Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38372e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          B5dpcNJW8wgkXtKvw+NPiqC6l9zoa6RgBTyPoBvckg0=
Subject key identifier:   A3:F2:B0:CE:DE:4B:F0:66:F8:ED:26:25:96:E2:50:AE:4D:EB:B8:43
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       58DE7DCBCB6B6A98F089BB501C7A5953FD4CAAB7
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:07 +0000
ROA not before:           Tue 16 May 2023 14:20:07 +0000
ROA not after:            Tue 14 May 2024 14:25:07 +0000
asID:                     52653
IP address blocks:        177.221.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:de:7d:cb:cb:6b:6a:98:f0:89:bb:50:1c:7a:59:53:fd:4c:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:07 2023 GMT
            Not After : May 14 14:25:07 2024 GMT
        Subject: CN=A3F2B0CEDE4BF066F8ED262596E250AE4DEBB843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:b3:7b:93:4b:8e:b7:9e:a9:8b:fd:02:d1:
                    13:9b:d8:57:1f:24:75:1e:1f:90:b4:59:63:dc:62:
                    44:c6:1d:e5:ef:46:73:2a:4e:60:71:82:b1:53:56:
                    24:18:fd:6c:26:ff:6e:f5:10:92:b1:fe:e9:ca:5b:
                    c2:6d:86:9d:13:de:fb:49:55:ae:0c:5e:d7:2d:52:
                    9e:82:69:8e:be:6d:63:64:c1:55:9a:75:4d:9c:09:
                    0d:9a:6e:bb:a2:e4:9b:63:e6:cc:6a:56:0a:a3:13:
                    ac:41:09:c2:71:0a:55:d7:e0:b6:a8:5c:6a:cf:e5:
                    95:ef:74:88:66:ad:3d:68:c5:8b:6f:fe:43:45:80:
                    dc:e0:bd:86:1c:b6:13:d1:8a:6a:33:24:74:29:2a:
                    23:f6:9f:50:f4:35:12:81:9c:64:0c:9b:de:8f:6f:
                    52:a8:15:ab:b3:65:51:4a:5f:f8:95:b2:77:98:18:
                    e0:9a:e5:18:6f:65:6c:0c:32:c0:03:84:d9:e8:d3:
                    d4:32:b8:54:6c:30:06:d0:d6:28:04:11:02:83:3c:
                    64:2c:81:0a:79:53:58:21:42:fd:30:e1:05:b9:ea:
                    1a:8a:92:cf:4d:a1:2a:5f:27:81:39:0c:e5:a9:35:
                    2f:59:93:4d:cc:5a:ab:9d:d0:dc:7a:52:83:fc:41:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:B0:CE:DE:4B:F0:66:F8:ED:26:25:96:E2:50:AE:4D:EB:B8:43
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:9f:8b:b3:0b:2b:86:09:75:db:77:7f:e4:ad:a8:95:d2:
         9c:e7:ef:8b:b0:42:f7:7c:7d:45:84:d9:4e:c1:92:d3:9d:74:
         51:04:fd:4a:9d:54:c3:b6:48:3e:f2:dd:4a:d5:c4:ad:4f:94:
         09:5d:1b:49:a0:b1:2b:9a:66:fe:e5:6a:ce:72:9c:5c:1a:8c:
         f8:e8:fb:e9:39:e3:4d:d4:21:79:f4:49:c3:cb:08:06:fb:4c:
         e9:49:72:4b:f6:22:16:cd:4d:8e:9f:d3:e3:55:ca:bc:a0:3c:
         be:44:19:12:2e:9a:80:52:48:3e:f3:ab:39:88:6c:32:71:b0:
         fd:86:d4:be:8c:16:c2:69:84:b7:c6:6b:ef:cd:2a:ec:5c:77:
         dc:2d:5e:2b:af:20:cd:73:94:59:60:56:9c:c8:f9:57:cc:16:
         e7:7b:7e:c4:24:03:37:87:4a:57:4a:35:2d:90:f7:b2:8a:68:
         de:fc:4f:7b:6e:c7:45:51:8f:be:4c:d8:68:56:a3:8f:82:53:
         06:2e:2a:0e:f1:7b:2f:40:88:56:ea:e2:f9:93:b6:81:3e:7f:
         3d:e7:a9:50:bb:aa:ab:69:e5:e1:7f:7c:1f:05:b8:49:0e:d0:
         0f:1f:7e:6b:f2:52:12:c8:8d:1e:a4:17:57:68:ad:f5:8a:a2:
         70:8d:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org