Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137342e302f32332d3233203d3e20323634323831.roa
File:                     3137302e3233332e3137342e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          EZhs/bkeBvjU0knVcw5jx/ZAAqxlumfcx1oX4XlncIw=
Subject key identifier:   63:30:AC:D6:ED:6B:DB:11:14:D5:70:1B:BB:47:F1:45:80:D8:95:9F
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       39FD4B4244CF29997F44EC308D09D74ABB017CA8
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137342e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:07:18 +0000
ROA not before:           Sat 08 Apr 2023 14:02:18 +0000
ROA not after:            Sat 06 Apr 2024 14:07:18 +0000
asID:                     264281
IP address blocks:        170.233.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fd:4b:42:44:cf:29:99:7f:44:ec:30:8d:09:d7:4a:bb:01:7c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:02:18 2023 GMT
            Not After : Apr  6 14:07:18 2024 GMT
        Subject: CN=6330ACD6ED6BDB1114D5701BBB47F14580D8959F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:5f:da:a3:47:1e:c6:09:81:c7:54:61:eb:
                    1d:7a:11:3c:13:68:26:7e:c7:82:2b:8d:ce:3b:81:
                    56:7d:d5:fa:f4:79:8f:d2:f6:8d:e1:b0:0f:58:4d:
                    56:b1:db:27:5f:b1:31:c9:46:bf:89:46:7c:db:5c:
                    7b:78:be:98:58:91:8e:d8:4e:ea:f0:0e:c9:4f:97:
                    58:cd:d2:99:d2:32:d3:76:79:a4:3d:1a:6e:df:24:
                    5a:01:bb:be:a3:18:36:1a:29:59:f7:ae:05:eb:7f:
                    ef:df:a5:c5:51:1b:ef:16:71:b1:eb:fe:b4:96:37:
                    f1:8a:23:f4:10:db:6d:b2:34:c6:d3:84:4c:ba:43:
                    94:63:a7:ba:0e:c1:a3:24:6e:27:b8:b8:ab:d3:09:
                    8c:40:6b:0b:47:e9:1a:eb:6c:05:33:3c:17:b8:6d:
                    af:cb:71:31:16:3b:a1:64:e5:41:56:6a:57:4d:1f:
                    2b:f6:8e:ed:ad:9e:bf:e7:b1:9f:b5:02:c3:cc:79:
                    c3:45:a8:c9:68:db:a6:86:92:1b:1a:f2:64:ab:b6:
                    78:20:8b:41:be:46:d4:b5:6e:b9:2e:4b:7a:59:cd:
                    88:32:9e:c4:19:5a:34:5a:fc:7c:7a:ae:28:41:50:
                    52:bc:47:57:a8:f1:51:17:b3:b0:87:d8:ee:26:49:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:AC:D6:ED:6B:DB:11:14:D5:70:1B:BB:47:F1:45:80:D8:95:9F
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137342e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:3c:ee:cb:a2:12:97:c6:95:bb:96:0f:13:f8:e4:70:ea:
         08:22:62:8b:15:ca:5a:e4:d7:ad:28:a2:8f:03:cb:7e:e1:1b:
         20:ba:5a:32:1d:45:86:ab:c1:92:ec:54:66:b1:cf:31:f3:1c:
         7e:24:ef:21:f8:d6:36:3d:7a:c7:35:e2:6c:56:46:f9:c0:6d:
         45:5a:f4:41:2c:65:60:a8:80:71:54:18:7a:7e:1e:7a:76:a7:
         65:b0:b5:e7:67:4d:2b:4b:73:84:cb:c5:6d:9f:17:8a:4f:ee:
         47:9d:85:2e:46:e9:34:d4:24:1b:f2:30:e7:f2:fd:3f:b6:db:
         e1:ea:34:94:58:99:12:02:94:1d:04:15:b9:df:79:aa:c0:4f:
         f5:46:65:da:db:0d:71:34:50:db:f1:51:40:05:27:31:19:7a:
         75:81:85:d1:c6:a6:9a:9f:56:36:d2:54:2f:82:4d:c0:96:ed:
         49:b1:a9:7d:82:fb:33:ef:5a:c0:37:12:6c:52:f6:1f:23:f5:
         20:27:9c:32:f4:b4:47:83:74:af:1a:a5:18:e7:40:55:83:b4:
         4f:23:8a:46:f3:02:53:29:a5:97:b9:9b:db:bf:bc:be:3c:5c:
         d3:a8:76:aa:42:2e:d5:d4:d7:52:cb:98:61:28:45:72:d4:45:
         ee:4f:92:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOf1LQkTPKZl/ROwwjQnXSrsBfKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMyODRCMjk4QkQ4M0IyQ0Q3OTUyNDEwODVBNTEzNDRD
QUFBNjkxNDAeFw0yMzA0MDgxNDAyMThaFw0yNDA0MDYxNDA3MThaMDMxMTAvBgNV
BAMTKDYzMzBBQ0Q2RUQ2QkRCMTExNEQ1NzAxQkJCNDdGMTQ1ODBEODk1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIl/ao0cexgmBx1Rh6x16ETwT
aCZ+x4Irjc47gVZ91fr0eY/S9o3hsA9YTVax2ydfsTHJRr+JRnzbXHt4vphYkY7Y
TurwDslPl1jN0pnSMtN2eaQ9Gm7fJFoBu76jGDYaKVn3rgXrf+/fpcVRG+8WcbHr
/rSWN/GKI/QQ222yNMbThEy6Q5Rjp7oOwaMkbie4uKvTCYxAawtH6RrrbAUzPBe4
ba/LcTEWO6Fk5UFWaldNHyv2ju2tnr/nsZ+1AsPMecNFqMlo26aGkhsa8mSrtngg
i0G+RtS1brkuS3pZzYgynsQZWjRa/Hx6rihBUFK8R1eo8VEXs7CH2O4mSe9TAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYzCs1u1r2xEU1XAbu0fxRYDYlZ8wHwYDVR0j
BBgwFoAUTChLKYvYOyzXlSQQhaUTRMqqaRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC80QzI4NEIyOThCRDgzQjJDRDc5NTI0MTA4NUE1MTM0NENBQUE2OTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDMjg0QjI5OEJEODNCMkNE
Nzk1MjQxMDg1QTUxMzQ0Q0FBQTY5MTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarprjANBgkqhkiG9w0BAQsFAAOCAQEAJ6o8
7suiEpfGlbuWDxP45HDqCCJiixXKWuTXrSiijwPLfuEbILpaMh1FhqvBkuxUZrHP
MfMcfiTvIfjWNj16xzXibFZG+cBtRVr0QSxlYKiAcVQYen4eenanZbC152dNK0tz
hMvFbZ8Xik/uR52FLkbpNNQkG/Iw5/L9P7bb4eo0lFiZEgKUHQQVud95qsBP9UZl
2tsNcTRQ2/FRQAUnMRl6dYGF0cammp9WNtJUL4JNwJbtSbGpfYL7M+9awDcSbFL2
HyP1ICecMvS0R4N0rxqlGOdAVYO0TyOKRvMCUymll7mb27+8vjxc06h2qkIu1dTX
UsuYYShFctRF7k+Shw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org