Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          EOZ1Wre+bkF5KjC72eVthflGbUgxeFSoDIKrkpbHJ7E=
Subject key identifier:   D2:48:49:DF:57:EF:D5:6D:DD:49:7B:04:16:03:5C:66:90:DD:97:0A
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       53055D56B38C096B38F051BB786B553559E624E1
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:48 +0000
ROA not before:           Tue 16 May 2023 14:19:48 +0000
ROA not after:            Tue 14 May 2024 14:24:48 +0000
asID:                     52653
IP address blocks:        177.221.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:05:5d:56:b3:8c:09:6b:38:f0:51:bb:78:6b:55:35:59:e6:24:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:48 2023 GMT
            Not After : May 14 14:24:48 2024 GMT
        Subject: CN=D24849DF57EFD56DDD497B0416035C6690DD970A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:7e:9c:20:04:26:d0:55:50:e4:09:92:17:
                    d3:50:62:f5:90:23:29:43:90:49:dc:2c:ad:70:30:
                    bd:5d:b1:dc:a4:4b:60:bd:2e:13:a9:15:93:57:ff:
                    c0:ea:5d:6e:db:f2:27:54:5c:65:0d:4f:fb:cf:b2:
                    17:f0:09:81:ca:57:c6:9f:a6:41:12:1c:2b:d2:25:
                    41:55:6f:97:b4:1b:56:63:1d:48:17:1b:54:28:84:
                    a3:6c:a4:4b:e3:51:fe:59:0d:ca:f0:67:e0:d8:2a:
                    2f:ff:46:b4:56:54:ff:2a:18:4e:5c:7e:02:72:b9:
                    2b:4d:ba:ba:1f:ef:50:6d:ef:9e:f4:48:c4:ad:77:
                    26:5f:a8:63:c1:d8:6d:86:a4:78:19:de:0c:b1:bc:
                    4f:f2:ec:9c:81:b6:47:04:a9:dc:90:cb:6b:3f:af:
                    cc:26:a6:1d:66:51:27:97:89:67:69:d9:ee:8a:a8:
                    9c:85:8e:8f:b1:fd:65:76:57:87:57:5d:41:7f:ff:
                    6a:f9:60:24:77:66:c3:45:68:10:12:b2:87:ae:a7:
                    f5:8c:1c:89:7a:9a:73:8f:83:d8:8f:88:0a:c5:9a:
                    22:b5:50:d4:d8:8a:5d:08:be:00:43:2c:f6:d7:5e:
                    13:42:61:b7:fe:1a:bb:b8:ca:16:30:b9:a8:7c:83:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:49:DF:57:EF:D5:6D:DD:49:7B:04:16:03:5C:66:90:DD:97:0A
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:35:22:e6:81:d1:75:7b:00:2b:9f:75:b7:b6:6c:54:32:
         15:c2:9b:88:0a:e3:1f:68:70:1a:16:14:b1:21:a2:c7:b5:67:
         88:90:12:c0:9d:78:f6:07:53:61:f3:b5:a5:00:b0:8e:56:e1:
         5e:71:a2:b3:02:47:9e:af:3c:3b:a7:ea:7e:f9:f7:0f:46:50:
         43:d8:c1:91:5a:e9:50:3c:fa:6e:24:d7:eb:06:71:67:bb:d1:
         4e:b5:bc:de:b1:d6:19:7f:90:a6:84:5c:16:7d:32:7d:97:c9:
         67:35:27:3b:4a:bc:f9:e2:0a:ec:fc:77:a2:12:30:9c:44:36:
         bd:4a:ee:34:43:62:2f:c3:b8:69:42:4e:3c:1c:bf:6c:6a:4f:
         81:0c:61:4c:73:5e:3e:ca:f9:04:88:c4:b4:90:fe:7a:15:95:
         b6:f1:44:43:06:b8:b1:4f:ac:8c:10:be:81:4b:37:75:73:44:
         87:ee:5f:58:e2:e6:ce:8f:7c:4c:26:a1:3b:3f:a8:d6:99:43:
         50:01:c8:40:0c:b4:e0:8c:d9:cb:54:09:ab:11:30:66:29:a5:
         af:45:e2:c6:62:49:2b:95:5d:5b:29:0a:d0:cf:0b:c3:45:30:
         e7:3d:eb:3b:40:ed:fe:bf:4e:9e:73:7c:1e:ef:cb:22:ec:3d:
         71:01:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:44:16 2025 by rpki-client