Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32332d3233203d3e20323635333834.roa
File:                     3137302e3235342e3234302e302f32332d3233203d3e20323635333834.roa (raw, json)
Hash identifier:          TYUeV8gixIK332t/16HcJl+J1wsCCPn6axNVasJiKlk=
Subject key identifier:   1D:FB:57:F6:01:69:B0:E0:3C:8F:60:9E:2C:8B:12:B9:33:F9:DC:66
Certificate issuer:       /CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
Certificate serial:       518FC0DC74F8098E392AF84EF5224E86D9ABDD7E
Authority key identifier: C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32332d3233203d3e20323635333834.roa
Signing time:             Sun 24 Dec 2023 22:28:55 +0000
ROA not before:           Sun 24 Dec 2023 22:23:55 +0000
ROA not after:            Sun 22 Dec 2024 22:28:55 +0000
asID:                     265384
IP address blocks:        170.254.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8f:c0:dc:74:f8:09:8e:39:2a:f8:4e:f5:22:4e:86:d9:ab:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
        Validity
            Not Before: Dec 24 22:23:55 2023 GMT
            Not After : Dec 22 22:28:55 2024 GMT
        Subject: CN=1DFB57F60169B0E03C8F609E2C8B12B933F9DC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:fd:86:82:a2:32:82:7c:eb:d9:27:10:e3:
                    e4:a4:a1:4a:5f:29:45:b9:1a:88:8a:c7:1c:fc:6c:
                    78:f8:83:ca:de:19:04:a3:cb:3f:13:8a:d1:66:c1:
                    67:5f:bb:8f:12:73:a0:d0:15:7a:b6:d8:3b:65:7a:
                    57:6a:a0:01:6c:ff:56:80:d8:08:16:5c:5b:f0:08:
                    98:9d:7d:03:d0:b7:87:4a:43:06:61:39:c1:c1:18:
                    23:8d:5a:53:5f:19:4c:8e:bf:97:d7:7c:c9:1b:12:
                    65:0d:45:5c:85:fe:da:cd:15:e7:96:62:bd:18:8e:
                    4f:ba:c5:60:13:7c:91:00:ed:8c:70:6a:f0:3a:4e:
                    fb:48:74:49:0e:3a:13:ef:51:04:95:9a:d0:74:84:
                    33:99:7e:7a:97:56:49:70:d8:de:ba:81:03:79:6d:
                    52:b3:5f:99:ed:40:38:59:d7:32:5c:0a:3a:aa:52:
                    0c:f2:32:0c:1e:2a:88:fe:d6:41:9e:87:b4:49:3b:
                    ff:62:56:02:33:4b:35:c9:b4:52:a0:46:ce:1d:32:
                    05:3c:87:83:63:70:b4:f5:70:71:a2:83:c2:3d:8b:
                    a4:04:1c:54:eb:c9:7f:30:5b:28:d2:7b:81:09:9d:
                    22:e9:b2:7b:86:cc:31:34:c7:2c:40:95:c5:1f:3d:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:57:F6:01:69:B0:E0:3C:8F:60:9E:2C:8B:12:B9:33:F9:DC:66
            X509v3 Authority Key Identifier:
                keyid:C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32332d3233203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:03:ad:d2:ec:b9:98:6b:79:62:d4:5b:c0:4e:e7:54:4a:
         c0:21:c3:4e:5a:79:52:11:ff:67:c6:c0:c9:64:69:d8:09:39:
         26:db:2f:67:ee:fc:43:69:b7:1b:3c:0b:81:b0:8a:f7:96:81:
         2f:ce:b4:a1:8b:02:c0:02:c8:99:a6:6e:80:f1:79:66:bf:0d:
         bb:0e:52:09:b4:c1:3d:4e:2d:53:69:f5:da:29:d4:f9:07:2f:
         54:ee:62:fa:e6:df:b7:b7:dd:dd:db:02:e2:e6:46:a5:7f:c0:
         e9:9d:46:aa:1d:c3:46:65:3e:00:f9:6c:43:5c:dc:67:fd:14:
         ad:56:28:7b:1d:28:da:dd:24:df:22:bb:30:f8:ae:7f:16:e1:
         c0:91:1b:b3:9f:46:74:3a:90:cf:77:7b:12:f0:6a:1d:e0:ff:
         8e:7c:db:c7:01:22:b7:62:20:2c:d5:7a:86:53:4c:3b:b9:8e:
         66:19:a2:73:e3:59:14:5a:db:ee:8d:9b:a0:b3:62:92:91:19:
         c4:26:94:46:e5:2f:c5:26:57:f9:9d:30:6e:fc:c3:96:2a:89:
         25:7c:85:bb:16:6c:b4:c2:94:c4:32:5a:cb:38:6a:37:d4:9a:
         5a:7b:a8:61:1a:b0:58:62:d6:5f:4d:b5:ca:6f:a2:9f:0a:0d:
         68:fa:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org