Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          TnRUZOYOxTQR+9YB8bwWBJdpmHgx0E5kX84c7EtO3gU=
Subject key identifier:   3B:7E:B7:0D:0D:8F:A9:97:54:DB:BB:8E:AA:C1:27:34:7A:9E:A0:23
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       23B1BC4B8EA554A230D79BE3A3FE5C13AF03EA97
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:28 +0000
ROA not before:           Tue 16 May 2023 14:20:28 +0000
ROA not after:            Tue 14 May 2024 14:25:28 +0000
asID:                     52653
IP address blocks:        177.221.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b1:bc:4b:8e:a5:54:a2:30:d7:9b:e3:a3:fe:5c:13:af:03:ea:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:28 2023 GMT
            Not After : May 14 14:25:28 2024 GMT
        Subject: CN=3B7EB70D0D8FA99754DBBB8EAAC127347A9EA023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:28:e3:b0:f9:90:7f:b3:a2:d2:50:f7:f3:
                    16:4d:b7:e9:71:d4:70:ee:af:d1:86:e1:26:2b:b2:
                    38:e6:c6:ba:8b:6e:96:78:0b:81:d6:2a:cb:28:12:
                    34:ac:b0:31:6b:f7:c2:6b:72:60:34:2d:91:c0:98:
                    25:0c:f1:0e:2d:cd:fd:3c:34:b5:8f:e5:73:2c:ca:
                    37:ac:6e:ce:a1:1d:f4:46:6b:3f:b5:6e:b7:21:cf:
                    07:85:cb:7c:30:ab:b1:9b:83:15:87:47:8f:64:e5:
                    8b:49:ee:83:bd:5c:fc:92:af:da:30:df:f3:75:3b:
                    8b:4d:08:b1:7b:84:5e:1f:26:87:54:bc:ca:68:b3:
                    24:73:a1:11:bd:1a:94:00:c8:e9:d8:13:f7:8f:35:
                    21:1c:58:40:32:83:91:3d:ab:a3:99:e1:27:b1:22:
                    99:8c:9c:9c:59:bc:82:ed:39:5e:62:8f:dd:96:38:
                    63:6a:82:33:63:b9:ef:32:2c:08:a4:13:e8:93:e6:
                    25:3f:68:ae:c6:b1:4b:ce:64:bd:f8:77:b6:f2:68:
                    41:46:80:70:52:4a:47:d6:bb:00:fb:bf:d5:71:aa:
                    ad:c1:f5:2f:5c:b7:75:82:c2:6d:da:bf:5e:68:24:
                    f6:d2:a2:00:86:53:ce:c7:f4:e0:7b:51:62:d9:3c:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:B7:0D:0D:8F:A9:97:54:DB:BB:8E:AA:C1:27:34:7A:9E:A0:23
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:8b:b7:98:05:77:1c:34:08:2e:29:03:52:4c:21:25:42:
         32:c8:1f:86:c9:3c:e5:60:83:9c:c6:51:04:c3:f6:71:c4:dc:
         a7:3b:f4:a3:e8:0a:41:ed:02:97:1c:27:f5:b8:6c:60:3a:fc:
         93:d3:f2:71:91:0f:17:53:40:68:0a:6a:ca:76:38:c4:9f:6e:
         f5:15:16:37:c8:6d:8c:5b:67:4d:b6:5c:1b:86:cf:d4:17:2f:
         59:0a:27:e9:7f:29:3b:09:81:0b:c6:2c:a1:01:e4:c8:79:23:
         21:ab:24:f6:8e:ab:ea:a3:81:13:76:1d:39:94:d1:ed:5d:f5:
         64:49:55:b2:02:7e:1c:7c:95:7f:88:ab:ef:cd:56:1b:9e:e6:
         f1:07:2c:57:e8:e3:36:71:d3:d0:18:ed:fa:a5:2a:96:90:db:
         66:19:5c:e6:91:9f:f6:9e:32:2f:64:03:37:62:a9:78:16:7d:
         e5:23:7b:dc:7e:9c:01:4d:c2:bd:b0:c2:77:ee:28:81:0b:13:
         3e:57:82:c7:4b:58:2b:df:26:8a:87:60:00:cc:be:9c:45:04:
         78:1d:a4:e4:1e:4d:c3:a1:ae:27:5b:ac:2e:f3:8b:34:4e:44:
         86:d3:3e:77:1c:8f:1c:af:1e:6c:ae:5a:1e:8f:95:be:55:45:
         1b:e5:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org