Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39382e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          fow3vDBES3DUurQcwuX6sGM5qqCoFm7eK/Luh3qPkyU=
Subject key identifier:   44:4F:BD:9A:76:00:65:42:45:E3:E9:95:E0:96:6A:8B:90:69:61:1D
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       2F98A86B786B4F60F45408A53DB82483D6B3658F
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:14 +0000
ROA not before:           Wed 10 Apr 2024 19:15:14 +0000
ROA not after:            Wed 09 Apr 2025 19:20:14 +0000
asID:                     61748
IP address blocks:        170.245.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:98:a8:6b:78:6b:4f:60:f4:54:08:a5:3d:b8:24:83:d6:b3:65:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:15:14 2024 GMT
            Not After : Apr  9 19:20:14 2025 GMT
        Subject: CN=444FBD9A7600654245E3E995E0966A8B9069611D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:ce:3f:a9:f1:58:50:de:f5:64:d4:37:d9:
                    0a:3d:ea:ad:77:ba:24:4a:1f:9f:a8:4a:3f:2a:30:
                    f0:49:b6:1c:d2:61:23:3b:db:96:5e:81:07:64:23:
                    61:89:b0:33:ce:e3:92:a8:0f:86:dc:56:27:31:f4:
                    89:77:80:05:44:d2:c4:c0:41:10:b9:1f:ab:81:10:
                    ac:32:ff:47:a9:53:dc:3c:22:84:5e:d5:ab:bc:f3:
                    4f:79:e6:b8:47:6d:95:b6:91:41:ea:53:93:4f:d2:
                    77:b3:6d:31:80:d7:69:68:b7:d2:7d:cf:8d:f0:8e:
                    71:f0:db:43:01:7c:c6:97:ce:fb:1e:a0:ce:cb:22:
                    16:bc:e2:3c:3f:69:4e:5c:6e:07:ca:2c:8f:76:0e:
                    a0:27:ed:f3:fd:c8:a9:81:a5:75:ec:0f:21:c6:c3:
                    f3:1d:87:4e:84:61:bd:bd:ad:9f:9c:7d:64:52:65:
                    d1:65:47:11:58:0f:c6:8e:09:f4:9f:00:c0:4d:bd:
                    f5:a4:32:55:85:8c:9b:ba:23:58:ff:65:33:48:3c:
                    18:3d:f6:bd:4e:26:17:b6:d1:02:a0:14:23:09:2e:
                    60:9a:0a:15:87:75:2e:76:d7:81:81:bb:71:7e:1b:
                    16:a4:5b:65:8a:61:a9:46:6f:96:37:61:d8:9e:c1:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4F:BD:9A:76:00:65:42:45:E3:E9:95:E0:96:6A:8B:90:69:61:1D
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:85:c5:be:5e:3f:43:5a:a0:d1:af:cc:da:75:7f:34:a1:78:
         23:00:30:8a:71:08:b6:f3:af:65:8e:5c:58:bc:39:9a:18:ff:
         35:53:63:43:41:a9:8e:8f:40:fa:4b:14:c4:cf:1b:ea:4e:1e:
         bb:f8:a8:cf:bf:bb:ee:09:21:a9:c5:7f:51:f6:d7:fe:56:e3:
         63:4a:ff:b8:1a:87:8d:8e:ab:68:a8:01:04:0e:79:2d:8e:dd:
         3e:e3:66:b1:ea:83:d5:e5:a6:33:d8:32:c9:78:61:43:a1:8d:
         6a:42:3d:ca:17:c4:3c:74:74:4b:f5:1a:77:19:8c:55:dc:38:
         1e:13:c8:16:82:ae:b7:8b:9e:e1:59:ba:40:c6:07:2d:ef:2b:
         f9:f4:c5:73:5b:2d:c0:a3:b7:f4:84:eb:4c:46:13:cf:7d:55:
         da:db:86:ec:87:57:2e:a1:7d:9f:82:6a:2c:41:f1:a8:93:0f:
         23:c1:f2:c8:13:fc:71:d8:24:19:53:87:eb:b3:a5:08:19:5a:
         02:a5:2d:6e:b6:1e:33:96:5c:94:3b:2e:81:72:21:f4:ec:48:
         61:50:66:a1:3c:0a:be:3c:80:6a:9a:33:9e:d5:31:74:47:04:
         6c:44:8c:66:fa:9f:db:a6:1c:93:44:af:ab:c4:58:46:34:05:
         7c:4f:47:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL5ioa3hrT2D0VAilPbgkg9azZY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ4M0QyODA1RjI5NjZBMTNBMUZGN0UxMzA5MDdCNzQ0
M0JFN0ZCNjAeFw0yNDA0MTAxOTE1MTRaFw0yNTA0MDkxOTIwMTRaMDMxMTAvBgNV
BAMTKDQ0NEZCRDlBNzYwMDY1NDI0NUUzRTk5NUUwOTY2QThCOTA2OTYxMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB284/qfFYUN71ZNQ32Qo96q13
uiRKH5+oSj8qMPBJthzSYSM725ZegQdkI2GJsDPO45KoD4bcVicx9Il3gAVE0sTA
QRC5H6uBEKwy/0epU9w8IoRe1au880955rhHbZW2kUHqU5NP0nezbTGA12lot9J9
z43wjnHw20MBfMaXzvseoM7LIha84jw/aU5cbgfKLI92DqAn7fP9yKmBpXXsDyHG
w/Mdh06EYb29rZ+cfWRSZdFlRxFYD8aOCfSfAMBNvfWkMlWFjJu6I1j/ZTNIPBg9
9r1OJhe20QKgFCMJLmCaChWHdS5214GBu3F+GxakW2WKYalGb5Y3YdiewSlfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURE+9mnYAZUJF4+mV4JZqi5BpYR0wHwYDVR0j
BBgwFoAUJIPSgF8pZqE6H/fhMJB7dEO+f7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh
aEMvMS8yNDgzRDI4MDVGMjk2NkExM0ExRkY3RTEzMDkwN0I3NDQzQkU3RkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0ODNEMjgwNUYyOTY2QTEz
QTFGRjdFMTMwOTA3Qjc0NDNCRTdGQjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzEv
MzEzNzMwMmUzMjM0MzUyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqvViMA0GCSqGSIb3DQEBCwUAA4IBAQAxhcW+Xj9D
WqDRr8zadX80oXgjADCKcQi2869ljlxYvDmaGP81U2NDQamOj0D6SxTEzxvqTh67
+KjPv7vuCSGpxX9R9tf+VuNjSv+4GoeNjqtoqAEEDnktjt0+42ax6oPV5aYz2DLJ
eGFDoY1qQj3KF8Q8dHRL9Rp3GYxV3DgeE8gWgq63i57hWbpAxgct7yv59MVzWy3A
o7f0hOtMRhPPfVXa24bsh1cuoX2fgmosQfGokw8jwfLIE/xx2CQZU4frs6UIGVoC
pS1uth4zllyUOy6BciH07EhhUGahPAq+PIBqmjOe1TF0RwRsRIxm+p/bphyTRK+r
xFhGNAV8T0eE
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org