Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          mYM7RD1lob7JXiLKcE4dBVl3Bw4XaoZnL2zdYSHE5Tg=
Subject key identifier:   81:0F:59:DD:48:23:64:8A:FC:52:F1:78:64:CE:54:42:1F:E9:44:D0
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       3451EBB6FB7B848A218E286E95491C2559169108
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:45 +0000
ROA not before:           Tue 16 May 2023 14:19:45 +0000
ROA not after:            Tue 14 May 2024 14:24:45 +0000
asID:                     52653
IP address blocks:        177.221.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:51:eb:b6:fb:7b:84:8a:21:8e:28:6e:95:49:1c:25:59:16:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:45 2023 GMT
            Not After : May 14 14:24:45 2024 GMT
        Subject: CN=810F59DD4823648AFC52F17864CE54421FE944D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:e3:24:0e:e1:87:04:37:91:54:99:07:cf:
                    5d:2e:67:df:aa:03:11:36:c6:c5:0b:75:7f:88:22:
                    7a:29:e5:6d:8b:be:f8:f5:e7:11:aa:b2:db:8d:66:
                    2e:09:86:0f:c4:a8:c5:0d:60:5b:fa:c2:f6:2a:f8:
                    71:07:33:a7:b8:5e:91:a5:f4:7d:22:74:49:98:70:
                    9c:c0:4d:69:d8:16:69:54:d7:d3:ba:d9:bf:d8:8a:
                    fb:86:35:ec:6b:4b:ac:6b:41:42:b1:60:48:2d:f9:
                    58:23:5a:b7:93:1b:2f:0a:3d:6a:c2:a9:1e:ce:90:
                    68:53:e6:e6:52:2f:b7:a6:18:15:ac:f4:82:18:be:
                    0b:51:54:1f:c7:1f:43:e2:b6:b5:29:c5:9d:64:21:
                    0c:54:99:ff:6a:e7:4b:ab:b8:f5:8e:8e:00:e6:77:
                    e6:19:f1:6e:03:57:96:2d:44:3b:e7:2b:65:0e:87:
                    ee:95:8a:02:ed:e5:7d:02:33:6d:1d:93:0a:0d:b7:
                    41:ea:9a:0d:2a:5c:30:d8:6c:bc:66:c8:22:ac:2e:
                    ca:91:73:79:36:2c:09:7b:c5:86:7a:53:dc:39:ec:
                    ca:7e:99:06:8c:72:4d:a8:09:53:b6:21:a7:05:de:
                    75:dd:4e:07:e7:1e:0c:b8:2c:6a:41:3b:bf:0d:83:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:59:DD:48:23:64:8A:FC:52:F1:78:64:CE:54:42:1F:E9:44:D0
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:48:a7:f5:1f:1c:cd:23:47:05:d7:b3:3f:53:1b:bb:28:1d:
         19:38:b8:ab:bf:2b:2c:d6:10:2e:bf:35:d3:c3:8e:1f:f5:7b:
         36:ad:c1:94:2b:7c:02:b6:52:a9:11:53:e1:7d:39:e5:91:84:
         16:0b:ef:bb:fa:af:e3:3b:13:84:ef:da:63:c4:d4:06:8a:16:
         8e:17:68:73:a6:f5:12:91:53:8a:a7:2c:38:e2:b8:9e:1d:88:
         da:eb:19:09:9f:96:01:e9:30:34:fb:27:d5:8b:e7:d7:64:3f:
         ac:64:97:39:03:40:ca:24:5b:bb:e5:aa:f5:cb:3b:bb:2a:53:
         8a:04:a7:0c:57:3a:f5:c9:1c:fd:16:f9:7a:bf:6a:be:8d:26:
         e9:2f:b9:6a:61:a4:69:2e:65:88:3e:14:ed:db:73:dc:a3:86:
         d9:0a:9f:d4:ed:7e:cd:f2:6c:fa:d0:6c:94:c9:2e:e5:c8:23:
         80:3d:da:ce:88:be:ba:ac:36:9c:86:9b:da:70:0e:35:ef:1e:
         fd:6d:8e:f5:0d:90:72:4d:54:48:58:72:b8:c7:20:b2:50:a4:
         ea:af:0a:d3:f3:00:b1:7d:71:e7:b4:ba:57:37:4e:55:86:61:
         a1:44:a1:a3:b7:00:12:79:02:22:ff:1b:ed:e8:98:8b:49:90:
         7e:75:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org