Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136302e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          EG4MH/X97pWFxqhbkS8RrBFQ57R1LvFbMy6F/VnAQmk=
Subject key identifier:   3C:24:4F:13:96:D9:2E:9E:64:6D:7C:04:D7:5F:B5:CB:57:C3:A2:F0
Certificate issuer:       /CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Certificate serial:       1C49FF396F6B1902F01C2CC1A75EA3EC900145B6
Authority key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32342d3234203d3e20323636333237.roa
Signing time:             Thu 04 Apr 2024 06:06:04 +0000
ROA not before:           Thu 04 Apr 2024 06:01:04 +0000
ROA not after:            Thu 03 Apr 2025 06:06:04 +0000
asID:                     266327
IP address blocks:        170.238.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:49:ff:39:6f:6b:19:02:f0:1c:2c:c1:a7:5e:a3:ec:90:01:45:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
        Validity
            Not Before: Apr  4 06:01:04 2024 GMT
            Not After : Apr  3 06:06:04 2025 GMT
        Subject: CN=3C244F1396D92E9E646D7C04D75FB5CB57C3A2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:5a:a3:75:15:6d:52:42:59:6b:65:8a:f4:
                    9b:0d:25:e5:b8:e0:75:e0:ae:05:3b:d0:4a:75:5e:
                    03:f2:72:32:83:1f:11:55:8f:ce:e2:ed:68:9b:84:
                    c9:c8:01:d7:13:bd:70:8a:ff:d4:01:8b:47:05:1b:
                    6d:ea:b9:5b:7b:73:18:2d:4d:b8:23:29:bd:1a:b4:
                    fc:81:c4:be:d5:cc:0e:af:c8:ba:e1:dc:97:b8:dd:
                    c6:d6:f5:d1:91:28:5d:be:7f:fb:99:36:c8:7c:fc:
                    bd:c5:88:73:5b:84:cf:c5:66:a5:3c:8f:52:58:eb:
                    98:5c:b9:46:0e:f9:18:44:b0:de:4c:d6:2c:22:41:
                    43:49:08:79:b8:06:cf:03:e1:50:53:9c:f7:5b:72:
                    e7:51:9c:95:34:8b:76:17:46:37:ab:4c:17:2b:e1:
                    1a:08:0d:c9:e5:a6:7c:75:51:90:e8:00:72:d0:7a:
                    a3:ee:27:b3:0e:59:ec:f5:3f:61:18:12:1a:66:1e:
                    96:03:91:fb:bd:f8:f8:b4:11:47:cc:e0:3b:0d:60:
                    8b:d7:d9:8f:7d:b1:b7:7a:20:a4:da:75:7f:17:0d:
                    8d:7c:49:82:17:c9:69:b7:55:53:1b:d5:d3:0f:05:
                    ee:08:5d:32:2d:c0:72:b2:02:ff:d4:ae:04:7a:cf:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:4F:13:96:D9:2E:9E:64:6D:7C:04:D7:5F:B5:CB:57:C3:A2:F0
            X509v3 Authority Key Identifier:
                keyid:C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136302e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:64:a6:5c:c4:b9:04:8a:3d:0e:78:cf:96:62:89:f1:78:75:
         0e:da:c6:4b:b3:39:ba:df:ee:cc:3d:df:78:3c:be:4c:74:10:
         02:0d:e8:8c:11:32:04:25:4d:11:23:80:72:78:28:0f:51:90:
         fb:25:bc:28:4a:5d:bd:12:f8:4c:f0:bf:a7:e1:1a:03:69:3d:
         a2:5c:dc:a5:ae:7e:90:eb:58:10:cc:54:3a:3d:cf:8a:72:1a:
         34:44:b5:98:f8:66:2c:59:81:3e:ad:23:6f:3b:66:0a:bb:c6:
         9b:9f:1a:a0:1b:69:54:f7:4e:bc:ea:f1:44:6e:e0:42:80:d9:
         49:1b:3f:1f:0d:98:67:77:d1:67:b4:a8:97:18:89:0e:a6:f0:
         2f:8e:e2:a3:42:e1:0a:53:86:89:2c:4f:5c:da:cf:98:54:7a:
         df:f6:86:a8:ed:1c:57:ec:1d:6e:8e:8d:ec:1f:00:bb:e8:b6:
         09:74:3d:2f:65:65:49:2f:de:32:17:ca:30:9b:7e:8d:f2:9c:
         b1:b7:ee:e8:20:d8:90:30:f2:fe:44:82:3a:ea:f1:71:99:20:
         c3:a8:c9:92:f5:e4:dd:1c:55:b8:85:92:50:95:26:49:da:5e:
         a2:fc:89:2b:9c:82:20:e8:75:ea:c7:f0:a4:38:20:fc:d6:cf:
         c4:73:82:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHEn/OW9rGQLwHCzBp16j7JABRbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAyMDlGODlENTgyMTA3MDg2RDUwRUNBOTczQUI5OUFB
OUJFMkZDQjAeFw0yNDA0MDQwNjAxMDRaFw0yNTA0MDMwNjA2MDRaMDMxMTAvBgNV
BAMTKDNDMjQ0RjEzOTZEOTJFOUU2NDZEN0MwNEQ3NUZCNUNCNTdDM0EyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpVqjdRVtUkJZa2WK9JsNJeW4
4HXgrgU70Ep1XgPycjKDHxFVj87i7WibhMnIAdcTvXCK/9QBi0cFG23quVt7cxgt
TbgjKb0atPyBxL7VzA6vyLrh3Je43cbW9dGRKF2+f/uZNsh8/L3FiHNbhM/FZqU8
j1JY65hcuUYO+RhEsN5M1iwiQUNJCHm4Bs8D4VBTnPdbcudRnJU0i3YXRjerTBcr
4RoIDcnlpnx1UZDoAHLQeqPuJ7MOWez1P2EYEhpmHpYDkfu9+Pi0EUfM4DsNYIvX
2Y99sbd6IKTadX8XDY18SYIXyWm3VVMb1dMPBe4IXTItwHKyAv/UrgR6z9rLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPCRPE5bZLp5kbXwE11+1y1fDovAwHwYDVR0j
BBgwFoAUwCCfidWCEHCG1Q7Klzq5mqm+L8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR214ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJY
MUcvMS9DMDIwOUY4OUQ1ODIxMDcwODZENTBFQ0E5NzNBQjk5QUE5QkUyRkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjA5Rjg5RDU4MjEwNzA4
NkQ1MEVDQTk3M0FCOTlBQTlCRTJGQ0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dteGVDSDRNV0FUcXhWdzlteUExcFFvWU5zTXVDQmZ4anJtNzQzQ1ZCWDFHLzEv
MzEzNzMwMmUzMjMzMzgyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKruoDANBgkqhkiG9w0BAQsFAAOCAQEAUGSm
XMS5BIo9DnjPlmKJ8Xh1DtrGS7M5ut/uzD3feDy+THQQAg3ojBEyBCVNESOAcngo
D1GQ+yW8KEpdvRL4TPC/p+EaA2k9olzcpa5+kOtYEMxUOj3PinIaNES1mPhmLFmB
Pq0jbztmCrvGm58aoBtpVPdOvOrxRG7gQoDZSRs/Hw2YZ3fRZ7SolxiJDqbwL47i
o0LhClOGiSxPXNrPmFR63/aGqO0cV+wdbo6N7B8Au+i2CXQ9L2VlSS/eMhfKMJt+
jfKcsbfu6CDYkDDy/kSCOurxcZkgw6jJkvXk3RxVuIWSUJUmSdpeovyJK5yCIOh1
6sfwpDgg/NbPxHOC3g==
-----END CERTIFICATE-----
Generated at Wed Jul 24 19:34:32 2024 by rpki-client on console-fra.rpki-client.org