Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38362e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          LtJO9gIWhLju1pxJr32rEii84VvHh3V8wXfZnI9VvPU=
Subject key identifier:   25:75:DA:0C:8E:3A:23:4D:76:DC:A8:5A:BD:29:87:B1:91:67:A9:62
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       1172752ED5231ED155ABE4D94F4B8DA108032D0C
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:01 +0000
ROA not before:           Tue 16 May 2023 14:20:01 +0000
ROA not after:            Tue 14 May 2024 14:25:01 +0000
asID:                     52653
IP address blocks:        177.221.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:72:75:2e:d5:23:1e:d1:55:ab:e4:d9:4f:4b:8d:a1:08:03:2d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:01 2023 GMT
            Not After : May 14 14:25:01 2024 GMT
        Subject: CN=2575DA0C8E3A234D76DCA85ABD2987B19167A962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:99:22:66:76:b9:1d:c3:91:11:d9:79:63:
                    4e:2b:d1:f6:54:5c:a2:4d:aa:d5:42:0d:a5:9b:de:
                    e7:b1:ff:44:68:4a:4f:6b:37:2b:55:ca:c0:7d:ea:
                    f6:e6:e3:36:5f:c0:57:fe:dc:60:ac:8e:7d:1d:ce:
                    32:20:0f:cf:84:81:a2:ee:f4:16:79:84:ee:bf:7f:
                    3d:77:f3:9b:88:30:af:b5:5d:f0:e1:12:87:2d:84:
                    60:42:b5:fe:48:17:90:b6:1f:58:2f:ee:a8:c1:7e:
                    a8:4e:38:cb:45:43:0d:c5:e8:02:b6:e1:b8:6a:4f:
                    21:3e:dc:5b:4a:77:29:d4:60:af:66:25:7f:db:1b:
                    ed:d4:4c:db:c8:e2:25:2d:3b:f2:4b:a0:09:fc:63:
                    f0:f1:a1:15:3e:33:0c:4e:fa:d2:3a:ee:2a:9f:76:
                    6f:a1:7a:bb:a4:19:dd:a4:77:d5:f4:56:e3:de:d6:
                    09:9b:e3:ec:ca:17:1a:30:d5:db:3c:a3:4a:e6:cf:
                    87:b1:91:a1:50:7c:89:6e:cc:5a:c1:fb:9a:2d:00:
                    c4:47:f6:ab:90:f5:32:eb:a5:5b:49:b3:b3:a3:fd:
                    cd:44:30:9a:22:d4:25:8d:b9:96:25:e2:ce:9a:19:
                    8f:53:b8:e9:53:bd:2a:9e:b2:69:ef:e3:ad:40:1c:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:75:DA:0C:8E:3A:23:4D:76:DC:A8:5A:BD:29:87:B1:91:67:A9:62
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:a6:a6:d6:22:85:40:d8:9b:13:6c:68:54:f0:34:bc:db:
         1c:17:fe:2b:72:1d:e6:00:76:f9:58:04:db:d3:ce:19:20:b9:
         5f:c2:a2:c1:8b:96:1c:bc:cb:8f:7d:62:b3:98:75:1c:1b:1c:
         f6:78:19:4a:1b:fb:d0:70:84:be:40:f0:72:93:43:f6:1c:b5:
         71:43:97:4d:a8:c5:6f:b2:ed:a6:97:ae:cf:1c:01:b5:a7:bc:
         29:e3:4c:a9:8f:02:04:6d:d4:b9:1a:c3:cb:ef:2c:f2:78:bf:
         b4:c2:15:26:30:f8:e4:25:9f:fc:28:7b:a2:32:53:22:9d:b0:
         67:b2:6d:d5:10:84:e1:3a:d5:ad:82:f7:e8:79:66:cf:30:81:
         bb:c1:55:07:4c:86:aa:d8:a2:9e:1f:f3:22:5b:dc:12:b1:78:
         0f:f9:2b:0d:41:a1:d7:23:cb:64:15:e6:ae:70:08:b7:ab:a5:
         66:d9:47:47:b7:92:ef:b4:7b:e7:6f:1d:79:59:62:03:70:80:
         1a:3a:5f:17:17:69:1a:71:9a:c7:62:26:f8:d9:57:68:a0:25:
         5f:c0:b3:3f:ca:71:a3:f7:38:ea:26:5a:dd:5b:18:cb:d3:b4:
         b2:d0:fe:6a:88:62:2a:d0:28:68:d7:a8:4f:d8:db:3e:3e:ef:
         6b:f6:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----