Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          BpcdG/MyZHWC2UJIH6D0/vYr1RVKMYXuaun5RoCUnqc=
Subject key identifier:   81:F4:1C:74:5A:AE:C3:F0:57:86:57:06:0E:0C:6B:B8:1D:F1:1E:B2
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       40839DA483CD16290C07D2CBB46888C743E3A2C9
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:42 +0000
ROA not before:           Tue 16 May 2023 14:19:42 +0000
ROA not after:            Tue 14 May 2024 14:24:42 +0000
asID:                     52653
IP address blocks:        177.221.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:9d:a4:83:cd:16:29:0c:07:d2:cb:b4:68:88:c7:43:e3:a2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:42 2023 GMT
            Not After : May 14 14:24:42 2024 GMT
        Subject: CN=81F41C745AAEC3F0578657060E0C6BB81DF11EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:98:92:0c:ce:01:ff:41:65:92:34:b1:6f:
                    b8:4d:eb:f7:93:15:8d:d6:41:5e:28:48:ca:58:d6:
                    a2:ca:38:5f:ee:47:79:aa:54:4b:69:5a:ca:eb:30:
                    9b:72:02:2d:44:c7:bc:da:59:5d:76:1e:59:74:69:
                    9a:f7:4d:ee:ff:39:60:8b:91:e3:4f:b8:7d:cd:98:
                    c8:82:99:2f:ec:7c:d5:ee:e0:4f:3f:d9:10:6a:64:
                    a7:5d:6a:ee:76:90:a8:c1:45:14:2b:95:ab:85:19:
                    35:9b:ed:34:c4:f0:d6:bc:0b:a8:2b:78:f8:55:56:
                    63:4d:0b:56:74:a6:f1:8f:7d:f5:ac:72:68:74:2c:
                    28:fa:52:cd:b9:c0:af:44:9c:e0:95:63:04:8f:d0:
                    4b:90:86:60:74:09:e7:26:2e:49:5f:4d:45:e8:d1:
                    5a:f8:92:68:5d:d7:37:ce:ec:09:91:65:23:dc:06:
                    e8:1d:52:aa:8a:7d:18:54:eb:0b:5d:6f:e9:b3:ad:
                    06:91:88:71:d8:29:ed:67:dd:26:de:10:3b:ca:64:
                    3b:05:32:74:7b:27:22:c9:0c:e5:a3:a4:c1:86:80:
                    04:e6:40:29:4e:c8:39:e1:ef:b2:1b:85:6e:cd:d2:
                    98:6d:84:ab:cf:56:21:c5:a5:2b:fd:1f:b6:05:5e:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:1C:74:5A:AE:C3:F0:57:86:57:06:0E:0C:6B:B8:1D:F1:1E:B2
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:98:40:17:3c:0d:c6:97:f5:9a:a6:df:b3:e8:2d:8a:43:42:
         ca:27:9a:6a:e6:10:94:b0:d6:e1:d0:f7:ee:76:5c:e2:db:25:
         f3:5e:09:1e:66:14:dd:42:cd:c6:35:a6:39:80:42:be:79:67:
         49:1b:2b:7e:fd:3a:1c:fe:b7:4d:2a:ff:f6:c0:57:13:e5:17:
         5d:a9:78:b3:4e:0d:b7:d0:91:f7:35:3d:6f:4c:aa:7c:57:3d:
         51:2c:72:56:00:65:d8:98:84:c2:69:3a:e5:82:17:ad:43:01:
         e0:d0:68:60:88:58:eb:76:a1:d9:ec:89:ca:a4:c7:e5:4a:a1:
         bd:44:ae:84:2d:5c:89:5e:5b:10:dc:00:2c:c5:e7:89:28:a4:
         75:31:f1:fb:85:dd:62:fd:64:97:39:0b:8f:31:e3:78:f5:e5:
         b6:b5:d2:6f:f8:80:9d:a9:5f:39:f8:42:13:d0:98:5a:9b:bd:
         fb:2e:85:13:10:d3:c8:fc:99:e1:79:8c:9b:fe:3a:ff:9d:b2:
         d7:2b:15:e5:49:f3:a7:54:27:10:0e:cc:f4:22:ef:c9:db:2d:
         f0:fe:6f:73:8f:90:97:87:4e:f6:67:fd:5c:61:6b:d6:83:68:
         5e:25:61:92:38:4d:ad:70:97:e7:63:26:31:32:9f:11:d1:65:
         39:3e:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org