Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32302d3230203d3e203532363533.roa (raw, json)
Hash identifier:          NPHwaFn7joD4Y9J4JF4POh9W+1pl6ue6tdGmX2gxKfU=
Subject key identifier:   37:53:56:7D:84:13:C3:29:98:41:66:B5:2F:DD:94:F4:0F:B7:64:CB
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       352EB9275E62466BBE4F74A5806476DD46665DF8
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:28 +0000
ROA not before:           Tue 16 May 2023 14:19:28 +0000
ROA not after:            Tue 14 May 2024 14:24:28 +0000
asID:                     52653
IP address blocks:        177.221.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:b9:27:5e:62:46:6b:be:4f:74:a5:80:64:76:dd:46:66:5d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:28 2023 GMT
            Not After : May 14 14:24:28 2024 GMT
        Subject: CN=3753567D8413C329984166B52FDD94F40FB764CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:79:75:12:dd:d6:d3:ef:bf:c5:8b:92:f2:
                    f8:9c:bc:9d:e3:9f:1c:86:27:77:69:e3:25:f1:ca:
                    fa:b7:8a:f7:df:4e:b9:8f:24:53:ed:10:a2:84:59:
                    13:00:9b:a9:fa:5f:fa:55:3b:1d:65:f1:20:11:b2:
                    b6:6c:5f:fa:eb:7e:bc:b6:1c:bc:50:06:cc:b3:6d:
                    86:e7:8d:14:77:53:a9:e4:d5:e5:6d:ee:69:3a:35:
                    65:da:45:29:e1:6d:a7:46:a8:59:9a:fa:8a:79:5c:
                    eb:7d:8e:16:d3:98:0f:92:0e:da:40:a0:0f:03:aa:
                    7e:80:46:4f:e3:0d:01:e5:83:4b:ab:cf:fa:9b:d8:
                    c5:d0:75:dd:05:02:2c:76:78:41:1c:3d:ea:b4:24:
                    0f:f7:8c:11:4a:e5:5c:f0:ff:c2:3a:60:49:b2:7d:
                    98:f4:4d:24:39:44:37:e2:56:ac:77:2d:ff:7a:7c:
                    85:81:22:a2:29:a4:1f:de:3a:87:7b:49:16:98:59:
                    a6:7b:4a:63:9e:a0:a6:31:38:6e:66:6b:7f:95:e0:
                    a9:01:88:90:06:68:46:1c:a0:6d:9a:55:a4:b9:62:
                    8d:2a:a3:5b:7e:79:03:17:04:2f:33:c9:cd:e2:63:
                    ca:14:35:03:a0:7c:a1:35:b6:f2:e8:49:bf:4a:9f:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:56:7D:84:13:C3:29:98:41:66:B5:2F:DD:94:F4:0F:B7:64:CB
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:0a:83:82:7c:f5:51:0e:e7:bd:6c:4e:70:30:5d:86:5c:
         5e:66:1d:ce:a6:31:f3:f9:26:bc:09:65:47:49:4f:c4:3f:98:
         78:ac:1d:96:8f:9f:45:04:f2:51:8b:cb:02:93:f0:60:2f:9b:
         43:a5:80:f5:49:e3:de:8d:24:90:f0:6d:7a:42:df:81:ad:4e:
         c9:98:6e:f7:b9:6d:8b:fc:b9:2d:0d:15:bd:26:0b:d2:47:7a:
         b9:83:78:e3:17:44:ed:02:e0:5f:b9:32:33:42:af:52:be:98:
         6e:bc:35:2e:7d:3f:a6:e8:58:ea:53:98:e1:2a:78:a6:8c:b0:
         f3:c6:16:7c:59:da:d9:a2:a3:6a:0c:d8:ce:aa:7a:69:57:89:
         e4:8d:d8:25:22:af:7d:0e:28:29:66:f9:73:fa:26:bc:b5:d7:
         de:4e:18:0e:33:27:0d:a1:e2:1d:5d:f5:14:8a:3a:48:56:cb:
         c1:cd:60:78:4f:23:e1:3e:26:ce:3d:aa:f1:e2:9e:1b:87:89:
         e4:5a:4d:b8:f7:e8:31:cd:84:18:ee:c7:80:db:cd:8b:6c:ad:
         7e:b9:c2:e7:9e:72:b7:b4:fe:b1:9a:dd:ab:b1:ad:63:bc:5f:
         36:31:5c:f5:fb:5a:0e:4a:c9:ea:1f:f8:d1:b5:02:ab:a1:51:
         ea:6e:12:31
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNS65J15iRmu+T3SlgGR23UZmXfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDE5MjhaFw0yNDA1MTQxNDI0MjhaMDMxMTAvBgNV
BAMTKDM3NTM1NjdEODQxM0MzMjk5ODQxNjZCNTJGREQ5NEY0MEZCNzY0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSu3l1Et3W0++/xYuS8vicvJ3j
nxyGJ3dp4yXxyvq3ivffTrmPJFPtEKKEWRMAm6n6X/pVOx1l8SARsrZsX/rrfry2
HLxQBsyzbYbnjRR3U6nk1eVt7mk6NWXaRSnhbadGqFma+op5XOt9jhbTmA+SDtpA
oA8Dqn6ARk/jDQHlg0urz/qb2MXQdd0FAix2eEEcPeq0JA/3jBFK5Vzw/8I6YEmy
fZj0TSQ5RDfiVqx3Lf96fIWBIqIppB/eOod7SRaYWaZ7SmOeoKYxOG5ma3+V4KkB
iJAGaEYcoG2aVaS5Yo0qo1t+eQMXBC8zyc3iY8oUNQOgfKE1tvLoSb9Kn6iXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUN1NWfYQTwymYQWa1L92U9A+3ZMswHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM4MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsd1QMA0GCSqGSIb3DQEBCwUAA4IBAQBefwqDgnz1
UQ7nvWxOcDBdhlxeZh3OpjHz+Sa8CWVHSU/EP5h4rB2Wj59FBPJRi8sCk/BgL5tD
pYD1SePejSSQ8G16Qt+BrU7JmG73uW2L/LktDRW9JgvSR3q5g3jjF0TtAuBfuTIz
Qq9SvphuvDUufT+m6FjqU5jhKnimjLDzxhZ8WdrZoqNqDNjOqnppV4nkjdglIq99
DigpZvlz+ia8tdfeThgOMycNoeIdXfUUijpIVsvBzWB4TyPhPibOParx4p4bh4nk
Wk249+gxzYQY7seA282LbK1+ucLnnnK3tP6xmt2rsa1jvF82MVz1+1oOSsnqH/jR
tQKroVHqbhIx
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org