Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38342e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          BGYr1YFo/YUZhDEUUHlpiHQaprRRq2I5IFdoFuC6ntk=
Subject key identifier:   23:6F:B7:50:7C:AA:5A:4A:21:49:1C:55:2A:83:75:BD:33:B2:7D:FF
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       040064EC374CD3E3943730177902DB9F09FB974B
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:54 +0000
ROA not before:           Tue 16 May 2023 14:19:54 +0000
ROA not after:            Tue 14 May 2024 14:24:54 +0000
asID:                     52653
IP address blocks:        177.221.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:64:ec:37:4c:d3:e3:94:37:30:17:79:02:db:9f:09:fb:97:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:54 2023 GMT
            Not After : May 14 14:24:54 2024 GMT
        Subject: CN=236FB7507CAA5A4A21491C552A8375BD33B27DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:2e:a2:a7:bf:80:a8:f6:e4:7e:fc:12:ef:
                    f9:71:e4:20:0a:37:75:79:bd:bd:98:ab:f5:b8:f1:
                    e9:6a:98:2f:8c:b0:3b:e8:a9:8d:86:c4:a0:90:48:
                    40:db:e6:37:03:1c:86:f1:47:21:f6:58:eb:85:e0:
                    4d:07:d1:b1:d7:76:86:05:ad:4f:a6:39:00:6d:91:
                    bf:a2:3c:cc:95:a8:4f:90:f9:20:10:d3:7c:2a:c6:
                    6d:04:88:aa:7f:e5:bd:83:45:7d:8d:5d:95:02:7b:
                    35:ee:db:6a:d0:7c:86:d0:c3:86:e2:d7:4c:90:15:
                    ca:28:f9:ce:e2:97:5f:60:08:f4:67:ee:76:37:a6:
                    72:78:1a:eb:5d:57:9e:a5:11:13:c7:05:db:3f:f2:
                    4c:f7:17:34:ad:44:7b:d9:82:02:f9:2c:e9:8f:77:
                    29:bb:2c:e9:53:46:c5:a3:1a:1d:fb:6d:66:b6:97:
                    4b:12:51:8b:14:91:9a:9a:ea:de:e9:25:a7:04:0d:
                    15:3b:0a:a2:5f:9a:1f:ab:70:ab:06:5b:62:96:c6:
                    92:9d:12:16:ba:aa:13:17:05:b4:02:00:05:ef:f5:
                    fb:90:35:44:2e:8b:e5:ae:cf:0d:d4:31:34:1f:5e:
                    de:7f:b2:55:4b:bd:ad:13:2d:0c:b5:ba:2c:a6:89:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:B7:50:7C:AA:5A:4A:21:49:1C:55:2A:83:75:BD:33:B2:7D:FF
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:c4:8f:e0:af:c1:5d:a7:e5:39:a9:86:22:f7:76:fd:3b:
         7c:43:50:dc:bd:e0:9b:f8:f6:11:2c:8f:40:82:d8:de:45:13:
         d0:ef:2e:f8:cb:fe:b6:14:6d:bf:b4:85:e5:54:51:1a:b2:d2:
         7a:0a:b5:6f:ee:f3:06:03:76:15:f9:be:56:1f:95:7c:98:8c:
         ff:4f:7e:4e:55:06:35:25:74:36:cb:4a:e3:74:8a:ad:9f:5d:
         ef:3c:aa:cf:ed:43:f8:fb:36:08:32:03:50:58:55:63:7b:be:
         ce:1f:38:f4:11:30:22:97:b1:25:d7:39:88:d0:80:4e:19:5c:
         dc:ed:75:ca:36:6a:17:78:48:56:da:df:52:05:53:db:ea:fa:
         e8:a5:25:ba:53:a6:4a:05:54:56:a0:4d:e9:69:0a:d0:fa:e7:
         ca:d6:c3:62:8d:ce:f0:25:38:b0:b2:9c:3a:71:e8:01:b7:bd:
         22:21:2c:2c:a8:5b:ae:50:2a:1e:af:d8:a5:44:50:79:2f:71:
         2d:78:1d:56:b6:60:18:72:0d:91:58:a4:ff:e3:33:2f:10:cd:
         81:dc:17:32:c1:52:b8:19:43:d9:1d:e0:d3:1e:b5:47:a9:c1:
         d2:46:ee:4d:f7:a5:eb:dd:51:36:85:50:f2:aa:42:ca:82:a3:
         0a:ea:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org