Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32332d3233203d3e20323634323831.roa
File:                     3137302e3233332e3137322e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          TmVnwbFqcgMP7GRR3tO7Mp9dhmQizQkrW+rJm5MBfIc=
Subject key identifier:   0C:6D:50:E5:E2:01:B8:7F:69:9B:5D:ED:DB:75:EB:CE:B9:D4:E5:71
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       1332AB12B73F7EB88EFE7FB964AC2F2D4BC86A3A
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:07:14 +0000
ROA not before:           Sat 08 Apr 2023 14:02:14 +0000
ROA not after:            Sat 06 Apr 2024 14:07:14 +0000
asID:                     264281
IP address blocks:        170.233.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:32:ab:12:b7:3f:7e:b8:8e:fe:7f:b9:64:ac:2f:2d:4b:c8:6a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:02:14 2023 GMT
            Not After : Apr  6 14:07:14 2024 GMT
        Subject: CN=0C6D50E5E201B87F699B5DEDDB75EBCEB9D4E571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:f6:dc:91:e9:2f:d2:3b:18:aa:ba:ea:e5:
                    f2:e2:8b:b8:cf:11:9f:c1:f9:b6:f4:e0:67:90:e7:
                    27:4f:25:35:f7:87:29:fa:ff:bb:6e:cb:e2:68:34:
                    22:f0:ab:fa:b4:75:7e:a5:c8:7d:a3:8d:df:95:e9:
                    14:e2:68:6e:a6:a2:a3:b8:d8:06:19:83:9c:4b:46:
                    b6:94:45:a8:5b:a0:25:c4:32:2d:8c:9f:41:d9:bd:
                    80:9d:97:16:6e:8a:f1:8c:65:19:f4:a5:1d:f5:bc:
                    a1:a1:1f:37:0f:ca:83:e7:26:c1:a4:11:b4:37:1c:
                    8f:3c:37:f0:38:f3:75:02:ee:13:89:6e:0b:6e:32:
                    1f:4d:12:05:c9:72:2b:f3:68:42:ea:28:70:a6:ec:
                    25:bd:55:c1:ca:78:72:dd:65:9c:12:87:52:f7:1c:
                    03:20:c0:9b:a8:80:da:1e:1b:68:df:34:ee:15:04:
                    71:c2:f9:f8:c4:9a:73:de:8d:32:43:a9:ea:65:1e:
                    16:b0:32:49:33:5c:70:b1:d3:c7:9c:0f:05:9b:0e:
                    68:a9:85:4d:e9:23:62:90:55:06:6f:6d:b3:c0:58:
                    57:23:eb:96:bc:88:ab:59:d5:23:76:83:e8:e7:a6:
                    24:46:ce:4a:03:b6:d8:e6:e7:12:a4:2c:e5:f4:18:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:50:E5:E2:01:B8:7F:69:9B:5D:ED:DB:75:EB:CE:B9:D4:E5:71
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:c6:7d:c8:1f:10:de:3b:39:55:5d:b5:3a:a8:c2:00:8a:4b:
         e8:f4:4c:9a:59:44:eb:e8:4f:08:64:42:ae:ef:7f:c5:51:80:
         49:49:cb:4a:7d:13:88:69:b7:19:01:56:a9:52:83:a0:48:dc:
         2f:00:1f:3f:3e:c6:b0:1f:86:e1:b0:31:33:54:f4:97:48:75:
         83:85:b4:55:9d:3a:d6:74:ce:a6:19:bc:b3:5c:5b:7a:3c:4a:
         b9:dd:10:fc:3f:a9:31:e4:7d:21:6c:d4:c0:d2:45:5a:11:13:
         37:d9:1a:2d:ea:bb:0b:90:7f:bb:23:7c:18:14:75:e8:ec:50:
         54:bc:ea:85:08:f0:9d:28:e1:21:6d:75:47:3a:88:f7:ee:c3:
         51:28:e8:24:12:2f:ee:d5:0f:1a:3e:e1:73:51:4e:fe:09:0e:
         51:c8:5d:59:24:53:37:f7:96:5a:4c:bf:5c:b0:d5:26:c1:d7:
         e2:41:e8:3a:d8:69:79:e7:67:2c:e0:2d:c3:0d:cb:50:53:ca:
         b9:45:9f:7b:40:07:c9:5b:ae:16:a5:7f:40:bf:f5:82:82:cc:
         c0:04:82:da:b1:4f:df:fc:4a:0a:1f:28:93:d9:51:ec:b0:ae:
         c0:19:70:69:b1:50:96:81:a2:fb:5a:b9:83:09:63:1a:1b:17:
         89:95:e0:e5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEzKrErc/friO/n+5ZKwvLUvIajowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMyODRCMjk4QkQ4M0IyQ0Q3OTUyNDEwODVBNTEzNDRD
QUFBNjkxNDAeFw0yMzA0MDgxNDAyMTRaFw0yNDA0MDYxNDA3MTRaMDMxMTAvBgNV
BAMTKDBDNkQ1MEU1RTIwMUI4N0Y2OTlCNURFRERCNzVFQkNFQjlENEU1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKPbckekv0jsYqrrq5fLii7jP
EZ/B+bb04GeQ5ydPJTX3hyn6/7tuy+JoNCLwq/q0dX6lyH2jjd+V6RTiaG6moqO4
2AYZg5xLRraURahboCXEMi2Mn0HZvYCdlxZuivGMZRn0pR31vKGhHzcPyoPnJsGk
EbQ3HI88N/A483UC7hOJbgtuMh9NEgXJcivzaELqKHCm7CW9VcHKeHLdZZwSh1L3
HAMgwJuogNoeG2jfNO4VBHHC+fjEmnPejTJDqeplHhawMkkzXHCx08ecDwWbDmip
hU3pI2KQVQZvbbPAWFcj65a8iKtZ1SN2g+jnpiRGzkoDttjm5xKkLOX0GIe1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDG1Q5eIBuH9pm13t23XrzrnU5XEwHwYDVR0j
BBgwFoAUTChLKYvYOyzXlSQQhaUTRMqqaRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC80QzI4NEIyOThCRDgzQjJDRDc5NTI0MTA4NUE1MTM0NENBQUE2OTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDMjg0QjI5OEJEODNCMkNE
Nzk1MjQxMDg1QTUxMzQ0Q0FBQTY5MTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarprDANBgkqhkiG9w0BAQsFAAOCAQEAQsZ9
yB8Q3js5VV21OqjCAIpL6PRMmllE6+hPCGRCru9/xVGASUnLSn0TiGm3GQFWqVKD
oEjcLwAfPz7GsB+G4bAxM1T0l0h1g4W0VZ061nTOphm8s1xbejxKud0Q/D+pMeR9
IWzUwNJFWhETN9kaLeq7C5B/uyN8GBR16OxQVLzqhQjwnSjhIW11RzqI9+7DUSjo
JBIv7tUPGj7hc1FO/gkOUchdWSRTN/eWWky/XLDVJsHX4kHoOthpeednLOAtww3L
UFPKuUWfe0AHyVuuFqV/QL/1goLMwASC2rFP3/xKCh8ok9lR7LCuwBlwabFQloGi
+1q5gwljGhsXiZXg5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org