Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
File:                     3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa (raw, json)
Hash identifier:          s6SrA2HUMR58pBhM3TKosOUCBW0sOxBwnXHXjNeOBdQ=
Subject key identifier:   A9:BF:EB:0B:7C:B5:12:D6:D3:D5:97:16:07:8C:DC:00:A2:58:FF:AF
Certificate issuer:       /CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
Certificate serial:       6146FD2DD2A5AF20A14770C9838AFA390E4EED16
Authority key identifier: A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
Signing time:             Tue 11 Jul 2023 19:02:55 +0000
ROA not before:           Tue 11 Jul 2023 18:57:55 +0000
ROA not after:            Tue 09 Jul 2024 19:02:55 +0000
asID:                     266327
IP address blocks:        170.238.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:fd:2d:d2:a5:af:20:a1:47:70:c9:83:8a:fa:39:0e:4e:ed:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
        Validity
            Not Before: Jul 11 18:57:55 2023 GMT
            Not After : Jul  9 19:02:55 2024 GMT
        Subject: CN=A9BFEB0B7CB512D6D3D59716078CDC00A258FFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:5e:6b:d3:fb:0c:88:fd:41:cf:c8:62:53:
                    1c:a5:49:97:75:77:83:ae:e2:c2:23:a1:93:4d:cc:
                    aa:b1:92:eb:1e:62:e3:da:75:09:d8:28:cc:fe:3e:
                    d5:d6:1e:97:28:95:9c:84:93:34:ae:63:c8:c7:46:
                    a6:14:9e:0e:bc:1b:85:2e:5f:dd:35:c0:fa:1a:3c:
                    27:e7:0b:5f:0e:f8:bd:ff:c3:f1:59:f1:55:4a:d4:
                    d3:ac:02:87:d8:f5:1c:96:70:2d:20:97:5a:51:17:
                    80:77:d0:d1:2f:f8:4a:8d:6f:8a:02:e1:26:57:11:
                    eb:58:00:f3:4a:f6:38:08:fc:22:8d:86:23:d0:8b:
                    45:a0:13:e8:d1:d1:b9:c8:2d:55:bc:5b:9c:6b:53:
                    fd:96:c1:0c:30:33:35:2f:42:52:53:94:e4:65:50:
                    8e:87:81:8c:86:dd:c0:34:e3:89:33:09:91:7b:2a:
                    d8:de:15:1a:c3:83:0b:95:c8:8e:55:65:b0:b6:cf:
                    63:3a:19:f3:df:dc:a9:ef:29:20:7c:ca:e9:a6:65:
                    31:95:bf:59:13:fe:15:80:be:29:bd:1d:9d:3c:a1:
                    a6:22:22:fb:f8:f1:a8:7a:31:5c:bc:e8:8c:a2:b1:
                    27:db:84:34:b6:70:ee:cb:ec:d4:3c:5e:66:c2:1d:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:EB:0B:7C:B5:12:D6:D3:D5:97:16:07:8C:DC:00:A2:58:FF:AF
            X509v3 Authority Key Identifier:
                keyid:A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:60:22:59:95:de:df:8c:1d:e1:b5:2c:da:34:ef:89:00:95:
         e4:f5:5a:45:3b:6e:c9:60:6f:49:33:66:85:7a:78:41:fd:2d:
         d6:53:18:68:2d:e4:63:4a:8a:1d:23:4b:c8:3b:62:27:8c:24:
         14:a8:e9:67:34:c3:9a:f8:50:64:bd:6b:70:09:e3:e5:cc:d1:
         aa:25:a8:14:cc:dc:16:08:04:e2:d6:69:cf:08:aa:a8:10:3f:
         97:e4:ae:99:62:a9:2e:21:71:87:df:cd:23:ef:73:0b:cc:23:
         1f:44:73:ba:be:4f:49:34:8a:b4:11:b2:44:d4:69:e2:57:a0:
         19:0e:60:f9:9b:36:53:81:a1:3b:e0:98:9f:bf:c5:5b:80:a9:
         6c:6e:0d:07:c8:94:6b:c9:7c:19:66:1a:98:da:28:13:81:01:
         f3:9e:de:a3:b2:38:fb:3b:cc:52:8a:c1:8d:14:4a:6c:1f:0d:
         de:19:08:1c:b3:a2:ab:98:95:9d:a2:e8:2e:21:d4:ee:a6:d5:
         23:02:3e:e4:72:78:4b:7c:82:75:df:f9:2f:1a:1e:a7:9f:b5:
         64:3b:8a:98:f1:38:7a:7d:f4:8e:d3:73:8c:15:d4:b4:95:d0:
         36:f0:c3:33:7a:cd:3f:7d:2f:81:5f:f2:20:18:ea:8a:86:3b:
         93:6a:65:19
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYUb9LdKlryChR3DJg4r6OQ5O7RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMwQTBFQ0QwRkVDOTE5OUU2MEEzNDFGMDZDMjc2ODAz
NjhEQ0UwOTAeFw0yMzA3MTExODU3NTVaFw0yNDA3MDkxOTAyNTVaMDMxMTAvBgNV
BAMTKEE5QkZFQjBCN0NCNTEyRDZEM0Q1OTcxNjA3OENEQzAwQTI1OEZGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xV5r0/sMiP1Bz8hiUxylSZd1
d4Ou4sIjoZNNzKqxkuseYuPadQnYKMz+PtXWHpcolZyEkzSuY8jHRqYUng68G4Uu
X901wPoaPCfnC18O+L3/w/FZ8VVK1NOsAofY9RyWcC0gl1pRF4B30NEv+EqNb4oC
4SZXEetYAPNK9jgI/CKNhiPQi0WgE+jR0bnILVW8W5xrU/2WwQwwMzUvQlJTlORl
UI6HgYyG3cA044kzCZF7KtjeFRrDgwuVyI5VZbC2z2M6GfPf3KnvKSB8yummZTGV
v1kT/hWAvim9HZ08oaYiIvv48ah6MVy86IyisSfbhDS2cO7L7NQ8XmbCHWpBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqb/rC3y1EtbT1ZcWB4zcAKJY/68wHwYDVR0j
BBgwFoAUowoOzQ/skZnmCjQfBsJ2gDaNzgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR214ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJY
MUcvMC9BMzBBMEVDRDBGRUM5MTk5RTYwQTM0MUYwNkMyNzY4MDM2OERDRTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzMEEwRUNEMEZFQzkxOTlF
NjBBMzQxRjA2QzI3NjgwMzY4RENFMDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dteGVDSDRNV0FUcXhWdzlteUExcFFvWU5zTXVDQmZ4anJtNzQzQ1ZCWDFHLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqruoDANBgkqhkiG9w0BAQsFAAOCAQEAhWAi
WZXe34wd4bUs2jTviQCV5PVaRTtuyWBvSTNmhXp4Qf0t1lMYaC3kY0qKHSNLyDti
J4wkFKjpZzTDmvhQZL1rcAnj5czRqiWoFMzcFggE4tZpzwiqqBA/l+SumWKpLiFx
h9/NI+9zC8wjH0Rzur5PSTSKtBGyRNRp4legGQ5g+Zs2U4GhO+CYn7/FW4CpbG4N
B8iUa8l8GWYamNooE4EB857eo7I4+zvMUorBjRRKbB8N3hkIHLOiq5iVnaLoLiHU
7qbVIwI+5HJ4S3yCdd/5Lxoep5+1ZDuKmPE4en30jtNzjBXUtJXQNvDDM3rNP30v
gV/yIBjqioY7k2plGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org