Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
File:                     3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa (raw, json)
Hash identifier:          gQPdSQKBy8NZrVEundftmTAcSEpuysj6mV10DiQuNr0=
Subject key identifier:   E8:A5:F8:9F:CA:7B:A8:15:64:EC:E4:F7:AE:A3:A4:00:AA:69:37:FC
Certificate issuer:       /CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Certificate serial:       46F50E2FC88EE980DBD06E82B407DB2F507CD5F6
Authority key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
Signing time:             Thu 04 Apr 2024 06:06:04 +0000
ROA not before:           Thu 04 Apr 2024 06:01:04 +0000
ROA not after:            Thu 03 Apr 2025 06:06:04 +0000
asID:                     266327
IP address blocks:        170.238.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:0e:2f:c8:8e:e9:80:db:d0:6e:82:b4:07:db:2f:50:7c:d5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
        Validity
            Not Before: Apr  4 06:01:04 2024 GMT
            Not After : Apr  3 06:06:04 2025 GMT
        Subject: CN=E8A5F89FCA7BA81564ECE4F7AEA3A400AA6937FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:57:6f:3c:85:30:94:4b:9d:95:5e:15:b6:
                    b4:e2:60:23:a2:05:5f:36:d1:04:84:d5:5c:c1:35:
                    1b:e8:3b:c5:d8:77:ad:e7:0f:fe:67:74:ae:ec:a8:
                    b6:d2:9a:59:1a:08:d8:15:c6:a4:6d:8d:5d:be:c8:
                    10:15:11:f4:aa:bc:62:39:91:4f:7f:8c:93:64:90:
                    77:30:15:f0:ba:49:ac:80:86:ef:11:f0:53:89:9a:
                    d6:c9:6e:95:19:df:a5:1a:7b:4f:a0:01:b7:77:81:
                    2a:87:49:6f:0e:72:5f:f2:42:52:e7:58:e2:d3:90:
                    9f:56:5b:48:29:b4:d2:de:20:8a:1d:2f:6c:83:c0:
                    ce:c5:e6:27:de:b2:19:0e:71:d8:c7:43:44:b3:85:
                    e8:cc:d8:d9:2f:8b:d2:a0:38:fe:84:d2:ad:ea:b0:
                    7e:59:34:39:c9:c6:dd:42:14:70:9d:b5:2e:ab:c4:
                    ab:28:28:30:3a:a5:bb:1e:c3:c0:3d:95:93:b3:50:
                    ca:25:dd:2d:91:36:df:71:64:06:5c:fc:24:54:57:
                    37:49:ca:47:99:f7:af:6c:c1:55:1e:0a:3e:bd:db:
                    ff:06:89:a3:9e:fe:38:c8:4f:77:0c:1f:00:01:e1:
                    73:bc:c5:ae:ca:0b:c4:0b:41:fc:bf:85:8c:f3:0b:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:F8:9F:CA:7B:A8:15:64:EC:E4:F7:AE:A3:A4:00:AA:69:37:FC
            X509v3 Authority Key Identifier:
                keyid:C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:40:6e:57:a0:db:6a:12:f2:97:28:74:d6:e0:8e:64:23:8e:
         6f:59:bb:d2:e3:87:69:21:70:a7:c4:f2:ee:b9:c1:b0:3a:d0:
         6a:76:58:7e:2d:18:5a:22:95:8e:d1:6f:0d:3d:48:88:6d:d0:
         00:b6:59:d8:26:fe:14:e3:34:d2:5f:31:df:78:96:e1:3a:b4:
         56:39:ea:cd:2c:e0:60:e3:52:34:1d:60:2a:0f:e3:b8:0a:fb:
         e2:3f:0a:be:de:4d:90:d9:a3:fc:ca:f5:30:63:1c:69:9f:0f:
         36:9c:0a:ca:2c:10:d4:39:92:f2:1b:6f:23:fa:ba:f5:d9:d7:
         88:a3:91:2d:37:85:51:a6:d2:a7:81:ce:90:8b:ac:aa:e8:12:
         48:2f:d2:5e:fa:e4:27:10:cf:fd:6d:d8:a4:bd:e7:ce:bf:94:
         a9:54:90:92:6f:46:21:60:9e:bc:db:c1:16:8e:17:a6:ca:8a:
         4b:06:9f:b8:98:f1:e1:c7:cf:64:0f:5b:74:5f:e6:54:e2:83:
         1f:a4:2c:6f:a2:02:b1:47:e6:a7:6c:fd:bb:10:05:ee:6d:bb:
         23:76:37:b4:3c:04:da:f9:18:ef:e8:72:f3:49:3c:27:dc:3a:
         ff:77:d6:f5:8d:55:25:ca:e0:59:b3:d3:d3:98:e6:4a:65:14:
         23:32:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:34:32 2024 by rpki-client on console-fra.rpki-client.org