Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32332d3233203d3e20323633353238.roa (raw, json)
Hash identifier:          uCo+M5J0Xlsh5/2LxrMQPCz8z2vmX31AqxjuAnlfZ+4=
Subject key identifier:   E7:9F:74:29:D5:B4:5C:D7:FA:38:8B:6C:22:14:8B:04:27:97:9A:6D
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       30AB746A1DE1FAB55065559103D04D1A16A9369B
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:74:6a:1d:e1:fa:b5:50:65:55:91:03:d0:4d:1a:16:a9:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:87:8d:14:b1:4b:fb:79:ac:71:08:d8:61:
                    32:ad:fe:2b:72:cf:25:b5:15:8e:ab:57:74:c1:d2:
                    ee:4b:df:09:cc:67:ac:fe:d7:45:7c:b4:dd:21:02:
                    c1:bd:3f:97:16:56:62:f5:38:9c:35:a5:97:85:1a:
                    3f:3e:db:16:0a:d9:60:13:27:bf:89:a0:55:25:8b:
                    f5:a6:1e:51:8c:8c:ac:6c:34:a7:aa:94:e5:a5:14:
                    6b:52:1e:23:ef:21:a7:14:a6:f3:00:44:52:20:08:
                    11:2f:07:bc:17:5b:07:04:53:2f:3b:90:01:c9:f3:
                    6f:f4:79:71:14:f3:a9:f4:fd:ec:47:33:1b:32:7d:
                    ae:15:46:15:d1:1a:4c:cf:a0:41:a1:d5:e3:d4:cb:
                    6c:0f:40:c7:98:ec:78:ea:ea:75:77:4e:53:da:36:
                    98:a8:bf:66:50:12:98:ab:16:b3:81:07:13:e5:90:
                    0c:36:06:16:8f:e0:2d:5c:d8:fb:13:06:46:8a:b8:
                    39:bf:47:9c:5b:ee:7b:6e:8b:ca:1c:ff:48:2f:05:
                    e0:bd:f9:a3:2f:0b:61:fe:2c:ac:d2:bb:13:3f:a0:
                    e4:4d:0f:96:09:78:ef:6d:bc:66:da:fe:f9:2c:a1:
                    79:43:24:ed:58:ee:98:45:9c:60:07:90:d3:2c:4b:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:74:29:D5:B4:5C:D7:FA:38:8B:6C:22:14:8B:04:27:97:9A:6D
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:48:77:39:e2:f1:e9:14:62:fb:78:fb:50:fd:58:9c:81:c5:
         f4:2e:58:89:69:04:8a:17:10:6b:03:8f:44:ab:36:f4:bc:e6:
         e4:ad:d0:f2:34:8e:a6:e3:6d:8b:68:20:59:72:2a:60:34:54:
         13:95:ef:81:a7:c5:84:78:c5:e9:01:59:dc:5f:c2:a8:02:23:
         38:26:3d:07:f4:7d:93:a0:a7:c3:48:f5:4e:7f:34:a6:64:5e:
         da:73:0b:4e:ea:af:ec:49:5e:e6:5b:b7:53:06:8a:b3:9e:4c:
         8e:15:fd:01:b5:f5:11:2e:66:0c:6e:d1:e8:a4:cc:3e:b2:4c:
         43:9a:ff:ef:49:c8:61:d2:b3:62:1f:ad:9a:2c:2c:94:ed:e6:
         bb:e9:6b:fe:85:e5:b9:92:58:43:77:07:eb:e0:b9:19:53:88:
         26:77:36:f0:19:6e:6e:ba:e9:79:2b:7b:40:97:8d:61:80:83:
         97:5f:3a:7d:27:ac:09:6f:4c:bc:0c:d9:84:1c:7f:53:ad:28:
         71:8a:10:48:bb:a8:e1:96:98:ca:ba:1f:f1:54:ca:7f:48:a8:
         96:9b:ac:f0:16:05:7a:ed:0c:22:d6:e0:ef:d4:27:83:31:d3:
         67:79:0d:10:d3:fa:0a:d8:37:9e:73:76:25:d6:9d:72:13:47:
         86:0e:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org