Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          HKt3ikAQYN7r52j7VVXngUw5FV/lWDdZDkLGE+Yz9NM=
Subject key identifier:   9B:44:76:67:CD:52:CD:FB:F8:8E:13:B0:C5:15:09:C9:EE:14:85:86
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       5B4C5885C11EAB5B902E0344A60847586604FAD1
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:21 +0000
ROA not before:           Tue 16 May 2023 14:20:21 +0000
ROA not after:            Tue 14 May 2024 14:25:21 +0000
asID:                     52653
IP address blocks:        177.221.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4c:58:85:c1:1e:ab:5b:90:2e:03:44:a6:08:47:58:66:04:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:21 2023 GMT
            Not After : May 14 14:25:21 2024 GMT
        Subject: CN=9B447667CD52CDFBF88E13B0C51509C9EE148586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:e8:c2:24:c2:dd:7a:a7:c5:d3:6b:5e:32:
                    22:bf:69:54:f4:31:da:83:a9:8f:72:63:c4:1c:7c:
                    ce:2f:87:6e:ea:3b:2e:a7:19:32:e5:34:1d:2d:2d:
                    50:25:2c:93:ff:c8:70:f2:d4:eb:a0:34:87:0e:15:
                    1c:2b:cf:e4:6c:6f:a6:43:af:51:ec:12:99:6b:f2:
                    0a:08:b3:dc:84:d3:15:94:ed:55:0d:0b:d4:a0:c6:
                    bf:68:e3:d0:24:09:62:63:59:7f:05:1a:36:c4:f0:
                    e8:59:62:17:4d:e6:9c:d7:fd:64:be:7e:4c:ee:0f:
                    64:84:a4:07:61:ff:23:29:ee:a3:57:ea:91:76:4e:
                    55:7a:d9:42:69:63:e8:70:04:b9:0b:40:32:01:92:
                    99:4d:5b:58:e1:8f:13:28:89:e4:c9:f8:ed:68:c5:
                    d1:e8:19:fd:68:ea:74:f3:15:12:d4:aa:96:26:33:
                    e2:0d:6e:9a:ca:a9:a6:39:b9:20:b6:cf:c0:e7:d6:
                    fd:9a:65:a3:88:2d:cf:ef:0f:13:fd:38:69:fa:45:
                    d0:bb:be:8e:ba:9f:94:8f:68:96:47:f1:8a:ba:bb:
                    f0:86:d4:7b:7e:f0:6f:67:97:fd:0e:e0:46:1d:e8:
                    3c:e3:27:97:62:39:28:94:5c:46:06:b1:8a:3a:72:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:76:67:CD:52:CD:FB:F8:8E:13:B0:C5:15:09:C9:EE:14:85:86
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:db:72:db:69:62:59:e8:56:b5:4f:85:ef:ce:a3:34:40:1d:
         30:c1:fe:91:5b:94:b7:93:9d:27:b8:d0:d5:a4:2f:21:dc:ea:
         d2:42:fc:97:5c:5b:d0:cc:c6:3d:86:29:e5:e8:f0:56:64:ec:
         bd:4c:48:b9:9b:1a:ad:d7:12:9c:77:35:3d:95:2a:47:22:45:
         70:e7:18:1c:9e:45:f5:e1:68:5c:32:53:d1:dd:68:ca:c3:fd:
         02:bd:31:a3:5b:26:f2:28:5d:2b:4e:7d:72:fa:6f:d3:57:d2:
         76:11:6b:f2:e5:ea:34:0b:93:c6:f2:ae:dd:fa:91:b6:8c:c9:
         06:7c:44:9b:88:17:d4:e5:eb:4d:5c:f8:13:1c:09:9f:a8:0c:
         d7:65:5d:a6:52:6a:d7:c5:2a:e5:a3:80:d1:15:9f:75:02:4a:
         73:b9:a8:44:28:86:3b:92:7c:69:5f:51:eb:10:4b:3e:65:dd:
         48:ee:84:44:74:cf:61:be:51:a5:4b:fc:1a:55:3c:8f:99:b9:
         60:64:ca:e6:25:2e:46:45:e8:de:e3:e4:0f:5b:41:f6:75:92:
         f7:ad:6f:d8:95:c0:d3:b6:55:7f:23:5f:a5:5a:1b:d9:b2:32:
         da:69:5a:c9:86:63:f0:bc:40:78:84:23:40:71:98:f8:90:1d:
         b3:9c:9c:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW0xYhcEeq1uQLgNEpghHWGYE+tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDIwMjFaFw0yNDA1MTQxNDI1MjFaMDMxMTAvBgNV
BAMTKDlCNDQ3NjY3Q0Q1MkNERkJGODhFMTNCMEM1MTUwOUM5RUUxNDg1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzujCJMLdeqfF02teMiK/aVT0
MdqDqY9yY8QcfM4vh27qOy6nGTLlNB0tLVAlLJP/yHDy1OugNIcOFRwrz+Rsb6ZD
r1HsEplr8goIs9yE0xWU7VUNC9Sgxr9o49AkCWJjWX8FGjbE8OhZYhdN5pzX/WS+
fkzuD2SEpAdh/yMp7qNX6pF2TlV62UJpY+hwBLkLQDIBkplNW1jhjxMoieTJ+O1o
xdHoGf1o6nTzFRLUqpYmM+INbprKqaY5uSC2z8Dn1v2aZaOILc/vDxP9OGn6RdC7
vo66n5SPaJZH8Yq6u/CG1Ht+8G9nl/0O4EYd6DzjJ5diOSiUXEYGsYo6cpG/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm0R2Z81Szfv4jhOwxRUJye4UhYYwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1aMA0GCSqGSIb3DQEBCwUAA4IBAQA523LbaWJZ
6Fa1T4XvzqM0QB0wwf6RW5S3k50nuNDVpC8h3OrSQvyXXFvQzMY9hinl6PBWZOy9
TEi5mxqt1xKcdzU9lSpHIkVw5xgcnkX14WhcMlPR3WjKw/0CvTGjWybyKF0rTn1y
+m/TV9J2EWvy5eo0C5PG8q7d+pG2jMkGfESbiBfU5etNXPgTHAmfqAzXZV2mUmrX
xSrlo4DRFZ91AkpzuahEKIY7knxpX1HrEEs+Zd1I7oREdM9hvlGlS/waVTyPmblg
ZMrmJS5GReje4+QPW0H2dZL3rW/YlcDTtlV/I1+lWhvZsjLaaVrJhmPwvEB4hCNA
cZj4kB2znJzH
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org