Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38362e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          xvRuIefUzNh9Hw0/VqXQ4QWfmVgiQWyENH+Pf8wi9AU=
Subject key identifier:   3E:50:2A:0E:CB:DE:10:37:AC:90:F8:D5:47:69:F4:EC:6E:05:9D:DB
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       63D54B601237B903299F9E3ED2D2BB97ABAC447A
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:04 +0000
ROA not before:           Tue 16 May 2023 14:20:04 +0000
ROA not after:            Tue 14 May 2024 14:25:04 +0000
asID:                     52653
IP address blocks:        177.221.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d5:4b:60:12:37:b9:03:29:9f:9e:3e:d2:d2:bb:97:ab:ac:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:04 2023 GMT
            Not After : May 14 14:25:04 2024 GMT
        Subject: CN=3E502A0ECBDE1037AC90F8D54769F4EC6E059DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:e2:f1:d8:ba:74:8f:d7:99:66:eb:6b:da:
                    b5:3c:10:56:ae:66:c3:c7:26:2b:b7:32:0a:8a:b1:
                    c0:59:78:95:7c:07:d3:35:d3:30:d8:f1:36:d4:16:
                    c4:06:41:64:26:bd:a3:20:5b:ec:ce:29:e4:7c:2b:
                    06:94:73:34:36:5f:bd:da:37:af:c4:97:9d:26:2b:
                    ce:ae:a5:d1:24:c0:29:19:3d:38:fb:95:73:5b:fe:
                    50:34:a5:e7:d2:bd:c4:8e:99:38:68:09:ec:1f:ab:
                    5f:45:1a:d8:4c:45:42:9d:ff:b9:2a:c3:0e:98:dd:
                    82:87:65:69:e0:13:c0:05:d4:4c:cc:63:a9:66:e1:
                    ab:54:61:65:ba:6a:c6:67:64:1f:c0:22:3c:cf:29:
                    1c:97:d6:9d:eb:64:27:bf:e1:90:b6:12:a4:6e:b9:
                    5d:9a:45:ee:68:1d:18:cf:c6:8a:e1:91:50:11:4d:
                    a3:29:73:ce:35:80:28:cd:ec:1c:19:b6:5f:28:c5:
                    7b:8b:f6:76:62:8f:7c:a5:a1:54:4d:0a:35:29:28:
                    78:3f:7f:0d:2e:fe:e0:79:aa:55:43:8f:90:bf:7c:
                    46:2d:b2:db:03:d5:15:10:c5:03:23:4b:87:6a:40:
                    d8:a5:41:4f:56:89:0e:d6:f7:56:27:94:4a:5d:0f:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:2A:0E:CB:DE:10:37:AC:90:F8:D5:47:69:F4:EC:6E:05:9D:DB
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:c4:81:37:86:cf:b7:98:a8:22:53:17:b6:4e:74:73:e9:
         ba:e7:56:4a:94:11:86:6c:e3:ec:59:a6:bc:c1:61:23:21:24:
         fc:fd:9b:07:d4:43:8f:50:0f:e6:1f:84:15:da:10:f4:a1:8d:
         ac:48:8b:a0:25:77:35:c9:c1:ae:b4:c4:31:cd:cc:fc:c1:f3:
         05:3f:37:da:93:8e:72:da:de:f3:6c:13:f9:53:02:b2:70:b2:
         b5:08:7b:7f:b8:a2:61:54:75:a8:3e:64:6b:f5:55:98:9b:29:
         8e:a1:e2:2a:a6:b0:84:9f:1b:3f:ae:31:ae:bf:2c:80:d6:65:
         c5:27:19:d5:c5:ea:b6:58:77:16:e5:58:e2:ba:1c:de:41:37:
         2b:1b:f0:16:b2:53:1f:cf:13:1e:75:a9:37:bd:6b:b3:54:97:
         db:21:84:15:2f:d7:a9:ab:73:95:c2:da:2d:c4:01:4e:46:47:
         70:92:da:67:dc:0f:a3:d2:95:ab:64:a8:6c:1b:48:6d:ab:ac:
         25:29:60:74:9c:2e:d5:ed:ad:9d:56:6e:dc:a2:b3:fe:01:bd:
         70:f5:2d:43:2f:e3:3c:de:dc:0f:09:b2:b7:2d:a9:6d:45:b9:
         9d:55:fe:eb:46:a0:4f:87:6d:4e:dc:1b:d8:be:8d:45:7c:a5:
         92:aa:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org