Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3232203d3e20323634323831.roa
File:                     3137302e3233332e3137322e302f32322d3232203d3e20323634323831.roa (raw, json)
Hash identifier:          D1FQZ2XVPivt1gw/VG5S7SpT6/HVia80GJG5Ekftd98=
Subject key identifier:   B5:93:03:C1:36:18:D7:87:31:C1:AC:B2:8F:A5:5E:87:CF:3B:8D:64
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       5BE96C941605710AC3642E2E042934F5A1E03133
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3232203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:07:03 +0000
ROA not before:           Sat 08 Apr 2023 14:02:03 +0000
ROA not after:            Sat 06 Apr 2024 14:07:03 +0000
asID:                     264281
IP address blocks:        170.233.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e9:6c:94:16:05:71:0a:c3:64:2e:2e:04:29:34:f5:a1:e0:31:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:02:03 2023 GMT
            Not After : Apr  6 14:07:03 2024 GMT
        Subject: CN=B59303C13618D78731C1ACB28FA55E87CF3B8D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:0f:e3:38:ae:31:a0:14:d5:b0:d3:a9:1f:
                    c8:20:34:28:9c:83:eb:67:ae:fe:f1:46:22:5e:08:
                    6e:7b:77:0a:53:46:1c:31:f5:ca:49:be:b7:a0:64:
                    f0:d8:12:4e:d8:1e:b9:18:65:f7:7c:da:59:91:92:
                    c2:64:0d:93:67:56:ef:5c:2a:02:57:61:9b:b9:17:
                    3f:3a:c2:90:9f:36:59:1a:40:49:5a:3f:1d:4a:5e:
                    b8:da:69:2f:14:0e:9c:d2:c9:4b:70:2c:b2:78:e5:
                    9e:18:7c:ab:ed:c7:90:33:b0:a7:ff:15:86:25:f1:
                    8c:5e:22:d2:f2:b9:54:83:15:80:6a:98:2f:d1:53:
                    c5:55:2d:18:6c:c2:02:75:60:d5:bc:c7:e3:9d:b1:
                    9a:4f:ac:df:e9:9d:32:ee:b1:26:5b:14:d0:e3:9a:
                    40:e9:8e:7e:32:19:79:2a:2f:58:50:ec:b0:f1:ae:
                    e7:8d:b5:eb:38:2a:13:14:2e:9b:0c:36:5d:d1:f0:
                    e3:fe:b1:85:29:94:86:04:3f:b4:ad:1c:e1:56:b1:
                    af:2f:2f:d1:7e:94:e7:7c:09:74:04:af:43:9e:b2:
                    9c:5a:b0:3b:22:81:38:c2:68:b0:12:21:dd:bc:38:
                    19:d4:34:9a:34:f2:93:7c:b7:db:19:fa:92:96:b3:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:03:C1:36:18:D7:87:31:C1:AC:B2:8F:A5:5E:87:CF:3B:8D:64
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3232203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:22:7e:b2:a6:76:4f:59:f3:b7:a1:31:89:3b:26:69:02:1b:
         32:1b:ec:eb:7b:ca:ae:6a:b9:f0:67:2e:2b:93:99:be:b0:b4:
         61:64:28:90:d8:d6:b2:9a:1b:4e:9b:46:18:76:f0:9d:e2:a0:
         fc:3e:22:08:b2:49:5c:e7:c0:a9:48:e1:4b:b5:a6:77:d6:46:
         0e:72:ce:d1:cf:30:db:b0:19:29:e8:1b:53:8c:2b:75:39:5a:
         17:e6:fb:e5:40:5e:6a:cb:91:86:f0:90:50:1e:a0:29:a2:d8:
         42:c9:5e:0a:3a:73:45:42:5f:97:07:97:1a:da:e4:02:66:2f:
         87:b2:bc:c0:67:a3:b5:03:6d:15:20:13:2e:ef:60:8f:0a:80:
         b8:0c:5c:11:86:48:92:29:eb:e9:4e:81:8d:47:b0:d9:cd:0a:
         8c:c2:94:3b:ac:af:82:3a:c3:01:7f:50:d8:d4:0a:0a:6d:01:
         a1:e5:66:4c:c2:4f:3f:5d:28:8f:a5:76:01:34:aa:5c:88:45:
         51:65:86:40:c0:24:4b:ea:91:c9:34:3b:54:65:e7:29:ec:e2:
         f8:4a:de:6f:ac:c7:cd:4d:05:8e:21:7a:9a:d1:73:26:19:ce:
         f4:ba:42:67:58:b8:ac:23:42:23:26:01:fc:79:7d:97:42:ab:
         00:a2:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org