Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38392e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          +Sg+Tq/5wAm2OZ31hbzD4izKXKDy9g78vi8rDzZYj+8=
Subject key identifier:   90:62:F6:53:B6:F2:65:3F:BE:31:47:C4:39:47:65:8E:D3:FD:44:E1
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       3B31A46DDF32830E42918823625AE2066CACBBAE
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:15 +0000
ROA not before:           Tue 16 May 2023 14:20:15 +0000
ROA not after:            Tue 14 May 2024 14:25:15 +0000
asID:                     52653
IP address blocks:        177.221.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:a4:6d:df:32:83:0e:42:91:88:23:62:5a:e2:06:6c:ac:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:15 2023 GMT
            Not After : May 14 14:25:15 2024 GMT
        Subject: CN=9062F653B6F2653FBE3147C43947658ED3FD44E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:4b:59:a7:f1:91:95:8e:ea:bd:ac:b9:72:
                    02:01:fe:c3:c3:2b:13:7c:75:47:15:37:56:99:80:
                    5e:ca:d3:d6:81:f0:b4:86:20:5e:e4:dc:b4:5e:1f:
                    52:5c:0b:c7:7a:50:39:53:34:fa:86:1d:2e:4f:ff:
                    24:dc:11:96:43:74:38:32:61:53:04:58:03:4d:25:
                    1a:15:ad:8b:de:7e:cb:ae:db:29:7c:f6:03:55:43:
                    4d:8f:8d:b1:5c:94:82:d8:35:eb:48:83:26:91:cb:
                    57:aa:b0:a5:73:bd:d7:68:6c:4c:1f:6f:e0:d2:d9:
                    e4:0b:ea:64:2e:c5:f1:6d:a3:ed:fe:ab:80:66:d5:
                    91:ed:1c:ae:b1:eb:6e:aa:90:e9:0e:3e:ef:d3:fb:
                    fa:02:fc:07:82:ca:c1:62:c3:6a:8d:1d:04:6a:06:
                    e3:8a:7a:eb:f0:ba:b9:2b:8c:15:82:25:ab:d9:b3:
                    33:37:cb:92:f1:c5:71:b8:15:d6:1a:06:a1:93:26:
                    a4:08:9a:3a:fd:a7:0f:c8:ab:2d:09:3c:af:e3:94:
                    fb:1f:e1:e7:0d:5d:ae:cc:c4:bd:81:44:e9:38:34:
                    a9:97:88:28:af:98:a0:fa:1c:f4:eb:b1:fa:2e:8d:
                    98:f6:f2:8c:e2:db:cb:8c:c1:c7:d9:0b:17:f7:b5:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:62:F6:53:B6:F2:65:3F:BE:31:47:C4:39:47:65:8E:D3:FD:44:E1
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:d0:2e:47:aa:91:a3:d6:df:a0:ee:08:74:11:9b:a6:4c:
         9e:d3:a0:cd:57:8e:32:0d:99:b9:d2:3e:24:1d:28:61:9c:05:
         ab:f4:07:31:9e:9a:40:ac:bb:60:c3:b8:ba:e6:f7:bc:7a:27:
         18:20:b7:a6:f0:bb:e2:fb:23:1b:4d:1a:ce:e7:2e:b8:34:fc:
         1e:bd:d7:fe:78:fe:f9:a6:a3:e4:a4:e0:07:53:b3:cf:b5:36:
         54:16:e8:e7:eb:fa:09:03:9f:b7:b7:13:00:f3:c8:52:68:04:
         08:f3:bb:8b:ba:20:f2:52:3a:9b:a7:0e:e7:fd:09:de:c5:a7:
         41:fd:fa:2c:71:6d:ff:44:08:15:c0:37:46:04:a8:de:6c:38:
         47:b7:5f:d6:22:98:fa:1c:0b:7b:0a:a5:f9:f6:f2:e4:7f:2e:
         b3:39:e1:b4:df:b0:d4:a6:de:0d:be:72:5e:73:2e:67:d6:f5:
         ea:23:02:49:54:e7:ba:ea:c5:b1:23:e7:eb:d2:fc:cd:6b:98:
         ee:82:26:ca:5d:b9:e6:f0:5f:da:55:26:17:74:07:e3:ef:81:
         2e:59:d4:25:17:6f:d3:a8:17:08:ca:a0:aa:50:e6:5c:72:32:
         22:ef:c5:51:00:55:17:0a:4c:f3:32:aa:12:9b:df:a2:5a:14:
         f3:01:b4:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOzGkbd8ygw5CkYgjYlriBmysu64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDIwMTVaFw0yNDA1MTQxNDI1MTVaMDMxMTAvBgNV
BAMTKDkwNjJGNjUzQjZGMjY1M0ZCRTMxNDdDNDM5NDc2NThFRDNGRDQ0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRktZp/GRlY7qvay5cgIB/sPD
KxN8dUcVN1aZgF7K09aB8LSGIF7k3LReH1JcC8d6UDlTNPqGHS5P/yTcEZZDdDgy
YVMEWANNJRoVrYvefsuu2yl89gNVQ02PjbFclILYNetIgyaRy1eqsKVzvddobEwf
b+DS2eQL6mQuxfFto+3+q4Bm1ZHtHK6x626qkOkOPu/T+/oC/AeCysFiw2qNHQRq
BuOKeuvwurkrjBWCJavZszM3y5LxxXG4FdYaBqGTJqQImjr9pw/Iqy0JPK/jlPsf
4ecNXa7MxL2BROk4NKmXiCivmKD6HPTrsfoujZj28ozi28uMwcfZCxf3tX31AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkGL2U7byZT++MUfEOUdljtP9ROEwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1ZMA0GCSqGSIb3DQEBCwUAA4IBAQBWyNAuR6qR
o9bfoO4IdBGbpkye06DNV44yDZm50j4kHShhnAWr9AcxnppArLtgw7i65ve8eicY
ILem8Lvi+yMbTRrO5y64NPwevdf+eP75pqPkpOAHU7PPtTZUFujn6/oJA5+3txMA
88hSaAQI87uLuiDyUjqbpw7n/QnexadB/foscW3/RAgVwDdGBKjebDhHt1/WIpj6
HAt7CqX59vLkfy6zOeG037DUpt4NvnJecy5n1vXqIwJJVOe66sWxI+fr0vzNa5ju
gibKXbnm8F/aVSYXdAfj74EuWdQlF2/TqBcIyqCqUOZccjIi78VRAFUXCkzzMqoS
m9+iWhTzAbQ4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org