1c:cd:34:8d:8e:a3:8d:8e:10:
                    79:d4:ab:9a:6c:8c:16:34:f0:5f:5c:8d:f0:39:6c:
                    66:b9:b3:a0:ed:ae:ea:25:2d:5f:72:51:11:f3:1a:
                    1b:35:82:c2:0f:b7:c6:1d:1c:40:0a:87:e2:49:a0:
                    22:3e:05:60:5a:05:26:92:b1:ff:d9:9e:2c:d8:2d:
                    1c:41:dd:3f:5b:d2:65:07:40:3c:c6:11:48:ae:8c:
                    2d:f6:ec:3c:cc:6b:eb:98:22:f4:85:d1:2e:ed:87:
                    1b:ac:01:35:2f:95:5d:c5:61:6a:69:67:7b:15:17:
                    a1:f7:26:17:da:94:13:66:a0:9f:91:04:39:49:93:
                    81:ed:b9:e0:f0:40:ec:f1:1f:6e:75:a7:d3:20:65:
                    7f:62:6c:f6:fd:88:00:f2:b0:95:31:05:8f:f2:c9:
                    e5:b4:85:f2:81:56:3b:8a:4f:11:f4:d7:c9:12:28:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:C0:9B:41:75:1C:22:99:D3:A2:33:2C:D5:D9:72:71:54:8E:82
            X509v3 Authority Key Identifier:
                keyid:E8:E3:26:61:9C:7C:71:91:52:A4:AA:0E:DE:71:A4:09:A1:2D:09:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/3137302e3233392e302e302f32322d3234203d3e203532383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:09:18:58:4c:0b:80:7c:ae:91:dd:3a:b6:b7:9e:86:7a:c1:
         6b:93:00:09:83:a6:2d:83:4e:37:b4:12:79:70:3a:29:4f:0c:
         a4:cc:59:02:59:a0:15:3d:de:c4:b2:ed:73:6f:66:3f:97:ef:
         2e:f1:88:fb:d3:89:7c:3f:6c:ed:7d:77:09:36:70:53:06:cb:
         6b:31:9c:4d:8e:f6:59:f9:94:76:2f:45:f5:73:f2:92:de:a2:
         67:9d:bb:d4:d5:55:14:61:a4:8e:8b:ab:a7:d2:b1:a1:f2:75:
         6a:67:65:03:b3:8b:34:0c:0b:60:1b:1f:86:ee:61:49:03:2b:
         c3:4f:0f:ae:4b:3b:ac:da:35:21:1a:c7:dc:13:ea:e3:3a:87:
         31:51:c5:a2:8d:6d:89:a7:9f:9c:b7:6c:33:24:c6:f6:1c:c1:
         14:ba:bf:8e:c9:49:23:80:af:83:ea:b3:00:21:63:07:cf:14:
         98:38:eb:98:b5:10:31:c9:a7:79:a3:a7:d2:9f:a2:d1:10:97:
         87:72:fc:b5:0d:51:71:72:02:73:71:2c:64:25:11:22:f9:4e:
         03:3a:a0:ff:d0:23:f5:3a:96:f9:25:12:2b:8b:c3:06:02:fe:
         24:17:7d:fc:e1:7d:43:36:85:79:5e:14:86:ac:6a:33:49:38:
         5b:a1:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org