Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          08bYm13RFkNcMcvZyiqsxk6N5FgRJHayiydOX869SV4=
Subject key identifier:   65:40:0D:B1:00:B6:02:CB:3B:B2:7B:CC:29:14:00:19:F1:AB:E0:00
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       060AC6F47075FA303989D055ECB3383FB6207A87
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:31 +0000
ROA not before:           Tue 16 May 2023 14:20:31 +0000
ROA not after:            Tue 14 May 2024 14:25:31 +0000
asID:                     52653
IP address blocks:        177.221.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0a:c6:f4:70:75:fa:30:39:89:d0:55:ec:b3:38:3f:b6:20:7a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:31 2023 GMT
            Not After : May 14 14:25:31 2024 GMT
        Subject: CN=65400DB100B602CB3BB27BCC29140019F1ABE000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:32:88:65:ae:70:17:cc:96:b4:22:af:ac:
                    19:0a:04:ee:bb:8d:af:e6:56:22:40:0f:74:5e:bb:
                    ba:96:7f:e1:7b:85:f8:ee:8e:9f:35:26:79:5a:f4:
                    cb:06:53:5d:8f:05:d0:43:2f:3f:e8:64:da:58:68:
                    f1:e0:53:bd:29:8b:6c:25:95:64:89:bb:4f:2f:6d:
                    b9:c2:cd:fc:12:f6:90:eb:8a:9a:d0:34:b3:7f:75:
                    73:ba:35:03:72:10:9f:db:f9:36:24:ba:08:fb:ad:
                    e1:44:5f:ab:e5:28:9c:19:63:40:46:6d:f4:d7:e3:
                    7c:24:21:0f:aa:65:a8:29:fd:16:83:30:86:bd:ab:
                    4c:fe:11:17:14:41:12:80:ba:3b:06:03:72:a2:8e:
                    71:46:6e:b3:3e:99:a0:4b:b2:f4:e6:8c:62:b5:86:
                    d5:b7:00:34:ab:87:74:f7:68:da:52:93:8d:d8:f1:
                    a2:b6:0e:c7:bb:74:d9:c6:44:3f:66:e2:be:4c:71:
                    24:0c:8f:73:f8:09:c7:37:73:f5:64:9f:05:c1:32:
                    81:84:af:be:85:06:88:cd:0d:b8:a8:0e:53:ea:5e:
                    88:54:d4:24:65:0b:d4:ea:a5:50:99:4f:06:75:f0:
                    b1:15:c7:3e:25:5e:26:6d:a6:a7:e5:38:b1:c5:83:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:0D:B1:00:B6:02:CB:3B:B2:7B:CC:29:14:00:19:F1:AB:E0:00
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:3f:1e:b1:2b:4f:41:59:c4:44:b3:00:b0:9c:59:ca:8d:
         b1:d3:bb:b5:35:af:6c:72:a3:5b:67:77:0f:69:ea:bf:d7:3a:
         87:1e:e2:43:ee:62:2c:67:cc:f9:49:f5:1c:80:41:77:0a:d9:
         09:98:d0:25:9d:8b:75:48:8f:74:bc:6e:f7:f0:8b:ea:ee:67:
         d0:d6:f4:66:02:ba:cf:28:7b:e6:78:1c:bb:41:39:7f:94:47:
         75:a1:37:5b:69:81:c9:b0:d2:61:3a:7d:0a:30:9e:d5:59:ed:
         50:9d:4a:c7:d6:80:dc:7e:69:26:7b:4d:bd:af:52:8b:c4:62:
         6c:6e:78:c9:a4:5b:db:78:c6:23:89:2b:41:c8:a9:ee:37:56:
         2e:f4:60:0f:3c:bf:75:6a:b5:71:9f:9c:a5:92:a4:bf:e9:a4:
         ad:bd:02:c5:06:65:4d:06:51:f2:fc:dd:a6:13:3c:3f:67:57:
         9b:48:84:91:a0:01:05:23:ac:ef:67:a3:61:c3:0b:3b:6c:74:
         95:7c:81:35:43:e0:92:9f:03:ac:9e:3b:8f:50:4a:cb:84:cc:
         75:12:52:a0:ad:0d:05:4a:28:84:00:43:c8:24:2f:bb:ca:7d:
         9c:81:70:a8:71:5b:e7:fc:91:92:a6:c8:cc:78:93:d7:d6:9a:
         0e:ce:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:43 2025 by rpki-client