Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3233203d3e20323634323831.roa
File:                     3137302e3234342e31342e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          6CNCZnrDMlP2VB2rq2wsBpGGk85Q2G4qDfNxIdguobo=
Subject key identifier:   6F:DE:49:A0:71:EE:53:4C:D4:02:92:E7:59:80:55:D7:06:A3:F9:1B
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       62E4B665736C9AFCCCD2E66551321FBB7F96A006
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:07:56 +0000
ROA not before:           Sat 08 Apr 2023 14:02:56 +0000
ROA not after:            Sat 06 Apr 2024 14:07:56 +0000
asID:                     264281
IP address blocks:        170.244.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e4:b6:65:73:6c:9a:fc:cc:d2:e6:65:51:32:1f:bb:7f:96:a0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:02:56 2023 GMT
            Not After : Apr  6 14:07:56 2024 GMT
        Subject: CN=6FDE49A071EE534CD40292E7598055D706A3F91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:f1:38:5f:f6:82:99:02:b4:57:51:76:c8:
                    d2:d3:09:f6:35:cb:de:c7:5e:c6:26:93:07:11:6c:
                    c7:7c:ca:b6:c8:5c:45:ea:2a:be:93:a6:30:54:c8:
                    90:8c:c3:c9:7a:59:e5:11:42:39:99:03:b0:a7:4e:
                    ba:a7:36:db:13:87:3b:cd:98:03:da:be:90:e3:3f:
                    af:7b:d3:6d:a1:41:1b:dd:6d:df:fa:f2:aa:8c:3c:
                    0f:6f:0d:54:1d:72:9f:2f:e4:f7:c7:f8:55:c9:a5:
                    3d:e8:c4:68:7a:4f:7a:42:be:ca:6a:12:60:16:0d:
                    93:0d:13:24:4a:e9:0b:36:b6:b9:d7:5f:d5:92:80:
                    18:6b:91:f8:57:c1:cc:58:2c:36:ef:a7:5e:ec:6f:
                    4c:21:76:39:26:46:42:29:5d:f1:3c:20:e5:71:ca:
                    3e:30:4a:14:88:37:1b:1e:ff:12:df:0b:eb:68:90:
                    e8:71:21:0e:b5:2b:57:4c:c6:61:13:9b:0f:49:53:
                    eb:c8:5d:92:7e:95:0c:01:72:b0:64:7a:8c:10:94:
                    d5:f6:f3:d6:83:29:f5:96:49:11:ae:dd:a1:e0:be:
                    11:88:fb:2d:fd:ad:e3:84:2d:0d:63:0b:1a:e2:4d:
                    00:65:b2:58:ca:0e:2b:32:41:96:01:35:c0:99:5b:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DE:49:A0:71:EE:53:4C:D4:02:92:E7:59:80:55:D7:06:A3:F9:1B
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31342e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:f4:dc:af:7e:aa:47:a6:43:c2:68:c9:d5:54:69:0c:21:
         7c:da:a2:b6:60:bc:9a:50:79:28:6a:36:2e:48:77:db:05:5a:
         95:ce:2b:9f:98:80:b8:95:18:40:2c:d3:54:9c:8d:da:ba:3b:
         47:f8:e3:08:4f:b5:50:63:13:96:c2:79:d6:90:39:86:57:b8:
         97:8f:ab:7f:8e:bc:23:e5:d6:4b:5a:a9:0a:b4:07:50:e2:39:
         78:59:3a:7b:04:eb:33:86:41:4f:92:13:36:58:39:c4:8c:a5:
         1e:90:aa:f1:7e:48:3f:bd:45:cb:68:ee:b9:3f:86:4b:13:e4:
         85:77:b6:3d:44:87:7e:01:0c:a6:db:08:fb:91:a6:41:9b:92:
         2c:80:ee:7e:89:b9:6f:a4:5e:cf:50:8a:10:91:0c:fe:87:36:
         5a:26:92:2e:0f:81:1a:02:d2:bd:c7:9c:9e:f2:d7:89:cb:fd:
         e1:f6:b1:2f:01:8e:9c:65:08:11:17:6f:e3:4f:f1:50:1e:7a:
         cb:7d:30:46:ea:87:31:c8:4b:04:10:a7:78:d1:2f:ae:86:60:
         09:f4:6c:ca:93:be:60:0e:07:f2:19:f0:36:8c:61:d7:af:0b:
         a4:f6:68:ab:e6:55:90:a1:56:e8:bb:2a:2c:60:48:46:0d:c8:
         7d:13:d9:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYuS2ZXNsmvzM0uZlUTIfu3+WoAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMyODRCMjk4QkQ4M0IyQ0Q3OTUyNDEwODVBNTEzNDRD
QUFBNjkxNDAeFw0yMzA0MDgxNDAyNTZaFw0yNDA0MDYxNDA3NTZaMDMxMTAvBgNV
BAMTKDZGREU0OUEwNzFFRTUzNENENDAyOTJFNzU5ODA1NUQ3MDZBM0Y5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSo/E4X/aCmQK0V1F2yNLTCfY1
y97HXsYmkwcRbMd8yrbIXEXqKr6TpjBUyJCMw8l6WeURQjmZA7CnTrqnNtsThzvN
mAPavpDjP697022hQRvdbd/68qqMPA9vDVQdcp8v5PfH+FXJpT3oxGh6T3pCvspq
EmAWDZMNEyRK6Qs2trnXX9WSgBhrkfhXwcxYLDbvp17sb0whdjkmRkIpXfE8IOVx
yj4wShSINxse/xLfC+tokOhxIQ61K1dMxmETmw9JU+vIXZJ+lQwBcrBkeowQlNX2
89aDKfWWSRGu3aHgvhGI+y39reOELQ1jCxriTQBlsljKDisyQZYBNcCZW5bzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb95JoHHuU0zUApLnWYBV1waj+RswHwYDVR0j
BBgwFoAUTChLKYvYOyzXlSQQhaUTRMqqaRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC80QzI4NEIyOThCRDgzQjJDRDc5NTI0MTA4NUE1MTM0NENBQUE2OTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDMjg0QjI5OEJEODNCMkNE
Nzk1MjQxMDg1QTUxMzQ0Q0FBQTY5MTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq9A4wDQYJKoZIhvcNAQELBQADggEBAKl89Nyv
fqpHpkPCaMnVVGkMIXzaorZgvJpQeShqNi5Id9sFWpXOK5+YgLiVGEAs01Scjdq6
O0f44whPtVBjE5bCedaQOYZXuJePq3+OvCPl1ktaqQq0B1DiOXhZOnsE6zOGQU+S
EzZYOcSMpR6QqvF+SD+9Rcto7rk/hksT5IV3tj1Eh34BDKbbCPuRpkGbkiyA7n6J
uW+kXs9QihCRDP6HNlomki4PgRoC0r3HnJ7y14nL/eH2sS8BjpxlCBEXb+NP8VAe
est9MEbqhzHISwQQp3jRL66GYAn0bMqTvmAOB/IZ8DaMYdevC6T2aKvmVZChVui7
KixgSEYNyH0T2Sg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org