Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          hsQFu85HTD/rDMbFLlzNCruZAxE5p1BtzAcqPgLDSiE=
Subject key identifier:   82:04:25:5B:D5:63:C0:0D:3E:9A:D9:FC:23:9B:3E:EB:A2:2C:62:25
Certificate issuer:       /CN=8AC5C649D01398B5479311750B9D73E55000F0CA
Certificate serial:       2B4E7B03281D0EC16DA6E15A8279105204C122C3
Authority key identifier: 8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 17:00:01 +0000
ROA not before:           Thu 04 Apr 2024 16:55:01 +0000
ROA not after:            Thu 03 Apr 2025 17:00:01 +0000
asID:                     264281
IP address blocks:        170.244.12.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4e:7b:03:28:1d:0e:c1:6d:a6:e1:5a:82:79:10:52:04:c1:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC5C649D01398B5479311750B9D73E55000F0CA
        Validity
            Not Before: Apr  4 16:55:01 2024 GMT
            Not After : Apr  3 17:00:01 2025 GMT
        Subject: CN=8204255BD563C00D3E9AD9FC239B3EEBA22C6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:a2:76:c0:93:f3:e7:9d:e6:35:68:cf:cd:
                    65:d2:ee:d6:66:fa:14:74:9c:4a:86:b8:5b:d2:8b:
                    27:41:6e:07:9a:94:99:b1:82:f4:3b:ae:9f:08:ac:
                    71:7a:fd:a3:75:f0:65:3f:65:1e:89:3a:0c:a8:b1:
                    a4:ff:14:41:bf:30:0f:5a:36:0d:93:0e:f1:50:f1:
                    c7:7a:cd:84:d0:f2:a4:61:e8:d5:1f:68:f3:1b:4e:
                    65:85:96:43:d4:62:8b:56:05:d5:14:88:2d:2f:a9:
                    bc:90:6e:5c:1a:22:74:2f:f2:57:cf:3c:65:2a:86:
                    e5:ed:b8:8d:d6:ad:16:27:5f:86:31:18:9c:f6:7a:
                    2a:95:28:55:47:d9:96:e5:5c:47:71:df:35:4c:ed:
                    2b:3c:09:36:4c:30:ca:f7:28:38:73:3f:6c:c0:2f:
                    aa:70:ee:58:3e:5b:d2:14:01:1e:cf:69:20:a5:40:
                    3a:49:18:d8:46:c4:56:87:a0:42:70:2d:7c:cf:2d:
                    94:b7:d1:19:c4:41:33:e8:8c:19:2e:d4:70:47:12:
                    a4:c7:fe:5a:c2:42:7d:12:14:4c:dc:34:62:bf:66:
                    07:18:c4:a4:30:1f:ad:ca:ca:82:af:c8:37:8b:a0:
                    c6:74:29:6f:8d:0a:4a:29:1c:ca:83:b8:9f:ce:b1:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:25:5B:D5:63:C0:0D:3E:9A:D9:FC:23:9B:3E:EB:A2:2C:62:25
            X509v3 Authority Key Identifier:
                keyid:8A:C5:C6:49:D0:13:98:B5:47:93:11:75:0B:9D:73:E5:50:00:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/8AC5C649D01398B5479311750B9D73E55000F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC5C649D01398B5479311750B9D73E55000F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:53:4d:4a:0a:b1:fd:75:30:61:11:5f:74:a9:39:e8:53:3b:
         0f:d2:b5:50:01:8b:d9:49:f4:cd:91:bf:e7:c4:d1:ee:74:b9:
         91:2b:26:22:88:c1:06:63:33:b3:27:4d:22:a7:87:e6:1e:b6:
         db:62:d7:9b:59:10:4e:93:9b:3e:e7:c0:af:4f:9d:23:21:c8:
         94:08:cc:e9:00:52:3f:df:3f:fa:e7:a4:46:c0:6f:5c:1c:55:
         87:c6:d4:06:29:e5:4c:8b:41:93:3e:4c:f5:43:aa:88:0f:0e:
         ed:5a:20:34:8e:95:6e:2f:8c:6b:7d:95:e1:f1:a1:8f:ea:46:
         7d:c8:2b:2f:8a:ef:66:aa:ef:c8:54:98:9c:d2:74:ce:6e:46:
         a7:ea:f3:cd:42:49:56:fa:78:28:2b:56:74:cf:ac:e8:40:1a:
         0b:ad:1d:af:dd:52:67:8d:61:8d:b9:ad:92:ba:d3:c4:e6:3f:
         f5:52:d7:09:47:14:1e:19:34:c9:a4:6c:9e:d8:09:8e:c7:10:
         51:f9:cf:ab:18:1a:43:52:22:fa:17:d8:8e:94:fc:28:4e:9e:
         a0:ff:59:9f:48:26:2c:c3:18:e7:23:6b:f6:a9:b9:09:2a:12:
         44:7c:71:b8:2f:5e:ae:f5:3d:52:46:85:c1:f1:c2:e9:db:e4:
         8b:00:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org