Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
File:                     3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          QpimOc9Ur+3am8NzmUbbKUw6wwnaFzFeTc0XHNLRko4=
Subject key identifier:   F4:F6:9D:26:4F:49:BE:1F:3C:62:30:7A:40:30:B4:6A:34:D2:0A:AD
Certificate issuer:       /CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
Certificate serial:       5F64CAF3A8C641FE1F05602A12AEB00B7CB8994A
Authority key identifier: 15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 15:25:20 +0000
ROA not before:           Thu 04 Apr 2024 15:20:20 +0000
ROA not after:            Thu 03 Apr 2025 15:25:20 +0000
asID:                     264281
IP address blocks:        170.233.172.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:ca:f3:a8:c6:41:fe:1f:05:60:2a:12:ae:b0:0b:7c:b8:99:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
        Validity
            Not Before: Apr  4 15:20:20 2024 GMT
            Not After : Apr  3 15:25:20 2025 GMT
        Subject: CN=F4F69D264F49BE1F3C62307A4030B46A34D20AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:8a:8f:60:96:ba:23:be:43:71:ff:9d:74:
                    46:c9:68:91:64:49:5e:62:79:0b:1b:85:07:a2:9d:
                    30:53:de:ff:b7:d5:7b:54:1a:0f:ea:35:76:d6:8a:
                    f3:dd:d7:49:14:c4:a1:0b:e5:51:ff:08:62:a4:46:
                    4b:9e:a7:0e:10:58:14:92:cb:95:c3:7d:c0:98:ff:
                    ce:2c:27:fe:16:c2:3c:41:15:43:98:3a:e7:8b:67:
                    98:4b:5a:79:89:a7:b1:12:25:46:72:4c:58:56:ba:
                    f8:04:56:46:39:f5:9f:4a:e0:87:dd:b2:bf:e8:11:
                    0d:b2:96:3a:df:11:75:73:02:8c:35:a0:f7:7d:ca:
                    a3:ce:c3:da:8b:80:74:70:1b:15:93:d1:9a:d8:c3:
                    20:02:0e:a6:47:37:7c:52:72:38:e2:42:08:1f:7a:
                    84:08:b4:ce:44:01:64:01:02:35:e9:fd:0d:0d:0c:
                    c4:64:a8:f2:90:6b:da:e2:11:e7:33:dd:92:ef:eb:
                    a7:8e:87:dc:29:37:62:4d:c1:08:16:19:c9:fb:4a:
                    1f:ed:fc:7e:fa:9a:a8:58:e6:b9:53:ae:73:a6:76:
                    27:2d:58:24:b1:5a:be:ed:c6:c9:c3:7f:6b:fc:b7:
                    02:cb:93:bd:25:6a:15:e4:24:1b:a3:b6:26:18:cb:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:9D:26:4F:49:BE:1F:3C:62:30:7A:40:30:B4:6A:34:D2:0A:AD
            X509v3 Authority Key Identifier:
                keyid:15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:b8:ac:2d:db:4e:b9:34:5d:81:f3:f3:8b:e4:84:ea:87:
         e2:e9:6b:27:42:27:25:55:b4:c4:ef:7b:cd:1d:7a:72:d6:d4:
         e8:79:5f:41:90:cb:4e:64:65:bf:0a:c7:2b:d6:20:8d:5f:60:
         f2:dc:17:3d:91:6a:ef:4f:e1:f0:52:33:fd:5e:9a:2d:59:5a:
         47:95:79:6d:09:a6:b5:a9:48:96:29:61:2f:f1:4a:d2:63:d0:
         74:36:e0:57:3a:ce:ec:f0:4c:9f:c6:32:71:7a:7c:e9:e5:b6:
         f0:ab:78:04:0f:3c:d1:9b:f8:98:e0:76:16:bf:37:2b:41:29:
         ac:88:d7:d9:b5:d6:a2:2c:3a:50:fa:0f:27:7a:76:a7:11:74:
         3a:55:20:e4:d1:ec:2d:01:c2:fb:35:40:8c:73:8c:e9:94:3e:
         1a:c7:80:86:e5:51:17:1d:d6:3a:bd:e6:05:7c:14:87:6b:9a:
         4d:28:09:98:85:32:99:ea:d4:0d:59:eb:d6:a3:71:24:3d:22:
         a7:e2:ed:95:9d:0a:de:f7:df:52:bf:5a:a3:b2:3f:de:e7:b6:
         86:e9:44:25:d2:ec:23:de:8a:61:9d:41:f1:2e:94:fd:7d:73:
         b3:48:63:d0:52:1a:52:ec:ae:f4:e1:ce:16:cb:37:b8:13:e2:
         8a:e8:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org