Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa
File:                     3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          6bq90Hvb18wpixCiYFXcyWO+AUc+3eOA5PflaD1wCmg=
Subject key identifier:   9D:B2:E5:26:73:AE:09:60:C7:35:21:43:07:33:E7:1A:6D:EC:46:CA
Certificate issuer:       /CN=8AC5C649D01398B5479311750B9D73E55000F0CA
Certificate serial:       1E6376F2B5D80C35CF4E942BBFE951265B0E2672
Authority key identifier: 8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 16:58:21 +0000
ROA not before:           Thu 04 Apr 2024 16:53:21 +0000
ROA not after:            Thu 03 Apr 2025 16:58:21 +0000
asID:                     264281
IP address blocks:        170.244.14.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:76:f2:b5:d8:0c:35:cf:4e:94:2b:bf:e9:51:26:5b:0e:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC5C649D01398B5479311750B9D73E55000F0CA
        Validity
            Not Before: Apr  4 16:53:21 2024 GMT
            Not After : Apr  3 16:58:21 2025 GMT
        Subject: CN=9DB2E52673AE0960C73521430733E71A6DEC46CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:57:64:c1:72:61:0e:a6:92:4f:25:a0:00:
                    f7:22:08:82:bc:4b:2b:eb:8f:39:d8:80:8e:ed:0a:
                    08:b2:20:18:98:ce:62:5c:d6:c5:66:04:8b:14:80:
                    b1:52:01:cc:e4:00:67:65:f2:a4:05:9b:fb:09:2b:
                    3d:ca:48:3c:94:d8:38:f0:75:a9:71:4c:f1:ad:35:
                    7c:0d:9d:b1:85:10:11:6a:75:b2:90:e5:8c:bf:a8:
                    fa:a3:8b:a1:12:02:30:d4:fa:72:0f:00:6a:e6:f2:
                    ab:9d:05:ad:0e:6b:87:2c:d6:ea:75:50:05:05:82:
                    a7:56:f0:82:17:b7:b6:89:1f:48:cb:dd:c8:d4:76:
                    06:cf:e4:c9:7d:de:94:91:f6:2b:98:b1:0c:e2:d2:
                    e4:9f:2c:c2:bf:ab:fa:f1:77:f3:1c:68:4a:c8:0b:
                    af:88:10:33:8a:eb:a7:bd:b9:53:ca:10:80:46:5e:
                    79:4b:eb:f8:5b:3e:86:d9:2d:e2:76:ed:6c:3b:a5:
                    26:13:27:a9:4a:66:e6:1b:e3:9b:0a:dc:57:fe:dc:
                    55:0f:62:e8:ae:2b:7d:70:76:6f:e2:d4:b4:8c:c8:
                    48:1d:e9:e4:8f:61:35:94:be:00:4e:4d:89:ed:6b:
                    ee:f5:3e:9e:21:bc:56:e8:4b:6d:64:35:f4:94:4f:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:E5:26:73:AE:09:60:C7:35:21:43:07:33:E7:1A:6D:EC:46:CA
            X509v3 Authority Key Identifier:
                keyid:8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:6b:54:a2:59:62:3c:aa:9e:71:81:bc:7f:5d:81:7b:dc:
         99:c5:ca:56:63:54:13:80:a5:7d:06:b8:f9:26:eb:04:87:40:
         52:d2:b2:98:5b:bc:58:f3:c9:16:cf:d3:97:85:b4:cb:f7:f0:
         d9:03:a1:ed:3d:62:9f:9c:db:da:8b:f0:6d:cd:f9:b5:d9:1f:
         81:a9:92:ef:ff:7a:53:f4:22:d2:12:8d:e3:bb:69:8f:8b:0e:
         91:31:74:4e:ab:43:77:77:0e:72:7d:78:32:83:f9:38:3f:b1:
         25:56:05:8c:89:23:4b:fd:22:c9:5f:10:9e:ba:02:1b:a6:67:
         6a:c6:b9:b4:78:39:b7:07:9c:19:1b:bc:22:39:93:7f:17:e0:
         89:67:2d:31:5f:5a:19:d9:3e:5d:9b:37:2b:2d:b0:72:c4:9b:
         eb:21:ec:6d:d6:16:be:10:e7:c6:1f:63:c8:a5:63:81:bf:0d:
         48:a4:3b:0b:66:9b:d0:29:f7:0c:b2:16:4d:d4:88:c1:09:09:
         64:17:ba:50:bb:6e:25:7d:85:fe:ad:86:26:4a:af:a6:82:cc:
         be:bc:d6:28:21:76:33:ea:40:a8:07:3d:2e:9b:24:95:1a:54:
         aa:f1:9e:49:d6:0b:d8:69:ee:77:81:a8:29:55:97:e9:17:6d:
         32:5a:04:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHmN28rXYDDXPTpQrv+lRJlsOJnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFDNUM2NDlEMDEzOThCNTQ3OTMxMTc1MEI5RDczRTU1
MDAwRjBDQTAeFw0yNDA0MDQxNjUzMjFaFw0yNTA0MDMxNjU4MjFaMDMxMTAvBgNV
BAMTKDlEQjJFNTI2NzNBRTA5NjBDNzM1MjE0MzA3MzNFNzFBNkRFQzQ2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuFdkwXJhDqaSTyWgAPciCIK8
SyvrjznYgI7tCgiyIBiYzmJc1sVmBIsUgLFSAczkAGdl8qQFm/sJKz3KSDyU2Djw
dalxTPGtNXwNnbGFEBFqdbKQ5Yy/qPqji6ESAjDU+nIPAGrm8qudBa0Oa4cs1up1
UAUFgqdW8IIXt7aJH0jL3cjUdgbP5Ml93pSR9iuYsQzi0uSfLMK/q/rxd/McaErI
C6+IEDOK66e9uVPKEIBGXnlL6/hbPobZLeJ27Ww7pSYTJ6lKZuYb45sK3Ff+3FUP
YuiuK31wdm/i1LSMyEgd6eSPYTWUvgBOTYnta+71Pp4hvFboS21kNfSUTziPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnbLlJnOuCWDHNSFDBzPnGm3sRsowHwYDVR0j
BBgwFoAUisXGSdATmLVHkxF1C51z5VAA8MowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC84QUM1QzY0OUQwMTM5OEI1NDc5MzExNzUwQjlENzNFNTUwMDBGMENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBQzVDNjQ5RDAxMzk4QjU0
NzkzMTE3NTBCOUQ3M0U1NTAwMEYwQ0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq9A4wDQYJKoZIhvcNAQELBQADggEBAKGWa1Si
WWI8qp5xgbx/XYF73JnFylZjVBOApX0GuPkm6wSHQFLSsphbvFjzyRbP05eFtMv3
8NkDoe09Yp+c29qL8G3N+bXZH4Gpku//elP0ItISjeO7aY+LDpExdE6rQ3d3DnJ9
eDKD+Tg/sSVWBYyJI0v9IslfEJ66AhumZ2rGubR4ObcHnBkbvCI5k38X4IlnLTFf
WhnZPl2bNystsHLEm+sh7G3WFr4Q58YfY8ilY4G/DUikOwtmm9Ap9wyyFk3UiMEJ
CWQXulC7biV9hf6thiZKr6aCzL681ighdjPqQKgHPS6bJJUaVKrxnknWC9hp7neB
qClVl+kXbTJaBKw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org