Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa
File:                     3137302e3235342e362e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          MedEYOBNZAR6mxxMknU0w9SScmEe4FUey8sRHPS/ibU=
Subject key identifier:   A8:3D:95:7A:A1:29:57:AE:83:2D:7B:21:3C:F7:BC:B1:12:6C:52:2D
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       11755B20950BB039EE86E93B241424438E15E228
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:56 +0000
ROA not before:           Fri 12 Apr 2024 13:14:56 +0000
ROA not after:            Fri 11 Apr 2025 13:19:56 +0000
asID:                     263528
IP address blocks:        170.254.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:75:5b:20:95:0b:b0:39:ee:86:e9:3b:24:14:24:43:8e:15:e2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:56 2024 GMT
            Not After : Apr 11 13:19:56 2025 GMT
        Subject: CN=3082010A0282010100AF278F39542E7A5C72FFC64438F5684F3EA56ACA990ADF318FC72FDBC54CDE37883F09DF53B00EC7D11B4F8511BC2006DB95CB76A905085151029CC5EC9BC2D8B2D3B6711FF91399D1F57E89F189AB924D781641217DFB91E3AEFABF232E5986655A04C8731F013C3F61DD043155D40AC0AFACF1A8CC7E63B5F16E80126B33800DFF98057B8E4FF339A124C65204940682C583FF76B559178351F5794F0CC78D9C9A290FF9A10E01B648CAB3B9D2065D60C1992A780A71D05EF075BBD3A99A63528AAA87FF92A86C5F527049BAF5AB124B844284A468C3F7F0CF9819778EF2A2688F485DE74A50EECDF133790710F7E43D6ECE7EB9F5FC1A66CC78A9F453298B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:8f:39:54:2e:7a:5c:72:ff:c6:44:38:f5:
                    68:4f:3e:a5:6a:ca:99:0a:df:31:8f:c7:2f:db:c5:
                    4c:de:37:88:3f:09:df:53:b0:0e:c7:d1:1b:4f:85:
                    11:bc:20:06:db:95:cb:76:a9:05:08:51:51:02:9c:
                    c5:ec:9b:c2:d8:b2:d3:b6:71:1f:f9:13:99:d1:f5:
                    7e:89:f1:89:ab:92:4d:78:16:41:21:7d:fb:91:e3:
                    ae:fa:bf:23:2e:59:86:65:5a:04:c8:73:1f:01:3c:
                    3f:61:dd:04:31:55:d4:0a:c0:af:ac:f1:a8:cc:7e:
                    63:b5:f1:6e:80:12:6b:33:80:0d:ff:98:05:7b:8e:
                    4f:f3:39:a1:24:c6:52:04:94:06:82:c5:83:ff:76:
                    b5:59:17:83:51:f5:79:4f:0c:c7:8d:9c:9a:29:0f:
                    f9:a1:0e:01:b6:48:ca:b3:b9:d2:06:5d:60:c1:99:
                    2a:78:0a:71:d0:5e:f0:75:bb:d3:a9:9a:63:52:8a:
                    aa:87:ff:92:a8:6c:5f:52:70:49:ba:f5:ab:12:4b:
                    84:42:84:a4:68:c3:f7:f0:cf:98:19:77:8e:f2:a2:
                    68:8f:48:5d:e7:4a:50:ee:cd:f1:33:79:07:10:f7:
                    e4:3d:6e:ce:7e:b9:f5:fc:1a:66:cc:78:a9:f4:53:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:95:7A:A1:29:57:AE:83:2D:7B:21:3C:F7:BC:B1:12:6C:52:2D
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:61:dd:1f:29:07:20:35:79:55:3e:95:dc:64:50:3e:6b:b1:
         53:cc:4b:ef:8b:6a:e5:1d:01:9d:ba:47:e6:d3:6c:75:cb:da:
         55:47:70:6a:d5:8f:a0:dc:c5:30:3b:bc:0d:cd:40:08:39:d6:
         d1:8c:cc:d1:39:8b:57:be:3c:65:f6:24:39:38:07:17:cd:3b:
         49:98:0d:d4:79:31:51:9b:af:f6:3e:2c:6f:c3:a9:50:b8:f0:
         b3:6c:4f:75:7d:28:12:f3:5a:12:6d:c7:cc:09:20:53:b3:78:
         d6:cf:ee:cc:f7:99:c5:5b:b9:58:10:f1:de:5a:6d:88:2d:bc:
         e8:e7:30:b0:ba:74:22:7d:c8:f9:4f:f8:60:73:00:50:5e:27:
         e3:9a:5b:4f:5b:da:25:32:8d:cc:8c:01:af:d9:99:8c:94:a5:
         5e:f4:d1:06:76:e3:75:6b:46:f4:ae:d5:8e:9c:d6:64:36:ac:
         41:ce:02:13:6c:3d:d8:28:26:12:51:01:62:71:eb:a2:67:be:
         8a:b2:c4:8f:dd:63:5f:3b:98:b4:45:0b:ee:a3:60:d5:6a:46:
         03:20:a2:92:b7:b9:c6:b2:bf:cf:1e:a2:57:ad:e7:35:65:ae:
         23:dd:af:50:e4:c8:9d:c7:c7:6c:98:60:62:b5:85:82:46:fc:
         82:dd:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org