Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32322d3232203d3e20323633353238.roa (raw, json)
Hash identifier:          S13r0dWJcJWfkM+Y3549NV+/Di1SHicwnpBzis6axjw=
Subject key identifier:   C3:FE:F0:F5:70:D9:49:88:4A:A7:0B:E8:8F:47:F6:24:E7:8E:D5:B7
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       56A02A232CF1DF06A809B3C0751C50ACEF8AE7B6
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:2a:23:2c:f1:df:06:a8:09:b3:c0:75:1c:50:ac:ef:8a:e7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:b5:16:b7:03:ce:59:82:ab:80:d8:2b:a9:
                    a5:a0:d4:e0:ec:79:52:47:1d:6b:40:a1:0c:12:1e:
                    65:a5:fe:7f:5e:b9:51:77:34:c5:d7:68:ed:9b:df:
                    a6:ea:ad:dc:b7:02:c2:c6:a8:17:bd:28:9e:8a:1b:
                    c3:d5:92:56:ed:68:9a:f6:80:47:33:97:96:af:4a:
                    da:1a:6a:64:39:a2:34:ba:f4:5b:b4:ad:56:ea:17:
                    73:64:37:5c:17:5c:31:c0:fe:72:c7:0a:8e:38:b9:
                    d9:5e:7e:f0:fc:a8:58:c7:88:92:1c:c9:13:f1:88:
                    ae:5a:64:f4:df:e8:ca:dc:5f:94:ff:b2:11:c1:56:
                    7c:80:f7:bf:cd:0a:fa:d4:65:c2:9f:a3:7c:13:19:
                    5a:bf:6f:f4:54:3a:c5:75:7f:70:fb:49:e8:b9:59:
                    d6:89:53:1e:44:49:de:b4:d6:a2:85:ef:d5:25:0c:
                    86:05:25:f7:70:48:2e:85:d4:2a:71:9e:0c:c6:28:
                    29:ec:99:3f:70:1f:38:2b:f9:6d:f8:41:3d:c5:b7:
                    56:7e:25:5c:ea:66:eb:92:e1:c6:92:3f:0d:f3:fe:
                    fb:db:b4:2b:75:af:b7:1e:34:0f:52:b5:83:5c:0a:
                    3e:72:2b:9b:4e:f2:dc:09:e5:3f:65:24:49:a1:9b:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FE:F0:F5:70:D9:49:88:4A:A7:0B:E8:8F:47:F6:24:E7:8E:D5:B7
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:27:a5:7f:10:3b:2b:61:5a:93:20:64:c1:b7:23:96:69:54:
         f5:4f:45:1a:bc:6c:c0:ee:44:bc:0b:c9:1c:09:b4:f9:39:87:
         dc:94:03:04:90:9f:d8:60:e0:f2:4f:37:4c:8c:0d:b6:c6:36:
         14:45:67:b3:e9:42:ee:7e:67:0e:95:cb:24:4a:c6:41:b1:be:
         9a:32:64:57:39:a4:84:6f:38:87:78:4b:fe:2c:c5:07:22:85:
         fc:a9:23:88:48:63:4d:06:6a:96:8e:4f:7b:bd:04:77:eb:16:
         ef:56:ec:35:1d:6b:e5:3b:4e:61:6d:49:69:65:16:38:13:ef:
         35:df:07:b2:02:96:3c:76:f3:59:98:ff:ed:e3:0a:00:14:25:
         a9:95:eb:80:5b:6c:0a:1f:82:28:b5:fb:8a:cb:b7:ea:b3:33:
         b2:c9:6f:2e:2a:a6:b9:54:70:66:ad:9f:d9:d5:12:d9:89:c6:
         e6:3d:d8:07:8a:6a:3c:73:13:f2:9c:c0:99:a9:a7:a0:36:06:
         f4:f6:dc:ad:64:ec:17:e2:3f:fe:45:ba:4c:12:97:9a:82:66:
         5f:08:53:01:18:d4:e9:a0:0b:6a:ac:dd:77:b4:9d:75:4b:be:
         22:70:8f:72:84:e5:1e:07:df:e9:8d:2a:60:86:bb:42:41:ae:
         ac:d7:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org