Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          OAYvTzGMe+RKe6BtZr4lAURHFCk0TC6rAH9oRy3bOKI=
Subject key identifier:   B3:FC:22:24:BD:D9:62:DE:F6:90:38:22:3C:24:6F:27:60:CD:15:8F
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       133118DCF1812DF46D2A3CA442B3E675C3EB45A8
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:58 +0000
ROA not before:           Tue 16 May 2023 14:19:58 +0000
ROA not after:            Tue 14 May 2024 14:24:58 +0000
asID:                     52653
IP address blocks:        177.221.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:31:18:dc:f1:81:2d:f4:6d:2a:3c:a4:42:b3:e6:75:c3:eb:45:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:58 2023 GMT
            Not After : May 14 14:24:58 2024 GMT
        Subject: CN=B3FC2224BDD962DEF69038223C246F2760CD158F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:c2:4b:26:4c:53:9b:6e:69:c8:87:ec:42:
                    f8:5d:d3:01:15:2d:d5:76:1b:29:7d:f7:5b:99:ad:
                    0e:f4:59:ea:27:c5:a7:44:92:60:78:c7:ae:40:0c:
                    29:3e:38:03:3c:b6:ca:d9:0a:b6:b3:f0:d4:cc:23:
                    71:1f:9b:1d:a3:83:ed:24:e1:08:85:be:57:59:e4:
                    36:3a:e3:bf:65:1b:d3:c4:13:88:08:2e:e0:62:a1:
                    60:55:96:09:78:c4:b9:59:a3:d2:ad:4c:38:c9:97:
                    9b:ba:2f:44:7e:0f:7c:02:a7:72:2e:e0:98:f4:63:
                    f4:2a:50:78:a2:f1:0f:8c:cd:87:8c:1b:c4:fc:c6:
                    3d:99:0b:07:0a:53:df:14:75:fb:69:cf:cb:74:7c:
                    5d:ba:7e:53:f9:55:8f:b0:ca:40:12:89:aa:2f:41:
                    ed:d4:78:a5:4b:48:96:eb:c3:a2:69:07:59:5e:98:
                    56:aa:ab:04:0d:a3:ed:41:6b:dc:61:92:97:b1:59:
                    c4:34:3d:a6:81:2a:df:20:68:87:9b:1f:39:05:7b:
                    d2:f4:3d:49:5f:29:7e:7d:c9:f3:a4:53:d6:52:05:
                    7f:36:3e:d9:ac:41:d8:6e:1a:8e:0f:db:9c:52:e5:
                    fc:27:19:6b:eb:54:7f:9c:89:3e:75:20:bb:1c:13:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FC:22:24:BD:D9:62:DE:F6:90:38:22:3C:24:6F:27:60:CD:15:8F
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:4d:c8:1d:66:7a:df:ed:b0:6b:7c:22:d2:24:33:e8:0f:
         0f:9b:58:13:87:7d:26:63:fb:09:5e:61:dd:70:06:75:ed:84:
         b8:a6:a9:1b:a2:38:46:d0:f7:8c:c8:0e:3b:ae:0e:b7:4a:2c:
         6c:6b:63:5f:bb:e7:67:d5:ec:1a:f3:09:f1:c5:69:5f:e8:e7:
         c7:74:66:15:2c:d3:5f:19:00:83:53:23:55:69:60:d4:a1:32:
         e8:60:0c:d0:49:b7:d7:e2:25:a6:35:1f:79:95:e1:d0:db:45:
         ee:ec:43:77:c6:d4:e3:c3:c6:7a:ff:55:f0:25:c6:93:c0:78:
         ae:a9:b6:7c:d1:a9:89:1a:18:a6:41:f4:a4:04:5f:ca:de:90:
         a9:27:3e:a8:2d:36:dc:b5:5e:9e:41:2d:64:9f:57:26:36:0d:
         70:fd:b5:a9:1e:99:c3:dd:80:07:2a:06:66:44:a7:ee:fb:de:
         e4:b3:c7:d6:0f:e2:cf:a8:e2:63:e1:ed:99:66:35:e1:9d:ff:
         84:52:eb:a0:50:92:d4:c2:03:36:11:d7:d6:22:44:5a:3f:61:
         b4:10:f4:a0:f6:41:f8:83:1a:b9:81:e7:be:89:5f:36:31:d4:
         69:f0:98:7d:21:2b:9c:d1:43:64:53:ec:90:58:27:b3:39:d7:
         8d:b8:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org