Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38382e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          uXWYtQGCwSxoTYAoLj5R98rxX+5bZvHXISAxLVKPwD8=
Subject key identifier:   E7:CB:A4:0C:02:35:98:58:93:38:B7:B9:29:63:C7:B1:57:79:F2:85
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       41D8D85233EE391BCD50E5A03F7123A104DD20F2
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:12 +0000
ROA not before:           Tue 16 May 2023 14:20:12 +0000
ROA not after:            Tue 14 May 2024 14:25:12 +0000
asID:                     52653
IP address blocks:        177.221.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:d8:52:33:ee:39:1b:cd:50:e5:a0:3f:71:23:a1:04:dd:20:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:12 2023 GMT
            Not After : May 14 14:25:12 2024 GMT
        Subject: CN=E7CBA40C023598589338B7B92963C7B15779F285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:45:ef:98:57:ea:1b:5d:15:38:61:af:91:
                    2f:09:a3:96:3a:0a:c1:36:6a:02:d5:a3:4a:e3:b6:
                    2a:47:28:0c:32:cc:31:00:f4:83:b3:5f:e1:71:f0:
                    ae:c5:bd:5b:91:1d:c2:7d:12:ac:c4:88:27:99:19:
                    87:92:19:0c:21:7f:b9:3a:c8:2c:d0:4c:eb:62:2c:
                    6d:a3:0a:2c:c2:70:86:4c:d4:0a:70:84:7e:8f:40:
                    68:a6:61:fd:7e:c9:d9:a7:7b:30:d3:d5:bd:d1:6a:
                    a8:91:cc:f3:82:ea:e2:43:92:03:c9:a2:b0:f4:b2:
                    85:20:1e:06:e0:75:ff:9f:b4:77:70:16:c7:73:cb:
                    84:95:1d:bf:4d:82:64:57:0f:e4:be:32:60:55:d3:
                    bc:b3:0f:8c:97:88:26:9f:57:e0:3b:3a:0b:ed:43:
                    3c:6e:a4:a8:0e:6e:0e:0b:fb:a6:d2:f7:83:f3:51:
                    4f:e5:7b:00:85:8f:84:cd:a3:f0:e0:0e:6e:00:b1:
                    1b:28:9d:a1:00:eb:4a:17:37:4f:2c:1c:21:c2:a2:
                    46:31:bd:37:2d:0b:b5:28:23:aa:c5:5e:85:fd:ab:
                    5c:fa:64:91:35:bf:52:2d:96:56:5d:23:04:1f:ca:
                    ae:0e:d6:69:66:64:be:b0:d8:7c:dd:2b:87:86:f3:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:A4:0C:02:35:98:58:93:38:B7:B9:29:63:C7:B1:57:79:F2:85
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:56:7a:12:23:54:cd:ac:d0:a5:16:62:2e:b9:dc:65:f2:
         b5:59:37:45:c8:e0:c5:6e:6c:a0:e7:20:d8:6e:1d:df:f3:24:
         21:ba:cd:40:65:92:2a:bc:d4:87:d6:2f:f7:18:9a:ac:1d:ca:
         f9:41:6d:d9:cc:32:91:9a:5a:2b:35:c4:21:cf:66:a8:51:49:
         4b:5e:d6:08:9c:67:5f:52:39:20:4c:42:1a:54:ca:20:50:f1:
         f9:01:41:6f:44:6e:52:d5:cb:45:0e:91:ff:a1:6d:75:e5:96:
         de:7e:17:29:79:a8:d2:6c:3d:e1:06:a1:53:05:1c:74:29:dc:
         a2:8e:5e:cc:36:10:21:8f:89:7d:07:12:6a:cd:d0:88:80:f2:
         97:c1:e9:50:95:5f:a4:85:9b:53:ca:bf:54:3a:c2:ed:30:9c:
         c6:42:95:ca:81:04:bb:1a:37:5b:96:9a:cd:bf:20:f7:ab:08:
         0f:2f:32:18:e8:a0:9f:a8:5c:1d:eb:96:01:42:3f:cb:7e:02:
         2e:1d:28:fa:16:d0:c8:40:f4:b3:c1:3b:07:19:5d:3e:e7:ad:
         90:0c:3e:6f:56:26:37:1d:52:48:e6:92:69:f6:3d:f4:a2:89:
         f4:e5:f1:a6:6c:0c:b6:5c:f8:21:ac:a2:d1:99:b6:b6:ee:f3:
         3d:8d:9c:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQdjYUjPuORvNUOWgP3EjoQTdIPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDIwMTJaFw0yNDA1MTQxNDI1MTJaMDMxMTAvBgNV
BAMTKEU3Q0JBNDBDMDIzNTk4NTg5MzM4QjdCOTI5NjNDN0IxNTc3OUYyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuUXvmFfqG10VOGGvkS8Jo5Y6
CsE2agLVo0rjtipHKAwyzDEA9IOzX+Fx8K7FvVuRHcJ9EqzEiCeZGYeSGQwhf7k6
yCzQTOtiLG2jCizCcIZM1ApwhH6PQGimYf1+ydmnezDT1b3RaqiRzPOC6uJDkgPJ
orD0soUgHgbgdf+ftHdwFsdzy4SVHb9NgmRXD+S+MmBV07yzD4yXiCafV+A7Ogvt
QzxupKgObg4L+6bS94PzUU/lewCFj4TNo/DgDm4AsRsonaEA60oXN08sHCHCokYx
vTctC7UoI6rFXoX9q1z6ZJE1v1ItllZdIwQfyq4O1mlmZL6w2HzdK4eG83vzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU58ukDAI1mFiTOLe5KWPHsVd58oUwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1YMA0GCSqGSIb3DQEBCwUAA4IBAQBro1Z6EiNU
zazQpRZiLrncZfK1WTdFyODFbmyg5yDYbh3f8yQhus1AZZIqvNSH1i/3GJqsHcr5
QW3ZzDKRmlorNcQhz2aoUUlLXtYInGdfUjkgTEIaVMogUPH5AUFvRG5S1ctFDpH/
oW115ZbefhcpeajSbD3hBqFTBRx0Kdyijl7MNhAhj4l9BxJqzdCIgPKXwelQlV+k
hZtTyr9UOsLtMJzGQpXKgQS7GjdblprNvyD3qwgPLzIY6KCfqFwd65YBQj/LfgIu
HSj6FtDIQPSzwTsHGV0+562QDD5vViY3HVJI5pJp9j30oon05fGmbAy2XPghrKLR
mba27vM9jZzX
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:31 2025 by rpki-client