Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          EbFpc3tvI24q4mAqmUAqCOgWuYhqvWPM3dOBvrjKJCs=
Subject key identifier:   3C:B8:F0:23:77:FF:57:BF:BA:2C:16:A6:A5:A3:C0:FB:20:55:B7:9B
Certificate issuer:       /CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Certificate serial:       6DB85A5C422588CD5ECA11B0098F5F466C84C99E
Authority key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa
Signing time:             Thu 04 Apr 2024 06:06:04 +0000
ROA not before:           Thu 04 Apr 2024 06:01:04 +0000
ROA not after:            Thu 03 Apr 2025 06:06:04 +0000
asID:                     266327
IP address blocks:        170.238.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b8:5a:5c:42:25:88:cd:5e:ca:11:b0:09:8f:5f:46:6c:84:c9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
        Validity
            Not Before: Apr  4 06:01:04 2024 GMT
            Not After : Apr  3 06:06:04 2025 GMT
        Subject: CN=3CB8F02377FF57BFBA2C16A6A5A3C0FB2055B79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:6f:2e:fa:94:e8:ba:82:83:ea:0c:a5:ba:
                    89:c8:9d:77:24:89:1f:92:42:74:e5:67:22:47:f7:
                    07:35:14:96:49:eb:14:9b:19:52:24:c5:98:6f:f2:
                    72:4b:2b:d4:91:c8:ed:05:23:f9:56:2d:71:f9:1e:
                    ee:0f:a7:c9:89:c5:f8:5d:2f:98:ec:81:16:4f:2b:
                    e9:44:12:f6:96:f9:bf:73:c3:40:ef:1a:bd:9e:e6:
                    49:2a:d3:97:48:10:b7:ce:d3:3c:4e:fa:e9:2d:f0:
                    83:26:d8:b8:74:88:27:8a:dc:1e:58:41:ef:ad:ab:
                    c8:eb:d1:5d:42:0f:73:e5:dd:41:42:54:42:02:d1:
                    78:c4:6d:f8:3c:74:24:7f:7d:35:a7:bd:4f:85:ba:
                    b6:04:ce:e1:11:fc:4a:e3:f4:03:91:e9:70:7f:25:
                    18:4c:6a:fb:a9:85:87:85:8f:ee:90:70:58:ae:fa:
                    39:fe:f3:1d:1f:ef:d4:38:59:d7:69:3f:d1:d3:a6:
                    74:60:24:a3:a9:ac:41:84:db:50:2d:ae:8f:bd:56:
                    45:5d:af:01:99:b5:88:80:26:8b:0c:ff:55:35:01:
                    bc:d6:95:5e:5d:d2:b7:ac:ff:a8:58:9b:1a:f2:7b:
                    0b:e5:bc:57:e8:f9:9d:47:18:a2:08:50:71:04:e5:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B8:F0:23:77:FF:57:BF:BA:2C:16:A6:A5:A3:C0:FB:20:55:B7:9B
            X509v3 Authority Key Identifier:
                keyid:C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:79:e0:f4:ee:38:c9:0e:1e:11:d9:de:92:a7:8b:a5:1c:
         39:09:11:3e:99:4b:39:c4:02:cb:de:0c:80:22:f4:c7:4e:23:
         c1:5b:dd:ca:a8:6e:ac:09:56:15:c7:c5:fb:ad:b4:28:07:6e:
         1b:73:63:e8:a7:8b:59:c7:8a:60:52:96:7f:c1:96:0f:47:90:
         74:01:94:11:c0:78:ef:c8:3c:fb:da:aa:e9:c6:d5:63:8c:e4:
         57:9c:05:93:e3:ef:5d:b4:f7:bc:9b:85:cd:00:7b:01:0e:6a:
         04:8e:db:3d:69:e9:5d:a9:f0:ea:d1:20:7c:3e:be:70:0a:62:
         15:3d:1c:69:db:18:ef:89:77:8c:cd:dc:36:d5:2b:11:9b:47:
         70:fe:51:f8:5d:cf:e6:27:34:c7:56:2e:b7:51:10:13:e1:32:
         dc:cb:bb:f7:34:8a:a0:25:44:3e:f7:47:d2:2b:e6:27:e6:55:
         8e:b4:67:5b:81:d6:c6:33:14:36:e0:8a:87:62:e8:c8:2f:bc:
         6e:82:1c:36:a2:cf:7d:0c:aa:78:97:b8:e4:4e:e5:e4:08:42:
         ad:87:6d:73:15:18:86:a1:d2:cb:95:6c:dd:90:af:b9:33:20:
         8f:dd:71:b0:40:83:80:cb:4e:2d:e9:ff:b7:d6:dd:7c:1f:07:
         83:15:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org