Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          2jny+u2K/7WvNrKX+9XHK0u/oesZhUFF557fL9UUwe8=
Subject key identifier:   1D:CF:47:6E:A5:5A:95:6F:AF:B9:C6:63:48:F3:EE:C1:90:DF:3C:0D
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       49A93F5EEE1B48532CABECD6379C2539DC592C17
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:07:53 +0000
ROA not before:           Sat 08 Apr 2023 14:02:53 +0000
ROA not after:            Sat 06 Apr 2024 14:07:53 +0000
asID:                     264281
IP address blocks:        170.244.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a9:3f:5e:ee:1b:48:53:2c:ab:ec:d6:37:9c:25:39:dc:59:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:02:53 2023 GMT
            Not After : Apr  6 14:07:53 2024 GMT
        Subject: CN=1DCF476EA55A956FAFB9C66348F3EEC190DF3C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:45:ae:db:ce:59:fe:1c:33:c9:be:9e:17:
                    fe:57:be:72:06:10:7b:6d:c4:20:9c:ed:da:22:76:
                    73:ea:76:c6:98:45:8e:f3:65:60:94:66:58:bb:4d:
                    51:25:0d:82:83:6c:a7:5d:96:7b:e1:1b:99:1f:ff:
                    97:3e:bd:eb:d2:d2:19:f1:0c:0b:0e:99:47:85:67:
                    60:76:4b:f0:f6:ec:7d:61:ff:ac:ba:a5:ed:da:35:
                    c3:bc:77:7f:61:dd:67:a2:17:85:4c:67:e2:eb:10:
                    86:06:1b:c8:2b:a3:67:21:af:c6:02:a5:8c:01:c0:
                    6d:9d:79:0f:80:4d:81:b9:ce:5e:9f:5b:ae:4f:f3:
                    7e:69:d1:db:10:be:a7:51:6c:c4:28:a6:dc:5e:b4:
                    dd:d9:0e:9f:f6:a6:36:e9:92:11:cb:de:16:c0:7e:
                    79:2e:44:21:18:6f:27:7b:e5:27:59:d0:11:dd:05:
                    75:2e:54:52:bf:3b:ad:f7:6a:79:6b:b3:a9:1f:ad:
                    24:61:f0:88:e0:41:97:db:5c:5a:d7:34:63:dc:8b:
                    69:31:ab:ff:7b:2a:59:7c:a1:1c:2f:2f:fd:c8:0c:
                    33:d5:44:63:60:7a:e9:64:a3:57:6a:f5:fe:34:86:
                    76:b8:3e:d3:bd:7c:b0:5b:73:dd:fa:b7:63:cb:5b:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:47:6E:A5:5A:95:6F:AF:B9:C6:63:48:F3:EE:C1:90:DF:3C:0D
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:77:95:90:03:2b:4e:f5:b7:a2:8d:10:c3:43:85:8b:2f:
         56:d0:b4:bc:c6:93:f9:68:40:88:cc:35:78:4e:e1:8b:f5:d4:
         e0:32:23:8c:a6:b1:e4:c3:40:28:13:17:ed:2c:fa:6a:f6:0a:
         c9:25:0b:38:7e:60:4f:56:ae:77:2c:2a:26:93:13:b7:70:e0:
         e6:50:fa:98:ca:d0:92:00:d0:47:5f:f7:4f:ae:dd:11:ff:13:
         1d:74:c6:10:33:51:dd:f0:69:12:37:43:20:ba:77:13:e6:f9:
         c2:c9:c9:54:60:12:c7:d4:73:a0:72:f8:08:16:5f:57:58:d5:
         8e:29:dd:c8:fc:f4:78:a4:88:82:4c:5a:a6:b1:29:86:aa:02:
         1d:ab:29:dd:d6:6b:2c:b4:50:fe:2a:57:d0:b5:17:5d:97:6c:
         47:30:c8:c3:04:c3:b1:0a:4c:7d:d5:21:44:cd:db:b8:12:7e:
         74:eb:8d:f9:7c:22:e2:ec:f6:21:6f:72:59:ae:e5:57:ed:23:
         75:68:e6:71:f9:f3:6c:9f:08:8b:37:95:36:5f:4d:de:53:6a:
         24:6c:84:03:fa:4f:30:12:22:44:33:e1:81:5c:bb:c4:7a:04:
         bb:18:dd:05:82:a6:87:79:87:7c:b6:10:f3:2e:ba:64:a4:1e:
         33:b7:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org