Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa (raw, json)
Hash identifier:          BKbXc9Zf7bvk7p3vlrZesQKmMHWXwGHDmLJfO2Z99a0=
Subject key identifier:   85:BA:C0:0D:CF:0E:EA:B1:B0:8A:21:9A:DB:DE:59:D5:99:3A:FB:93
Certificate issuer:       /CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
Certificate serial:       2F1D36300A9B8877D0692AC4DB187C69E8A60C52
Authority key identifier: 15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 16:58:53 +0000
ROA not before:           Thu 04 Apr 2024 16:53:53 +0000
ROA not after:            Thu 03 Apr 2025 16:58:53 +0000
asID:                     264281
IP address blocks:        170.244.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1d:36:30:0a:9b:88:77:d0:69:2a:c4:db:18:7c:69:e8:a6:0c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
        Validity
            Not Before: Apr  4 16:53:53 2024 GMT
            Not After : Apr  3 16:58:53 2025 GMT
        Subject: CN=85BAC00DCF0EEAB1B08A219ADBDE59D5993AFB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:f6:b8:9f:40:64:0f:76:ba:97:47:f3:76:
                    ab:97:5d:83:3c:ef:8e:73:c4:85:03:02:4a:8e:f9:
                    64:6d:a3:4f:32:55:e9:05:94:80:8b:f7:7b:0d:d8:
                    4a:bf:46:cc:19:a0:84:43:a2:78:fe:d7:31:f6:fd:
                    84:b3:f5:c7:dd:6c:bc:44:58:0a:14:81:da:6f:27:
                    d2:52:a3:d5:55:96:ba:10:86:87:9b:ac:27:68:cd:
                    50:6f:66:46:e7:05:6c:c4:cd:92:e6:b1:e7:ac:b8:
                    16:49:00:f1:54:8c:d1:71:f6:97:d1:f7:2d:4e:0f:
                    11:c5:3c:38:b8:55:c6:27:d6:e6:84:84:00:94:45:
                    97:15:7f:f6:64:fd:da:8c:e4:67:99:41:cf:b1:28:
                    9a:c7:7b:c9:cf:bd:71:82:27:28:8d:ec:85:6e:a7:
                    21:16:20:c6:d6:06:96:27:f6:a8:87:54:50:7a:09:
                    26:71:12:16:86:88:6f:a1:26:e5:ac:7a:5b:99:a1:
                    a7:e8:3d:79:b8:22:5c:f1:80:f1:c2:32:96:f0:88:
                    5b:97:fd:a8:ed:43:81:de:84:2e:0a:2e:42:b0:c4:
                    af:79:35:96:cc:3c:7d:fa:9c:b4:ff:b1:a3:d3:17:
                    fc:ff:a0:3c:48:9b:bd:b7:20:c1:9b:af:09:d3:e4:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:C0:0D:CF:0E:EA:B1:B0:8A:21:9A:DB:DE:59:D5:99:3A:FB:93
            X509v3 Authority Key Identifier:
                keyid:15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:e2:61:49:9a:01:14:db:a7:1e:bb:7f:e6:09:79:32:1c:
         dc:2a:4e:b4:4f:b8:15:ad:68:60:fd:10:1c:4e:92:a9:f1:75:
         1e:d8:76:34:db:df:32:7b:0a:a9:69:ca:60:d4:5d:6a:24:e1:
         1e:e8:12:04:48:37:63:b4:a4:42:34:c0:13:96:21:99:55:f7:
         b0:36:8f:31:14:d4:30:70:b4:c3:c5:ee:54:ea:39:8c:43:52:
         71:d3:99:d3:94:3c:9f:c3:f3:3e:1a:f8:61:7e:1a:e6:20:37:
         19:02:b6:bf:b2:05:fb:28:56:4a:5e:a5:a6:7e:ed:ff:ad:5b:
         8c:db:8d:f6:db:b0:80:53:50:f3:7b:cd:9c:76:fb:f0:b0:74:
         32:57:2d:f9:19:3f:2a:25:3c:22:d7:c7:b8:0b:41:09:08:68:
         de:39:7c:9e:92:66:61:c9:90:aa:97:04:8a:4d:b2:b8:f3:b0:
         d5:ab:27:c6:7d:85:05:15:27:3e:dc:72:f7:5d:42:1d:95:c0:
         1f:cb:63:58:bd:77:9e:83:6c:e6:98:80:df:a0:4b:0e:e3:de:
         fa:2d:6e:52:d2:02:28:1f:44:c2:3e:6d:98:0c:91:f3:ae:f9:
         2e:f9:8d:d0:72:8a:c0:61:8b:7e:81:9e:60:19:c6:1c:79:8f:
         ff:a2:18:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULx02MAqbiHfQaSrE2xh8aeimDFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDJDRDNEMkY1QTREODZEODQ2OTg1NjlGN0Y4MkQw
OTNFREU1NDAeFw0yNDA0MDQxNjUzNTNaFw0yNTA0MDMxNjU4NTNaMDMxMTAvBgNV
BAMTKDg1QkFDMDBEQ0YwRUVBQjFCMDhBMjE5QURCREU1OUQ1OTkzQUZCOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUova4n0BkD3a6l0fzdquXXYM8
745zxIUDAkqO+WRto08yVekFlICL93sN2Eq/RswZoIRDonj+1zH2/YSz9cfdbLxE
WAoUgdpvJ9JSo9VVlroQhoebrCdozVBvZkbnBWzEzZLmseesuBZJAPFUjNFx9pfR
9y1ODxHFPDi4VcYn1uaEhACURZcVf/Zk/dqM5GeZQc+xKJrHe8nPvXGCJyiN7IVu
pyEWIMbWBpYn9qiHVFB6CSZxEhaGiG+hJuWseluZoafoPXm4IlzxgPHCMpbwiFuX
/ajtQ4HehC4KLkKwxK95NZbMPH36nLT/saPTF/z/oDxIm723IMGbrwnT5I0fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhbrADc8O6rGwiiGa295Z1Zk6+5MwHwYDVR0j
BBgwFoAUFX0s09L1pNhthGmFaff4LQk+3lQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMS8xNTdEMkNEM0QyRjVBNEQ4NkQ4NDY5ODU2OUY3RjgyRDA5M0VERTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1N0QyQ0QzRDJGNUE0RDg2
RDg0Njk4NTY5RjdGODJEMDkzRURFNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzEv
MzEzNzMwMmUzMjM0MzQyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9AwwDQYJKoZIhvcNAQELBQADggEBAEWL4mFJ
mgEU26ceu3/mCXkyHNwqTrRPuBWtaGD9EBxOkqnxdR7YdjTb3zJ7CqlpymDUXWok
4R7oEgRIN2O0pEI0wBOWIZlV97A2jzEU1DBwtMPF7lTqOYxDUnHTmdOUPJ/D8z4a
+GF+GuYgNxkCtr+yBfsoVkpepaZ+7f+tW4zbjfbbsIBTUPN7zZx2+/CwdDJXLfkZ
PyolPCLXx7gLQQkIaN45fJ6SZmHJkKqXBIpNsrjzsNWrJ8Z9hQUVJz7ccvddQh2V
wB/LY1i9d56DbOaYgN+gSw7j3votblLSAigfRMI+bZgMkfOu+S75jdByisBhi36B
nmAZxhx5j/+iGDo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org