Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          NrV9wjx0SK1FOlugcR4veay2LiaxfQQbx/jPsDUlS7w=
Subject key identifier:   3E:B9:5C:98:3A:03:54:58:6A:F3:35:28:B0:72:EF:59:8E:BC:F3:D0
Certificate issuer:       /CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
Certificate serial:       415AEF83D775920557A38EC4EA7C4047C129F547
Authority key identifier: C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa
Signing time:             Sun 24 Dec 2023 22:28:55 +0000
ROA not before:           Sun 24 Dec 2023 22:23:55 +0000
ROA not after:            Sun 22 Dec 2024 22:28:55 +0000
asID:                     265384
IP address blocks:        170.254.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:ef:83:d7:75:92:05:57:a3:8e:c4:ea:7c:40:47:c1:29:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E233BD893D72E2620AF66DE696FE2EE7A2E527
        Validity
            Not Before: Dec 24 22:23:55 2023 GMT
            Not After : Dec 22 22:28:55 2024 GMT
        Subject: CN=3EB95C983A0354586AF33528B072EF598EBCF3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:94:bb:c0:32:27:94:b2:21:4a:a5:67:65:
                    d9:60:92:cb:38:72:21:13:a8:02:5a:96:3c:c0:7b:
                    29:7a:0a:d6:73:90:0d:0a:9b:9f:c6:f1:58:f8:6e:
                    09:21:cc:1b:f4:e6:34:03:7d:bb:1d:c2:01:7b:a2:
                    22:b0:79:ef:14:16:56:94:5d:8f:dd:ec:7e:d8:1f:
                    45:bd:93:8f:f4:7f:76:69:f6:39:a4:49:2b:9d:27:
                    99:85:2e:5d:11:bf:4a:ab:16:64:4d:b0:72:83:8e:
                    37:20:63:14:14:a5:1c:17:48:61:49:c7:d1:f1:7d:
                    c2:fb:24:90:c1:b0:be:38:e2:a0:7b:d4:12:33:98:
                    86:9d:69:b9:ae:35:14:50:93:8f:7d:64:35:38:a5:
                    b2:77:15:16:27:07:4a:fd:8e:90:42:46:2e:41:2d:
                    ac:61:5b:e5:9c:91:e6:41:86:56:dc:bf:dc:f0:58:
                    59:98:73:8c:9d:fe:72:59:5c:10:af:15:42:47:db:
                    f9:5d:6e:9d:dc:1c:5d:85:09:b3:62:5e:01:6d:69:
                    bd:e5:99:a6:32:f4:75:81:7e:f0:ba:59:0f:8e:e2:
                    34:b0:1d:82:b4:58:34:cb:60:95:d7:25:fd:54:66:
                    6d:94:00:b1:d9:dd:c8:e5:75:47:b5:5b:6b:92:78:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B9:5C:98:3A:03:54:58:6A:F3:35:28:B0:72:EF:59:8E:BC:F3:D0
            X509v3 Authority Key Identifier:
                keyid:C6:E2:33:BD:89:3D:72:E2:62:0A:F6:6D:E6:96:FE:2E:E7:A2:E5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E233BD893D72E2620AF66DE696FE2EE7A2E527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:e5:8c:24:e1:0b:f4:db:00:58:3f:b8:69:d7:75:82:81:
         2a:e5:55:02:f6:06:8c:da:86:08:38:e0:7b:14:12:c1:0e:0c:
         32:1b:31:fa:e9:ae:ac:53:23:8e:e9:98:bf:7a:b1:f1:ca:1f:
         97:9a:c2:63:d4:1b:76:79:3d:69:c6:75:95:00:c7:b4:d9:cd:
         6e:52:84:f2:f1:ac:f4:ce:ff:eb:66:d8:83:7a:9b:d6:2a:87:
         0c:ff:d0:ca:cd:eb:d7:c5:ef:28:7f:b2:40:17:d2:42:f1:46:
         a1:6b:8e:6c:32:0f:1a:66:3d:ea:dc:e9:77:ef:2f:da:c0:51:
         af:5f:4c:ec:4a:63:0a:e4:24:e5:69:d4:b6:47:bf:bb:f9:ed:
         56:4d:a8:62:69:e3:aa:1c:1a:96:c3:bc:d0:10:7b:aa:39:b4:
         2b:fb:b2:4a:c6:6d:27:20:52:ae:97:41:51:c9:2e:11:31:ef:
         c0:27:b2:39:23:a3:1e:fd:d8:01:26:fa:45:4b:71:08:af:d5:
         49:21:aa:b4:d0:b0:d1:50:d5:02:9d:fa:5a:bd:ec:15:2f:f0:
         e3:18:5f:1c:47:1c:56:de:6c:42:a6:d3:97:42:be:39:f8:0f:
         11:5e:68:d3:74:5d:81:70:09:b4:88:a4:d5:25:fc:b1:90:89:
         9d:da:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org