Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          VwpRuiitie4CDSKmOFq3bqTIbcSFpglfBPoHSqwjp3w=
Subject key identifier:   80:B5:A5:BE:2D:9F:62:FF:3E:70:6E:A8:F6:E4:52:E4:B3:CA:85:0E
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       02446049C7AA701CDDFB3273D50E2C65CE2CB413
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:24 +0000
ROA not before:           Tue 16 May 2023 14:20:24 +0000
ROA not after:            Tue 14 May 2024 14:25:24 +0000
asID:                     52653
IP address blocks:        177.221.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:44:60:49:c7:aa:70:1c:dd:fb:32:73:d5:0e:2c:65:ce:2c:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:24 2023 GMT
            Not After : May 14 14:25:24 2024 GMT
        Subject: CN=80B5A5BE2D9F62FF3E706EA8F6E452E4B3CA850E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:c9:bd:71:88:39:d2:27:8e:80:9f:6c:b8:
                    8d:de:fa:c6:ce:b5:97:b7:e7:2f:fe:4c:17:19:70:
                    d7:15:3c:fd:bc:24:8e:da:c2:94:3f:a0:fb:61:49:
                    ba:2e:d8:69:de:b4:3a:73:c2:32:1e:d6:4d:ad:28:
                    91:dd:7c:97:f5:b6:70:f3:f8:98:4a:ed:3d:6d:f2:
                    f5:7b:11:d4:ae:b3:24:53:af:0f:6f:8c:19:06:53:
                    24:b9:ad:e9:fb:44:0e:0e:54:af:8b:10:fa:ba:1d:
                    42:0e:20:a4:70:7b:9a:1c:0e:c5:67:3b:af:41:2d:
                    d5:7d:4b:b6:da:2d:b5:b2:6d:06:68:f8:75:2f:98:
                    84:8c:f1:46:ab:33:3b:e0:eb:0d:09:b0:cd:3e:df:
                    bb:8b:db:6a:84:46:7d:7c:67:30:6c:f5:a1:04:34:
                    81:1c:88:42:78:be:21:c1:75:93:96:47:94:10:e8:
                    03:e0:fb:8f:08:e0:f3:ca:83:d3:a8:e6:be:1d:95:
                    30:07:0b:c1:85:c9:63:23:f9:24:17:a8:b0:16:04:
                    e1:09:15:f0:ee:47:04:f2:3f:fb:79:a2:c8:a4:44:
                    1d:81:5e:a3:25:e1:90:26:3a:2f:e4:a7:63:ce:8b:
                    f6:54:f9:88:28:ac:47:9e:fe:27:9c:84:0a:45:b4:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:A5:BE:2D:9F:62:FF:3E:70:6E:A8:F6:E4:52:E4:B3:CA:85:0E
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:96:12:80:1d:67:5c:bb:8b:3e:b5:bf:51:76:c8:cb:fb:
         4d:82:10:82:02:4f:c4:1e:b6:7f:32:c5:47:9f:08:62:e8:70:
         85:68:7c:64:c2:c4:bd:61:fb:a9:51:71:0f:41:fc:6e:38:4e:
         64:69:6d:d3:c9:b7:37:30:86:58:a5:7a:f8:4a:d7:76:4f:ed:
         c9:7a:10:de:47:8d:9d:5f:fd:5a:bd:35:f4:50:72:23:b0:3d:
         d1:e6:7c:0e:f3:1a:21:ad:e2:7f:44:b8:f8:e8:90:1c:fb:98:
         e5:cd:6a:27:5b:57:64:40:2c:1b:0f:2c:ac:5c:58:18:cd:93:
         d7:ca:57:fd:d7:e8:e0:7d:49:10:45:f4:1d:8c:ac:8d:70:0a:
         ba:6d:8f:e1:5d:f3:85:c2:90:6e:60:eb:4a:ba:e8:df:91:81:
         40:4d:0d:2a:66:80:7d:5c:72:ae:2a:f3:0e:40:f1:d7:0e:99:
         20:82:e6:78:f8:8a:ce:5e:de:e1:b3:db:56:ea:20:1b:1c:90:
         a1:19:85:3b:ee:be:5a:b3:73:80:2c:6b:63:b3:ef:df:28:ee:
         be:77:6a:21:44:cf:2a:74:3b:33:1b:8d:96:95:99:c6:83:06:
         73:b8:7b:d3:aa:d1:24:ad:85:71:00:b0:99:9d:ae:e3:5f:38:
         ac:56:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org