Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          0Cn5ZZkXlAwKUmHzJgReozT1LnrCiX/b9zZXSTOjdu8=
Subject key identifier:   46:77:09:A2:18:F4:71:37:A6:8E:64:20:2D:2C:0E:A8:1E:05:42:4F
Certificate issuer:       /CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
Certificate serial:       4F8D543CF8099430801C51518E45CCE8A407DE49
Authority key identifier: C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
Signing time:             Sun 24 Dec 2023 22:28:56 +0000
ROA not before:           Sun 24 Dec 2023 22:23:56 +0000
ROA not after:            Sun 22 Dec 2024 22:28:56 +0000
asID:                     265384
IP address blocks:        170.254.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8d:54:3c:f8:09:94:30:80:1c:51:51:8e:45:cc:e8:a4:07:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
        Validity
            Not Before: Dec 24 22:23:56 2023 GMT
            Not After : Dec 22 22:28:56 2024 GMT
        Subject: CN=467709A218F47137A68E64202D2C0EA81E05424F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:0b:83:ec:fa:d4:16:c3:8d:30:66:bb:94:
                    c8:d6:f7:17:f7:82:a3:3e:37:8e:80:2a:39:94:5a:
                    98:b8:54:5c:51:87:7c:76:e4:32:8b:5c:e9:4d:f4:
                    c0:22:f7:e3:2f:30:a3:9b:44:89:15:91:c7:b2:c2:
                    ba:bb:32:8c:ad:af:b7:8a:e9:64:07:8d:29:cc:9b:
                    f1:82:5c:79:61:04:eb:81:e1:61:59:91:cf:99:a3:
                    c9:31:50:3c:15:3b:da:d4:7d:bc:7d:d0:f0:d9:0d:
                    f0:40:50:c0:eb:83:df:39:67:82:ff:70:4a:be:ce:
                    f6:55:2e:d1:54:5a:02:1c:f8:63:78:aa:37:c9:08:
                    56:0a:fd:6f:c5:10:25:d8:9e:fb:61:bc:b3:bc:27:
                    08:b7:08:28:f8:bd:98:9c:8d:f5:10:de:86:65:4e:
                    18:eb:d9:40:90:b5:56:36:5e:7a:74:f6:e3:25:8f:
                    1a:f7:a3:9a:cc:9b:dc:87:33:8d:cf:94:fb:55:52:
                    36:7b:9c:9c:40:16:05:15:9a:2d:1e:f2:9d:4c:57:
                    cf:d5:31:85:66:ee:3f:97:1e:43:32:f6:46:a8:41:
                    b5:96:01:94:f5:58:0c:e0:64:c5:ea:a1:56:62:6a:
                    51:b0:55:0a:9b:87:34:e4:6c:bf:6a:0f:67:40:82:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:77:09:A2:18:F4:71:37:A6:8E:64:20:2D:2C:0E:A8:1E:05:42:4F
            X509v3 Authority Key Identifier:
                keyid:C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b9:36:2f:21:95:a8:fb:f3:ed:6b:b9:c8:9b:1e:fe:39:87:
         25:6f:61:6e:39:6c:f1:59:44:d6:dd:a3:8a:37:bb:ef:8a:4a:
         05:de:f8:2f:e2:89:ed:9c:b4:f7:ca:4e:fa:9c:f2:5b:b4:dc:
         da:92:f8:e8:47:46:eb:87:ca:e2:f1:ea:41:db:80:b5:a8:89:
         88:94:f7:8b:d9:c3:e9:13:61:b9:dd:57:f2:68:3f:f3:b7:03:
         ff:6e:92:ac:f5:b5:f2:4f:ce:f9:75:7c:97:31:40:e7:f8:ee:
         04:61:f2:58:06:2f:02:61:6d:39:cf:f5:37:62:03:32:f9:80:
         bf:1e:10:d0:0a:8a:f9:88:ec:1a:8a:5a:bf:8f:a0:c2:6c:5e:
         fa:16:0b:1c:76:7d:f1:c4:e5:4f:0e:f8:1c:72:6f:f7:82:22:
         17:34:f1:b8:c1:d8:7b:70:c4:6c:85:5f:ad:4b:8e:66:53:58:
         72:64:fa:ce:7c:8b:a9:79:d6:43:05:08:d0:d2:83:49:52:7a:
         fe:e5:a5:ae:9a:a7:3b:99:07:be:a7:8a:ea:a8:35:54:70:f0:
         57:90:93:09:4e:b0:29:f1:97:4c:d0:8e:58:31:ae:3c:d5:ba:
         3d:fd:77:88:71:e8:b1:f8:62:62:84:93:b9:db:eb:da:d6:bd:
         0b:c8:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org