Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38382e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          zG2AKZk3xnL6eNTufVaZyc8hyi53FutsPeyVkZ9UaKo=
Subject key identifier:   3F:27:B4:C7:E4:BF:92:90:53:E7:14:1D:5E:A4:5A:A6:41:C2:26:30
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       983E4323BC7482AA1F1BAB8D2BACA85B723BE9
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:10 +0000
ROA not before:           Tue 16 May 2023 14:20:10 +0000
ROA not after:            Tue 14 May 2024 14:25:10 +0000
asID:                     52653
IP address blocks:        177.221.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:3e:43:23:bc:74:82:aa:1f:1b:ab:8d:2b:ac:a8:5b:72:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:10 2023 GMT
            Not After : May 14 14:25:10 2024 GMT
        Subject: CN=3F27B4C7E4BF929053E7141D5EA45AA641C22630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:b1:db:2c:05:b8:2c:4b:36:7d:08:eb:9d:
                    a2:3c:b8:a2:29:25:30:28:23:71:e1:59:5c:54:a5:
                    01:10:9f:54:66:aa:39:07:27:67:2a:0e:be:c2:d8:
                    1e:5e:b1:79:58:f6:74:4f:57:da:9a:5e:4b:3a:e1:
                    03:3a:8a:77:ef:37:a5:6e:59:a5:92:08:b4:51:6c:
                    6d:10:de:67:4e:62:14:22:e9:82:ef:c4:18:81:6f:
                    f4:b4:40:6a:f6:3c:b5:d2:c8:3e:2d:e1:81:cd:05:
                    2b:e4:65:a8:5c:60:e1:e9:57:52:13:65:72:64:49:
                    f5:b7:b4:55:50:2e:8a:20:e8:08:cb:78:77:35:da:
                    a4:6f:f9:97:71:42:91:71:5a:48:df:aa:eb:b5:1d:
                    f4:e9:42:b2:78:07:44:29:f1:79:cc:7e:c1:18:9f:
                    ec:b9:4a:da:44:5f:a5:1e:6c:33:36:03:4d:9e:12:
                    0a:81:cc:0b:a8:0a:56:db:7c:0f:44:b8:65:de:80:
                    38:96:08:9b:e5:d8:0a:30:b8:8d:6e:9e:3e:ac:b4:
                    fe:48:54:be:7b:a2:2a:15:e1:2c:13:09:80:4d:a2:
                    87:86:6f:d1:c9:d0:ad:92:4f:3b:ee:65:f5:4c:72:
                    69:3c:8c:3a:5d:5d:88:61:71:29:49:e7:35:e2:22:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:B4:C7:E4:BF:92:90:53:E7:14:1D:5E:A4:5A:A6:41:C2:26:30
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:05:64:f2:41:49:8c:20:8c:3e:ad:57:74:89:e1:5e:ec:c8:
         7a:ec:61:e7:01:9f:6b:94:88:c2:76:8a:b7:ab:4e:93:44:4d:
         bd:ca:7e:89:43:72:12:4c:cc:cb:04:e2:7a:83:8d:46:e0:ff:
         46:04:8b:ad:ea:13:6b:21:6d:2f:20:67:f3:df:f2:ec:93:91:
         2a:a2:1e:08:7f:bf:21:eb:f6:46:88:1b:76:2e:e8:c5:bc:6f:
         d1:db:d2:4f:0a:55:2d:39:76:19:40:22:fa:0a:68:a6:67:30:
         57:09:06:49:48:e6:81:d7:49:fb:26:6a:6f:7e:4d:9d:43:9d:
         78:c2:ec:08:e8:30:57:77:44:d4:f1:65:69:2b:38:c6:24:fd:
         ec:9d:40:a8:bb:f9:8e:5f:b3:f4:52:b7:cf:df:17:9a:2f:11:
         05:0d:fd:c3:a6:fa:01:8f:cf:b0:86:9a:f0:e6:83:d3:cb:39:
         99:ee:4a:47:7b:7e:26:e8:f8:9a:dd:b7:69:43:9c:7c:d0:2d:
         75:bb:15:97:e1:7a:f2:61:30:90:08:c5:35:c7:40:47:19:df:
         b3:7c:87:b8:86:bc:ad:e8:12:61:bd:ea:0e:ca:61:a0:04:a7:
         bb:63:b3:09:1e:d9:52:70:19:16:c0:bb:06:43:61:51:c5:c6:
         17:dc:f3:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAJg+QyO8dIKqHxurjSusqFtyO+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDIwMTBaFw0yNDA1MTQxNDI1MTBaMDMxMTAvBgNV
BAMTKDNGMjdCNEM3RTRCRjkyOTA1M0U3MTQxRDVFQTQ1QUE2NDFDMjI2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtpLHbLAW4LEs2fQjrnaI8uKIp
JTAoI3HhWVxUpQEQn1RmqjkHJ2cqDr7C2B5esXlY9nRPV9qaXks64QM6infvN6Vu
WaWSCLRRbG0Q3mdOYhQi6YLvxBiBb/S0QGr2PLXSyD4t4YHNBSvkZahcYOHpV1IT
ZXJkSfW3tFVQLoog6AjLeHc12qRv+ZdxQpFxWkjfquu1HfTpQrJ4B0Qp8XnMfsEY
n+y5StpEX6UebDM2A02eEgqBzAuoClbbfA9EuGXegDiWCJvl2AowuI1unj6stP5I
VL57oioV4SwTCYBNooeGb9HJ0K2STzvuZfVMcmk8jDpdXYhhcSlJ5zXiIobrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPye0x+S/kpBT5xQdXqRapkHCJjAwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsd1YMA0GCSqGSIb3DQEBCwUAA4IBAQBBBWTyQUmM
IIw+rVd0ieFe7Mh67GHnAZ9rlIjCdoq3q06TRE29yn6JQ3ISTMzLBOJ6g41G4P9G
BIut6hNrIW0vIGfz3/Lsk5Eqoh4If78h6/ZGiBt2LujFvG/R29JPClUtOXYZQCL6
CmimZzBXCQZJSOaB10n7Jmpvfk2dQ514wuwI6DBXd0TU8WVpKzjGJP3snUCou/mO
X7P0UrfP3xeaLxEFDf3DpvoBj8+whprw5oPTyzmZ7kpHe34m6Pia3bdpQ5x80C11
uxWX4XryYTCQCMU1x0BHGd+zfIe4hryt6BJhveoOymGgBKe7Y7MJHtlScBkWwLsG
Q2FRxcYX3PNi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org