Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e352e302f32342d3234203d3e20323633353238.roa
File:                     3137302e3235342e352e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          iiYdhFiSisXNqMzUYLhwDeoDsqDygNcV4syHvS46TzI=
Subject key identifier:   0E:05:9B:64:32:63:74:AF:3D:68:75:5B:F6:4C:D7:7D:56:AE:1E:E1
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       7F03C02FE3A25ABA2522AB1297CB17B6E4B9C71D
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e352e302f32342d3234203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:03:c0:2f:e3:a2:5a:ba:25:22:ab:12:97:cb:17:b6:e4:b9:c7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject: CN=3082010A0282010100AF944069DE2B8561386E5AF0215505FF587F0D5025E9BA8ED4D99B4FC4776152AC294483F5BB2004319EB18A7FC1A2A77AA662630186AEF2EAB22A9301EE876543CE64093C8C256203FCF87EBDBCD37392544B88075BA5D2530E1ABA1106BCC8C1C0776FE82EFFE793CC08DF995CBA66C1521B89888A8520FF238A5D0507D24E104869052D54A81477C539B60D531388F36AA2CE2A0A5811F1390F03DCA5BD6AF2114C43C8C20E6AB1B8E276F2FBFD11EF897A9E573A89F0AC9FD57A0331CEBDF3C43EBF027F6CED392253E8C20D57A53018E808ECAE053BFA53E44BA71B2BDEC50C57BD378E77C3E4748C5543ED500B8C4F1BB5E134CA7A24C89270E381B8230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:40:69:de:2b:85:61:38:6e:5a:f0:21:55:
                    05:ff:58:7f:0d:50:25:e9:ba:8e:d4:d9:9b:4f:c4:
                    77:61:52:ac:29:44:83:f5:bb:20:04:31:9e:b1:8a:
                    7f:c1:a2:a7:7a:a6:62:63:01:86:ae:f2:ea:b2:2a:
                    93:01:ee:87:65:43:ce:64:09:3c:8c:25:62:03:fc:
                    f8:7e:bd:bc:d3:73:92:54:4b:88:07:5b:a5:d2:53:
                    0e:1a:ba:11:06:bc:c8:c1:c0:77:6f:e8:2e:ff:e7:
                    93:cc:08:df:99:5c:ba:66:c1:52:1b:89:88:8a:85:
                    20:ff:23:8a:5d:05:07:d2:4e:10:48:69:05:2d:54:
                    a8:14:77:c5:39:b6:0d:53:13:88:f3:6a:a2:ce:2a:
                    0a:58:11:f1:39:0f:03:dc:a5:bd:6a:f2:11:4c:43:
                    c8:c2:0e:6a:b1:b8:e2:76:f2:fb:fd:11:ef:89:7a:
                    9e:57:3a:89:f0:ac:9f:d5:7a:03:31:ce:bd:f3:c4:
                    3e:bf:02:7f:6c:ed:39:22:53:e8:c2:0d:57:a5:30:
                    18:e8:08:ec:ae:05:3b:fa:53:e4:4b:a7:1b:2b:de:
                    c5:0c:57:bd:37:8e:77:c3:e4:74:8c:55:43:ed:50:
                    0b:8c:4f:1b:b5:e1:34:ca:7a:24:c8:92:70:e3:81:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:9B:64:32:63:74:AF:3D:68:75:5B:F6:4C:D7:7D:56:AE:1E:E1
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e352e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:33:0a:76:a9:16:e8:25:66:c3:a6:05:b4:c5:22:f5:08:
         a3:62:77:b7:db:eb:07:39:e9:ab:6f:c8:47:df:28:23:16:bf:
         ad:9d:68:18:26:25:cb:fe:ca:00:6a:ed:f8:2f:fc:e3:33:48:
         bb:b7:e5:d2:d8:6f:9b:dc:60:f8:3a:96:1d:99:4c:d9:20:e5:
         8a:69:ba:65:f4:19:f8:7e:cc:5a:4d:9a:63:31:c3:8b:f8:c4:
         32:65:6a:94:a1:fa:96:78:7b:f9:e0:cf:4e:05:9e:02:21:9b:
         7b:ca:d5:12:18:ef:a0:f6:06:9e:e9:e6:e3:aa:d4:0b:3a:2a:
         eb:29:be:35:91:57:0b:07:17:a7:bf:b7:e4:c8:41:b4:9d:bd:
         1e:ff:db:8e:6e:19:f1:67:4c:06:f1:35:4c:62:ed:17:1a:32:
         90:f2:5f:6b:ae:9d:a5:2c:0e:8e:66:6b:97:a2:46:73:16:34:
         1c:5f:da:5e:85:49:a8:29:ff:1b:eb:bd:8a:af:17:36:3a:b5:
         ad:13:28:61:35:3d:3b:03:af:e2:26:5a:65:a8:bb:4b:b8:15:
         eb:b9:33:ce:6f:97:51:5f:ae:61:d4:48:49:dc:82:93:16:cf:
         6d:97:d8:1f:89:51:ff:ec:92:74:5c:42:a3:83:0e:e0:df:0e:
         2a:ee:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org