Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa (raw, json)
Hash identifier:          P/LATsNdGv7PDkqACJEJZSJl0ACiDTAf1NK+smYwJG4=
Subject key identifier:   6A:EE:ED:4D:6D:08:A0:E6:F1:EE:F7:EB:96:53:09:6A:05:65:57:BC
Certificate issuer:       /CN=8AC5C649D01398B5479311750B9D73E55000F0CA
Certificate serial:       5C17529160D1752EE9C4A32F025F982100F049C1
Authority key identifier: 8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 16:58:52 +0000
ROA not before:           Thu 04 Apr 2024 16:53:52 +0000
ROA not after:            Thu 03 Apr 2025 16:58:52 +0000
asID:                     264281
IP address blocks:        170.244.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:17:52:91:60:d1:75:2e:e9:c4:a3:2f:02:5f:98:21:00:f0:49:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC5C649D01398B5479311750B9D73E55000F0CA
        Validity
            Not Before: Apr  4 16:53:52 2024 GMT
            Not After : Apr  3 16:58:52 2025 GMT
        Subject: CN=6AEEED4D6D08A0E6F1EEF7EB9653096A056557BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ba:c3:b1:5a:a6:af:84:51:ba:f8:ba:f7:0b:
                    58:3f:12:0f:4f:e4:2b:d9:40:6a:d6:49:79:2e:32:
                    1c:77:02:81:fc:19:92:a9:84:28:81:2c:ac:cb:b5:
                    7f:2d:ac:5b:10:ba:27:60:23:70:3e:cc:94:ef:21:
                    4a:fe:21:4b:c6:45:7e:06:1a:fd:67:27:37:c6:c6:
                    e3:ce:9c:7f:4a:d2:68:cb:55:3c:92:8c:00:83:84:
                    57:fe:43:f0:4d:0b:3c:d1:66:36:bc:66:30:f4:dd:
                    40:c9:74:5d:82:1e:04:9c:d0:6b:00:39:bb:c7:9e:
                    65:16:82:19:15:31:b8:a9:5f:a1:99:71:6c:20:aa:
                    e6:08:0b:a9:f1:53:40:a0:25:a3:61:cb:52:42:13:
                    0f:8b:e7:41:ce:b8:db:79:1d:73:16:03:e6:94:20:
                    0d:3d:7c:25:bd:e1:98:8f:e2:29:57:be:90:96:7e:
                    10:4e:d3:d4:d7:d0:62:e8:f2:0e:1c:32:2c:06:0e:
                    98:7b:2b:c9:78:9c:2c:03:95:6b:2e:64:69:d1:91:
                    17:c6:9f:94:82:7f:d3:5a:3e:a5:cd:82:4f:b6:6b:
                    b4:f4:c9:c4:7b:6c:ac:c6:46:d7:ef:36:c6:11:a2:
                    ef:ef:f1:de:d9:99:75:3d:62:05:20:72:8c:4d:c8:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:ED:4D:6D:08:A0:E6:F1:EE:F7:EB:96:53:09:6A:05:65:57:BC
            X509v3 Authority Key Identifier:
                keyid:8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:37:bb:9f:a6:b5:54:7d:ad:5d:df:30:3d:b3:e1:eb:ad:7b:
         d5:ae:a2:d2:84:54:32:c2:64:62:07:65:56:27:44:3c:d6:86:
         8e:45:2b:0c:15:84:73:12:2d:e6:3a:57:a8:b2:38:6e:54:3f:
         77:18:fa:39:06:fc:32:4d:82:e4:45:d5:26:db:bc:66:97:e1:
         90:f2:5b:22:17:e0:1a:78:a4:4b:97:9e:27:7e:52:05:79:02:
         21:a6:5e:10:2f:a8:13:1e:70:58:17:d9:ce:b8:d4:25:50:5f:
         83:98:3a:d3:06:85:4b:dc:48:e4:b0:e7:52:18:a2:66:42:79:
         8b:ab:41:62:22:01:23:ed:1d:19:2f:57:2c:eb:5f:08:72:fa:
         8c:b6:2a:db:62:df:43:53:b1:fb:c1:de:2a:31:98:a2:e7:74:
         54:05:c6:6f:9c:cd:7d:c5:db:20:63:66:91:10:cb:be:48:b4:
         56:50:31:23:b5:0d:cb:6d:cd:ed:fd:8d:5f:8a:fb:45:00:96:
         8f:f0:df:30:87:8c:99:16:d9:29:97:82:97:06:82:05:93:18:
         96:f2:51:a2:f2:05:56:38:38:e5:4d:a8:0c:b4:98:44:8b:ae:
         94:96:a5:ec:16:b9:1b:37:b1:12:f6:4f:c7:23:23:fb:8d:83:
         af:03:1f:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXBdSkWDRdS7pxKMvAl+YIQDwScEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFDNUM2NDlEMDEzOThCNTQ3OTMxMTc1MEI5RDczRTU1
MDAwRjBDQTAeFw0yNDA0MDQxNjUzNTJaFw0yNTA0MDMxNjU4NTJaMDMxMTAvBgNV
BAMTKDZBRUVFRDRENkQwOEEwRTZGMUVFRjdFQjk2NTMwOTZBMDU2NTU3QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmusOxWqavhFG6+Lr3C1g/Eg9P
5CvZQGrWSXkuMhx3AoH8GZKphCiBLKzLtX8trFsQuidgI3A+zJTvIUr+IUvGRX4G
Gv1nJzfGxuPOnH9K0mjLVTySjACDhFf+Q/BNCzzRZja8ZjD03UDJdF2CHgSc0GsA
ObvHnmUWghkVMbipX6GZcWwgquYIC6nxU0CgJaNhy1JCEw+L50HOuNt5HXMWA+aU
IA09fCW94ZiP4ilXvpCWfhBO09TX0GLo8g4cMiwGDph7K8l4nCwDlWsuZGnRkRfG
n5SCf9NaPqXNgk+2a7T0ycR7bKzGRtfvNsYRou/v8d7ZmXU9YgUgcoxNyN0bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUau7tTW0IoObx7vfrllMJagVlV7wwHwYDVR0j
BBgwFoAUisXGSdATmLVHkxF1C51z5VAA8MowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC84QUM1QzY0OUQwMTM5OEI1NDc5MzExNzUwQjlENzNFNTUwMDBGMENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBQzVDNjQ5RDAxMzk4QjU0
NzkzMTE3NTBCOUQ3M0U1NTAwMEYwQ0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9AwwDQYJKoZIhvcNAQELBQADggEBAL43u5+m
tVR9rV3fMD2z4eute9WuotKEVDLCZGIHZVYnRDzWho5FKwwVhHMSLeY6V6iyOG5U
P3cY+jkG/DJNguRF1SbbvGaX4ZDyWyIX4Bp4pEuXnid+UgV5AiGmXhAvqBMecFgX
2c641CVQX4OYOtMGhUvcSOSw51IYomZCeYurQWIiASPtHRkvVyzrXwhy+oy2Ktti
30NTsfvB3ioxmKLndFQFxm+czX3F2yBjZpEQy75ItFZQMSO1Dcttze39jV+K+0UA
lo/w3zCHjJkW2SmXgpcGggWTGJbyUaLyBVY4OOVNqAy0mESLrpSWpewWuRs3sRL2
T8cjI/uNg68DHxo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org