Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          FbsUpFSRx0U9NwZSyKM/3j1TnnTA5WytLkyAF8FLHjs=
Subject key identifier:   D4:7E:AE:D3:DA:69:2B:DD:33:5F:C1:46:F7:4F:58:59:E8:BC:F0:84
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       058C3F939C944C8BABDD64B04FEB5098BF265292
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:35 +0000
ROA not before:           Tue 16 May 2023 14:19:35 +0000
ROA not after:            Tue 14 May 2024 14:24:35 +0000
asID:                     52653
IP address blocks:        177.221.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8c:3f:93:9c:94:4c:8b:ab:dd:64:b0:4f:eb:50:98:bf:26:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:35 2023 GMT
            Not After : May 14 14:24:35 2024 GMT
        Subject: CN=D47EAED3DA692BDD335FC146F74F5859E8BCF084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:9a:92:4e:ec:f9:31:51:3b:61:13:8a:18:
                    e2:a5:9f:69:97:82:1e:e9:9e:0c:37:e4:95:52:bc:
                    5f:75:f4:1a:fb:00:79:1d:81:5d:cf:25:8c:f7:fa:
                    1a:33:13:4e:21:63:42:09:8e:4b:a8:92:ad:ce:a3:
                    22:07:2c:03:96:07:ee:b5:22:3e:18:7d:b8:45:a2:
                    ad:9a:3b:c4:c6:14:6a:46:6c:3e:94:f2:53:86:7e:
                    fb:e4:81:f9:04:a5:2c:f9:f7:77:32:0f:c9:b5:45:
                    73:3a:c6:99:eb:f2:ae:e0:05:8d:74:7a:5c:78:ca:
                    26:8a:4f:51:f6:99:ac:5d:01:4e:b4:ae:e1:5e:01:
                    e2:e3:8c:7e:50:a1:02:d4:f3:07:01:4c:71:51:23:
                    00:ac:d1:6c:37:a8:02:2a:8a:55:d2:f0:b5:75:45:
                    10:67:3a:d9:c0:cd:17:17:4c:87:de:69:76:16:e8:
                    b7:d1:59:1d:42:dc:1e:64:51:f9:7a:96:b4:26:31:
                    52:26:ad:97:f2:be:d2:b2:d5:e1:fb:fb:d1:32:c2:
                    45:65:94:e0:a2:c1:54:90:dc:28:5a:e7:90:fb:8f:
                    90:aa:43:15:c4:a1:3d:e2:47:30:35:c8:aa:ad:ad:
                    f1:5f:d3:78:d2:5a:eb:30:36:62:67:93:5c:dd:17:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:AE:D3:DA:69:2B:DD:33:5F:C1:46:F7:4F:58:59:E8:BC:F0:84
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:16:3f:d7:91:ee:f6:3e:e9:4e:f5:cf:40:ae:df:06:1d:
         bb:db:9d:dd:80:08:72:56:47:72:e4:e3:37:ab:ca:13:f9:40:
         56:7b:0d:bb:a0:b8:1e:87:ce:2c:ff:38:49:c6:44:fb:8f:3b:
         df:95:53:7c:b2:61:f6:0e:25:40:0c:2b:4b:7c:40:56:38:65:
         16:24:d3:f8:a8:f9:04:16:be:66:62:f6:06:d4:c7:6c:80:a8:
         d0:13:b3:39:99:6e:aa:04:46:06:d2:0d:9d:ed:1a:99:b1:c3:
         45:3c:d7:47:06:ba:f9:b0:b5:51:fc:16:1e:b3:d8:d9:b7:e1:
         fa:c3:21:5b:72:d4:b5:e0:6d:07:c5:9a:8d:14:c1:5d:7b:96:
         76:29:ae:0c:35:23:2e:24:44:fc:3a:9a:f2:97:08:6a:11:ba:
         5f:c9:27:4f:be:8d:c2:1c:ad:9b:4c:03:34:e3:a1:49:5e:db:
         72:b5:cb:ee:d3:9e:79:26:f5:a1:f2:74:f5:b2:0d:b7:d5:b6:
         fc:4b:a9:ae:f8:db:b1:69:c7:37:42:33:fb:3a:8d:41:fe:d7:
         86:4f:4c:c5:3f:98:01:5f:8a:9e:7f:12:c3:cd:4c:3b:1c:fb:
         b5:91:06:a0:16:a7:b6:33:9a:cb:48:57:21:a9:63:ce:84:32:
         37:90:24:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBYw/k5yUTIur3WSwT+tQmL8mUpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDE5MzVaFw0yNDA1MTQxNDI0MzVaMDMxMTAvBgNV
BAMTKEQ0N0VBRUQzREE2OTJCREQzMzVGQzE0NkY3NEY1ODU5RThCQ0YwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kZqSTuz5MVE7YROKGOKln2mX
gh7pngw35JVSvF919Br7AHkdgV3PJYz3+hozE04hY0IJjkuokq3OoyIHLAOWB+61
Ij4YfbhFoq2aO8TGFGpGbD6U8lOGfvvkgfkEpSz593cyD8m1RXM6xpnr8q7gBY10
elx4yiaKT1H2maxdAU60ruFeAeLjjH5QoQLU8wcBTHFRIwCs0Ww3qAIqilXS8LV1
RRBnOtnAzRcXTIfeaXYW6LfRWR1C3B5kUfl6lrQmMVImrZfyvtKy1eH7+9EywkVl
lOCiwVSQ3Cha55D7j5CqQxXEoT3iRzA1yKqtrfFf03jSWuswNmJnk1zdF1hJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1H6u09ppK90zX8FG909YWei88IQwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1QMA0GCSqGSIb3DQEBCwUAA4IBAQCYsRY/15Hu
9j7pTvXPQK7fBh27253dgAhyVkdy5OM3q8oT+UBWew27oLgeh84s/zhJxkT7jzvf
lVN8smH2DiVADCtLfEBWOGUWJNP4qPkEFr5mYvYG1MdsgKjQE7M5mW6qBEYG0g2d
7RqZscNFPNdHBrr5sLVR/BYes9jZt+H6wyFbctS14G0HxZqNFMFde5Z2Ka4MNSMu
JET8OprylwhqEbpfySdPvo3CHK2bTAM046FJXttytcvu0555JvWh8nT1sg231bb8
S6mu+Nuxacc3QjP7Oo1B/teGT0zFP5gBX4qefxLDzUw7HPu1kQagFqe2M5rLSFch
qWPOhDI3kCS2
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org