Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          i4mzYoDWhuO8Y0tmjU+ADD2WU20pqfXjVMdgMxSefSQ=
Subject key identifier:   C3:C8:F7:5F:F8:89:F8:76:EB:D6:9B:F3:A9:04:19:4F:B9:01:2C:6F
Certificate issuer:       /CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
Certificate serial:       2689500836DF278ADF0C6AF2392EC3BFEBC5C822
Authority key identifier: 15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 17:00:01 +0000
ROA not before:           Thu 04 Apr 2024 16:55:01 +0000
ROA not after:            Thu 03 Apr 2025 17:00:01 +0000
asID:                     264281
IP address blocks:        170.244.12.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:89:50:08:36:df:27:8a:df:0c:6a:f2:39:2e:c3:bf:eb:c5:c8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
        Validity
            Not Before: Apr  4 16:55:01 2024 GMT
            Not After : Apr  3 17:00:01 2025 GMT
        Subject: CN=C3C8F75FF889F876EBD69BF3A904194FB9012C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:50:d0:e8:95:f2:04:6c:00:eb:73:40:9d:
                    90:97:00:85:10:6e:be:4f:cd:88:8a:f8:11:18:d1:
                    ff:e5:02:43:1d:69:2e:50:1e:1a:ea:86:93:9a:1a:
                    4f:77:9d:50:be:89:72:da:e0:a2:e5:98:b5:55:59:
                    d0:73:1a:a1:f5:62:eb:9c:4e:4f:2f:d2:88:75:2d:
                    d3:46:74:54:2d:c6:54:20:d1:98:5f:14:12:c2:12:
                    91:a4:54:81:b8:28:64:0e:f7:6e:e7:06:8a:06:5e:
                    41:de:f9:7d:18:e0:c2:fd:e3:93:2f:dc:2c:a6:80:
                    1f:c6:00:71:c9:6f:37:41:88:da:3e:e2:5d:e4:2e:
                    48:50:12:bb:d9:89:17:e1:4a:03:7a:5e:20:35:5e:
                    a5:b2:71:8a:c3:a4:64:fd:8e:77:5f:f4:f4:bf:6d:
                    9a:07:13:d9:94:e9:f2:8c:eb:77:1e:b8:48:cc:3a:
                    b5:10:42:0f:ee:39:25:4f:9d:0b:88:13:66:e7:25:
                    f5:b8:f9:8c:93:ac:86:42:12:4a:b3:1a:96:74:12:
                    69:66:d3:9f:b1:ff:03:b1:9f:1a:b2:c5:5f:d2:7c:
                    c2:0a:8a:0e:8b:fa:7e:99:fe:4c:76:2b:8c:61:81:
                    32:88:c0:60:60:f0:c0:86:8f:fa:f9:a7:76:22:b0:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:F7:5F:F8:89:F8:76:EB:D6:9B:F3:A9:04:19:4F:B9:01:2C:6F
            X509v3 Authority Key Identifier:
                keyid:15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3137302e3234342e31322e302f32332d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:99:1a:8e:62:b6:ce:ea:37:72:b4:06:a8:3b:1f:4d:f7:
         24:59:13:2f:24:a3:15:f8:8b:aa:da:f3:0d:db:2a:6e:ff:02:
         2e:47:fd:47:01:8f:bf:7b:ab:58:d6:2f:3d:a1:a8:2a:16:8b:
         d8:a9:ff:7c:aa:70:64:d4:07:a0:2e:0c:8c:92:04:41:2d:d4:
         c3:78:50:fd:86:b8:66:b6:d8:34:c8:48:6b:55:95:6b:c9:08:
         21:f6:a0:88:9d:10:f9:d8:9c:0e:50:79:db:42:6c:7a:b3:9e:
         99:e5:de:c0:2d:51:fa:8e:86:08:31:98:0a:81:af:70:3d:f6:
         02:b2:b8:a3:61:2c:ca:19:8f:09:5d:c2:67:37:2e:87:cc:77:
         24:23:6a:2a:8a:3a:48:d4:48:dc:3f:a9:0e:91:dc:ab:2f:7c:
         a8:0e:d3:09:34:e0:1c:50:91:66:54:38:01:d1:5e:90:6f:30:
         5d:25:52:82:d5:41:7d:2b:37:e5:fc:8e:8d:a6:6f:21:52:db:
         fb:a0:70:d5:d2:bb:a9:f3:35:03:a3:de:e9:55:4e:dd:5c:be:
         e9:26:35:85:72:b0:28:a8:db:aa:3b:c3:9b:87:a3:cf:62:df:
         e3:aa:b0:8b:9d:97:71:ca:2d:00:63:19:90:13:a9:10:6c:e0:
         7e:5e:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org