Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          Yw1c/pVma2p0Jdh+ADO5GlHAajGd9EblugkZC/JYsnc=
Subject key identifier:   31:DE:33:52:D6:88:99:04:D0:FE:F5:BE:F0:56:3A:8C:2F:81:21:05
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       7E414B9ECD47B6E9924347DE4BEABD7A7CF73A23
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:41:4b:9e:cd:47:b6:e9:92:43:47:de:4b:ea:bd:7a:7c:f7:3a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:1c:14:f6:78:2d:e7:86:8c:fe:1b:c8:37:
                    29:7b:19:28:f8:1b:79:79:4b:8f:54:5b:e2:96:8d:
                    a6:c9:25:ec:da:3f:6e:29:11:d0:67:e3:21:11:e1:
                    2c:35:60:6c:11:e0:c8:58:48:4c:8d:e3:d8:69:ba:
                    b6:86:c8:93:cc:a0:4b:b5:b4:37:f5:2b:f8:09:28:
                    4d:d8:21:5f:52:0c:b9:e7:7b:a5:a1:7e:45:dd:8a:
                    11:4c:db:50:ec:b9:a1:4d:00:76:d4:e3:9e:fc:29:
                    25:2d:f9:a0:8a:5b:44:13:2f:8e:c8:09:56:b0:2a:
                    7b:98:ac:9c:75:32:b1:b9:46:80:c4:8a:51:c4:95:
                    1c:0e:44:89:71:dc:9c:9c:6b:e0:69:4f:e4:e4:bd:
                    93:3c:d7:4d:80:6f:da:4b:4b:fe:4e:c5:1c:e5:01:
                    59:ae:c3:03:22:0c:0c:70:d5:34:8b:e4:67:6d:74:
                    2f:f3:2e:57:f3:d9:a3:c2:41:3c:86:b0:88:90:67:
                    16:b3:28:48:8b:43:f5:63:31:0c:49:49:1c:1e:95:
                    ab:17:76:1b:3f:c4:a4:6f:fa:22:5a:e9:8d:40:8a:
                    5a:f2:06:30:ba:ac:51:d4:93:6f:5d:5c:e7:4e:50:
                    09:39:fd:de:77:09:78:40:af:2d:3f:30:1b:d5:23:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:33:52:D6:88:99:04:D0:FE:F5:BE:F0:56:3A:8C:2F:81:21:05
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:83:06:6a:a5:75:8e:48:da:66:27:92:af:64:7e:f6:81:
         bc:33:24:b1:50:85:77:65:7a:d3:68:85:b3:95:06:91:10:3b:
         6c:99:2b:8b:2f:3b:ff:4e:d9:fc:35:47:65:77:5f:c8:31:de:
         ba:a1:85:33:e8:dc:51:0d:98:a1:07:b2:10:76:bb:24:42:14:
         6f:7b:e2:6f:7e:54:f4:8a:09:a4:7f:53:8f:43:4d:0d:ad:78:
         aa:05:9f:5f:8b:4a:59:cc:54:c1:95:41:fe:5f:7c:d0:10:6d:
         95:21:61:15:88:32:9b:13:11:11:a4:04:96:0b:18:ac:68:b9:
         b3:7c:c4:d9:83:00:b9:78:9f:50:91:59:65:4b:20:2b:d0:b2:
         26:4f:0b:9a:3d:49:99:a2:3c:0e:38:4e:ef:69:50:c4:b8:ba:
         7c:a1:a9:a0:bb:4e:99:4e:da:1c:fb:b1:7a:05:8e:c3:ff:de:
         6d:c5:37:d9:4f:a0:4c:be:af:f4:54:62:a9:2b:89:ab:9a:fc:
         4e:9e:73:21:b9:5a:aa:d3:80:ce:e8:44:45:32:d4:53:ec:71:
         f2:c5:46:2d:26:25:e3:c7:b0:eb:c4:21:cc:37:20:78:16:c4:
         c7:ba:e8:09:78:98:2f:dc:eb:7d:05:c1:50:8b:84:5f:15:8f:
         cb:36:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org