Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          jTHp5NQV0mQBvd26sAT8aRl8TJBepxbpXXf37M2XD5Q=
Subject key identifier:   2F:95:F2:E9:D0:C5:DE:DC:A0:FF:E8:EE:A1:2D:1E:A2:FB:40:9C:E3
Certificate issuer:       /CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Certificate serial:       10110ED7F040D0A58575ABD8EB53F5C1B228D627
Authority key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa
Signing time:             Thu 04 Apr 2024 06:06:04 +0000
ROA not before:           Thu 04 Apr 2024 06:01:04 +0000
ROA not after:            Thu 03 Apr 2025 06:06:04 +0000
asID:                     266327
IP address blocks:        170.238.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:0e:d7:f0:40:d0:a5:85:75:ab:d8:eb:53:f5:c1:b2:28:d6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
        Validity
            Not Before: Apr  4 06:01:04 2024 GMT
            Not After : Apr  3 06:06:04 2025 GMT
        Subject: CN=2F95F2E9D0C5DEDCA0FFE8EEA12D1EA2FB409CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:84:3b:ff:77:6f:a3:88:f6:49:d2:bb:27:
                    25:29:fd:5c:ed:cf:e5:b9:6f:20:21:7e:23:de:bf:
                    7b:e9:2b:76:cb:74:05:80:62:ed:88:a6:50:6a:81:
                    a1:db:24:c7:0b:84:a4:52:97:49:0d:03:8b:c0:31:
                    08:c3:6f:62:c6:24:5e:6b:8c:c0:eb:31:cd:e5:79:
                    f4:70:d0:87:dc:17:3f:6c:83:74:b6:54:d8:c9:c1:
                    e4:6a:04:ca:d7:dc:75:cb:c6:27:44:72:d2:a5:b3:
                    f9:62:5b:bf:4d:26:1d:e6:99:06:27:87:66:07:fe:
                    29:27:67:ee:c5:51:49:f7:3b:7d:3a:52:39:b9:a0:
                    e9:29:22:da:07:8c:2f:85:64:71:21:88:d9:14:f1:
                    ec:45:c0:79:d5:ee:52:5d:4e:f5:2c:18:3d:cd:d2:
                    51:81:cb:1a:5c:a1:67:8a:4b:60:b0:16:c7:fe:0d:
                    0b:f6:90:d1:f3:7d:f4:d6:6a:78:72:01:5c:55:1a:
                    53:d9:2b:72:e8:ff:30:5c:93:87:e7:0e:de:dc:e7:
                    68:9e:d2:1b:63:85:30:6f:76:5e:9b:b8:76:64:64:
                    cd:aa:3c:99:b8:13:9a:75:50:ff:41:39:0b:7d:8a:
                    d5:ed:78:98:20:f1:42:d5:bc:f4:09:d2:df:de:67:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:F2:E9:D0:C5:DE:DC:A0:FF:E8:EE:A1:2D:1E:A2:FB:40:9C:E3
            X509v3 Authority Key Identifier:
                keyid:C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:72:5d:41:ce:4c:0e:89:5b:f8:bb:b1:24:d3:09:54:af:
         05:33:60:16:b9:e2:bf:f6:bc:98:79:4e:d2:cf:ee:b7:3e:99:
         50:d8:49:64:47:b3:d8:0f:0a:15:41:5a:b7:5c:1d:47:88:16:
         c4:de:83:80:90:60:5b:d9:22:0d:71:10:1a:f3:e8:62:5c:63:
         0c:f8:e8:e1:60:fb:0f:a0:ae:25:3c:b7:c3:6e:25:c8:19:d7:
         33:98:87:41:2b:a1:9a:a1:1f:c0:04:06:ec:8e:9b:16:5f:6e:
         8e:0d:43:45:ee:f3:11:1a:fb:13:57:be:f6:88:8f:0b:70:3d:
         55:42:0d:fc:3c:0c:ce:ed:9d:48:11:34:7b:e0:65:f1:7d:c8:
         80:5d:9b:f6:ab:2f:53:8c:ab:a9:cf:21:86:58:78:80:eb:b1:
         09:ab:e7:0a:63:a1:87:d4:20:41:fb:cc:a4:b7:9f:58:54:11:
         b5:cc:a0:b6:f9:62:95:91:d0:cd:0e:c8:a1:01:68:72:dd:d5:
         d9:f1:ad:8e:a4:6c:8c:ba:29:7c:b1:9e:7a:8f:1b:b0:ac:70:
         ed:16:bc:82:59:21:34:c2:87:30:c0:dc:4d:19:a1:7b:49:8f:
         fc:c6:7c:67:77:d4:0c:fa:fb:39:21:af:cb:e0:c9:2c:80:d1:
         7d:f2:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org