Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          9JhvtRJY3RTAowCuEezgJcOHElxHmfpNlJM9XrvjAs8=
Subject key identifier:   FA:64:A9:D2:CB:9B:2F:3C:21:48:78:27:49:64:51:72:2E:C7:F7:EA
Certificate issuer:       /CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
Certificate serial:       2A2F4524E0072CEA46EC2C8F85A4CF33ADFBE274
Authority key identifier: C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa
Signing time:             Sun 24 Dec 2023 22:28:55 +0000
ROA not before:           Sun 24 Dec 2023 22:23:55 +0000
ROA not after:            Sun 22 Dec 2024 22:28:55 +0000
asID:                     265384
IP address blocks:        170.254.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2f:45:24:e0:07:2c:ea:46:ec:2c:8f:85:a4:cf:33:ad:fb:e2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
        Validity
            Not Before: Dec 24 22:23:55 2023 GMT
            Not After : Dec 22 22:28:55 2024 GMT
        Subject: CN=FA64A9D2CB9B2F3C21487827496451722EC7F7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:01:a1:89:e2:55:86:5f:88:53:69:b7:e2:
                    76:d5:c9:bd:d5:45:96:a7:c7:44:b4:83:d8:13:a5:
                    55:d0:6d:96:15:17:7f:f3:fd:2b:0e:16:8b:e2:6c:
                    f9:60:a0:53:1f:56:99:2e:42:ac:68:90:8b:0d:51:
                    03:9c:0e:34:c6:8e:9d:04:58:7e:09:84:31:77:16:
                    ac:b5:21:8b:44:c4:b0:9e:7f:bf:b5:39:19:51:05:
                    47:2f:f5:60:32:94:fd:af:18:89:b6:c3:8e:dc:2d:
                    b2:ca:19:9d:c6:a4:c6:2f:67:0c:80:e6:73:03:8f:
                    9a:d3:b9:6d:42:bf:8c:49:93:c2:dc:6f:27:9c:04:
                    21:98:c7:6b:13:0a:4a:50:f0:21:a7:0e:4c:31:a1:
                    03:5a:96:12:f7:f0:b0:d7:2c:ca:d9:2f:bd:dd:ac:
                    1e:58:82:ec:43:bc:28:fe:f2:12:b3:66:2e:c8:30:
                    75:bf:50:5e:29:bc:36:87:89:3d:ae:45:4d:f7:05:
                    f5:f5:32:18:67:2a:10:fd:49:20:e2:d4:13:08:f3:
                    54:69:c4:65:6e:a1:3c:ca:48:50:5a:81:9d:d2:fc:
                    80:3d:bb:20:5b:0b:e9:71:75:e0:1f:44:3c:90:42:
                    ab:c7:20:f6:91:ed:4e:7d:4d:5f:ce:2f:05:e6:9d:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:64:A9:D2:CB:9B:2F:3C:21:48:78:27:49:64:51:72:2E:C7:F7:EA
            X509v3 Authority Key Identifier:
                keyid:C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:d8:93:e3:35:f1:9f:b4:d5:89:a5:77:7c:b8:16:8d:e5:
         d4:2c:6d:28:72:43:ed:d4:b3:e0:bc:8e:f1:e3:ed:2f:bc:ad:
         ff:6f:27:0b:c6:8a:49:c0:93:d2:b2:16:26:b5:cd:96:3d:20:
         b0:8d:dc:85:f1:f9:7c:8e:47:ff:9c:4f:80:2d:e3:9d:2b:23:
         86:24:13:05:9c:a1:a2:b2:98:d6:64:95:90:4a:81:7a:b0:7a:
         6d:46:87:54:69:51:ae:c3:75:5a:b3:61:6f:1f:b4:82:2f:26:
         f5:3f:d5:65:07:0f:46:ee:36:c3:73:30:fa:5f:7c:15:36:93:
         f5:aa:bf:9f:a6:1a:17:8a:42:83:d3:19:66:20:1a:7f:6b:f8:
         f1:71:d7:90:f4:14:e0:64:12:24:da:b2:49:6f:76:64:7e:9d:
         87:3e:c5:04:70:27:6c:fb:90:c1:94:ad:77:12:6b:4b:c2:5b:
         fb:9d:96:d6:05:7f:a8:a9:24:40:66:ed:a3:f5:3a:ee:82:c4:
         dd:58:e9:63:90:c2:65:9e:9a:4a:8f:be:5d:9a:4b:2e:09:0f:
         00:72:a1:49:ab:12:80:f6:79:33:db:e7:1c:c1:81:86:8f:18:
         cb:91:7f:98:64:5a:68:97:a8:5b:f3:b6:af:dd:6c:84:90:99:
         ed:1b:1e:58
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKi9FJOAHLOpG7CyPhaTPM6374nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZFMjMzQkQ4OTNENzJFMjYyMEFGNjZERTY5NkZFMkVF
N0EyRTUyNzAeFw0yMzEyMjQyMjIzNTVaFw0yNDEyMjIyMjI4NTVaMDMxMTAvBgNV
BAMTKEZBNjRBOUQyQ0I5QjJGM0MyMTQ4NzgyNzQ5NjQ1MTcyMkVDN0Y3RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BAGhieJVhl+IU2m34nbVyb3V
RZanx0S0g9gTpVXQbZYVF3/z/SsOFovibPlgoFMfVpkuQqxokIsNUQOcDjTGjp0E
WH4JhDF3Fqy1IYtExLCef7+1ORlRBUcv9WAylP2vGIm2w47cLbLKGZ3GpMYvZwyA
5nMDj5rTuW1Cv4xJk8LcbyecBCGYx2sTCkpQ8CGnDkwxoQNalhL38LDXLMrZL73d
rB5YguxDvCj+8hKzZi7IMHW/UF4pvDaHiT2uRU33BfX1MhhnKhD9SSDi1BMI81Rp
xGVuoTzKSFBagZ3S/IA9uyBbC+lxdeAfRDyQQqvHIPaR7U59TV/OLwXmnTp5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+mSp0subLzwhSHgnSWRRci7H9+owHwYDVR0j
BBgwFoAUxuIzvYk9cuJiCvZt5pb+Luei5ScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC9DNkUyMzNCRDg5M0Q3MkUyNjIwQUY2NkRFNjk2RkUyRUU3QTJFNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RTIzM0JEODkzRDcyRTI2
MjBBRjY2REU2OTZGRTJFRTdBMkU1MjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+8TANBgkqhkiG9w0BAQsFAAOCAQEAvPbY
k+M18Z+01Ymld3y4Fo3l1CxtKHJD7dSz4LyO8ePtL7yt/28nC8aKScCT0rIWJrXN
lj0gsI3chfH5fI5H/5xPgC3jnSsjhiQTBZyhorKY1mSVkEqBerB6bUaHVGlRrsN1
WrNhbx+0gi8m9T/VZQcPRu42w3Mw+l98FTaT9aq/n6YaF4pCg9MZZiAaf2v48XHX
kPQU4GQSJNqySW92ZH6dhz7FBHAnbPuQwZStdxJrS8Jb+52W1gV/qKkkQGbto/U6
7oLE3VjpY5DCZZ6aSo++XZpLLgkPAHKhSasSgPZ5M9vnHMGBho8Yy5F/mGRaaJeo
W/O2r91shJCZ7RseWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org