Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32332d3233203d3e20323633353238.roa
File:                     3137302e3235342e362e302f32332d3233203d3e20323633353238.roa (raw, json)
Hash identifier:          StxSUn2Cfg8CJS1YOEuJx04EPcP0mR34MwvUWE7k3l0=
Subject key identifier:   CA:3E:C2:3F:D4:66:37:85:BB:AA:7E:DD:E7:69:CD:7C:C2:A0:27:7C
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       6D4885BFDFC760A380E54C809186BF44CE8480FE
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32332d3233203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:85:bf:df:c7:60:a3:80:e5:4c:80:91:86:bf:44:ce:84:80:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:67:91:40:d3:26:87:52:c8:30:b2:29:7b:
                    59:81:f6:bb:54:f6:f9:43:47:d9:2e:ac:5d:ff:18:
                    1e:58:b9:ed:3a:5f:7c:4d:b4:4c:99:56:e1:58:38:
                    18:30:9f:b6:11:d2:d0:ce:8b:1a:88:4b:e0:9d:c9:
                    cb:54:e3:c9:20:dc:e1:66:b8:81:16:ab:79:30:b1:
                    5c:b4:4b:39:68:2d:82:81:e0:8b:a4:f7:92:e9:b7:
                    52:55:51:95:d6:d3:6e:43:19:50:d2:0c:fe:81:11:
                    b2:76:ec:86:cb:94:c0:65:f1:32:58:9c:5d:7c:4b:
                    39:6b:7f:b5:d0:70:85:34:09:51:9f:68:a9:7f:21:
                    63:c0:0f:5c:de:0c:c6:75:41:7a:e6:8f:9c:23:e4:
                    61:fe:d8:e5:d8:d9:12:28:5a:d5:ff:d0:f3:6d:71:
                    19:bc:d0:9f:02:ef:1a:18:22:32:48:9a:73:b8:d8:
                    a8:d0:8b:b7:a2:80:ff:d9:f4:4b:ef:fa:b2:61:de:
                    1c:86:7f:42:0e:e6:93:61:ff:ec:25:98:30:34:b5:
                    b7:78:3a:a2:01:16:4d:9f:29:35:0a:b5:dc:4c:ea:
                    f1:02:27:18:64:c9:06:a4:24:c9:df:51:39:16:31:
                    f0:20:66:75:72:86:8c:b6:b7:7b:8e:6d:aa:94:af:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:C2:3F:D4:66:37:85:BB:AA:7E:DD:E7:69:CD:7C:C2:A0:27:7C
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32332d3233203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:64:1e:fd:3a:ae:92:5d:5c:85:38:a7:0d:cf:18:2f:c6:
         7a:69:87:68:c3:1f:04:e2:01:17:ae:41:94:5d:3b:62:ec:90:
         ba:37:10:b0:84:6e:ce:48:d0:1b:89:cc:0e:83:d9:fa:27:b2:
         42:d9:cd:61:36:aa:d0:9a:da:ac:59:23:9e:8c:73:42:48:4f:
         57:87:6c:c1:08:fc:61:43:2d:7c:de:d0:c6:0b:4c:ad:40:0b:
         fe:87:7a:8f:04:5a:54:e0:1c:67:36:3f:45:d4:66:bf:b7:96:
         95:f9:58:8f:a7:b1:14:93:13:17:61:84:36:a6:82:09:17:d2:
         c4:54:0a:12:07:ff:5d:5e:ea:8e:23:02:68:c4:53:3a:bd:66:
         88:65:a0:54:61:e1:72:05:85:51:b0:4f:ad:66:fe:d7:8c:ec:
         60:f4:30:c3:a9:ef:fd:43:f8:11:47:54:78:77:88:3e:35:d0:
         08:c6:32:ba:46:d4:60:58:c7:d8:c0:e3:9e:57:6a:6f:4e:40:
         05:35:15:56:ac:93:3e:3a:b0:92:b5:b3:44:f6:b5:6e:8a:69:
         a5:35:22:12:74:86:69:76:f7:21:11:10:b2:c5:76:6c:e9:ec:
         6d:da:74:b7:f8:f6:83:c5:24:97:48:70:5a:65:23:87:bd:14:
         21:35:a7:a1
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUbUiFv9/HYKOA5UyAkYa/RM6EgP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4NTRENkJBMEM2QzBFREJFMzA0N0JBMjRGNThFN0ZE
NThFQUE5QTAeFw0yNDA0MTIxMzE0NTZaFw0yNTA0MTExMzE5NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUJBMzY3OTE0MEQzMjY4NzUy
QzgzMEIyMjk3QjU5ODFGNkJCNTRGNkY5NDM0N0Q5MkVBQzVERkYxODFFNThCOUVE
M0E1RjdDNERCNDRDOTk1NkUxNTgzODE4MzA5RkI2MTFEMkQwQ0U4QjFBODg0QkUw
OURDOUNCNTRFM0M5MjBEQ0UxNjZCODgxMTZBQjc5MzBCMTVDQjQ0QjM5NjgyRDgy
ODFFMDhCQTRGNzkyRTlCNzUyNTU1MTk1RDZEMzZFNDMxOTUwRDIwQ0ZFODExMUIy
NzZFQzg2Q0I5NEMwNjVGMTMyNTg5QzVEN0M0QjM5NkI3RkI1RDA3MDg1MzQwOTUx
OUY2OEE5N0YyMTYzQzAwRjVDREUwQ0M2NzU0MTdBRTY4RjlDMjNFNDYxRkVEOEU1
RDhEOTEyMjg1QUQ1RkZEMEYzNkQ3MTE5QkNEMDlGMDJFRjFBMTgyMjMyNDg5QTcz
QjhEOEE4RDA4QkI3QTI4MEZGRDlGNDRCRUZGQUIyNjFERTFDODY3RjQyMEVFNjkz
NjFGRkVDMjU5ODMwMzRCNUI3NzgzQUEyMDExNjREOUYyOTM1MEFCNURDNENFQUYx
MDIyNzE4NjRDOTA2QTQyNEM5REY1MTM5MTYzMUYwMjA2Njc1NzI4NjhDQjZCNzdC
OEU2REFBOTRBRjExRTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA66NnkUDTJodSyDCyKXtZgfa7VPb5Q0fZLqxd/xgeWLntOl98TbRM
mVbhWDgYMJ+2EdLQzosaiEvgncnLVOPJINzhZriBFqt5MLFctEs5aC2CgeCLpPeS
6bdSVVGV1tNuQxlQ0gz+gRGyduyGy5TAZfEyWJxdfEs5a3+10HCFNAlRn2ipfyFj
wA9c3gzGdUF65o+cI+Rh/tjl2NkSKFrV/9DzbXEZvNCfAu8aGCIySJpzuNio0Iu3
ooD/2fRL7/qyYd4chn9CDuaTYf/sJZgwNLW3eDqiARZNnyk1CrXcTOrxAicYZMkG
pCTJ31E5FjHwIGZ1coaMtrd7jm2qlK8R4wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMo+wj/UZjeFu6p+3edpzXzCoCd8MB8GA1UdIwQYMBaAFGqFTWugxsDtvjBHuiT1
jn/VjqqaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRtaVpuUTVHdUZCVmh2
b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzEvNkE4NTRENkJBMEM2QzBF
REJFMzA0N0JBMjRGNThFN0ZENThFQUE5QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82QTg1NEQ2QkEwQzZDMEVEQkUzMDQ3QkEyNEY1OEU3RkQ1OEVB
QTlBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80bWlablE1R3VGQlZodm9iQmhj
Zlk3YVI5R24xMnNhSHNTamdUdVM1YnlGeS8xLzMxMzczMDJlMzIzNTM0MmUzNjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzM1MzIzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAar+
BjANBgkqhkiG9w0BAQsFAAOCAQEAgspkHv06rpJdXIU4pw3PGC/GemmHaMMfBOIB
F65BlF07YuyQujcQsIRuzkjQG4nMDoPZ+ieyQtnNYTaq0JrarFkjnoxzQkhPV4ds
wQj8YUMtfN7QxgtMrUAL/od6jwRaVOAcZzY/RdRmv7eWlflYj6exFJMTF2GENqaC
CRfSxFQKEgf/XV7qjiMCaMRTOr1miGWgVGHhcgWFUbBPrWb+14zsYPQww6nv/UP4
EUdUeHeIPjXQCMYyukbUYFjH2MDjnldqb05ABTUVVqyTPjqwkrWzRPa1bopppTUi
EnSGaXb3IREQssV2bOnsbdp0t/j2g8Ukl0hwWmUjh70UITWnoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org