Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          Jt6+vWuy411r00X6RyRuB/0MVuycqVV7ldltI8X4+kM=
Subject key identifier:   BF:DB:08:A0:26:CF:5D:AC:35:E6:9E:DE:20:48:01:44:0D:69:C8:CB
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       624FD5B224D986B3E5894585C77697182DB9ACB5
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:34 +0000
ROA not before:           Tue 16 May 2023 14:20:34 +0000
ROA not after:            Tue 14 May 2024 14:25:34 +0000
asID:                     52653
IP address blocks:        177.221.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:d5:b2:24:d9:86:b3:e5:89:45:85:c7:76:97:18:2d:b9:ac:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:34 2023 GMT
            Not After : May 14 14:25:34 2024 GMT
        Subject: CN=BFDB08A026CF5DAC35E69EDE204801440D69C8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:95:15:60:ea:20:0e:76:48:9f:63:dc:64:
                    41:1d:6a:76:9b:19:64:c0:33:3f:74:37:6d:ce:69:
                    66:ee:ce:53:26:7e:ff:71:46:02:f6:94:ec:3c:30:
                    e4:63:83:aa:c6:33:e4:6c:af:68:81:0b:b7:e0:23:
                    ca:fa:c9:3e:d8:66:3b:3e:d0:a1:5a:ae:0b:53:0a:
                    b5:9f:4e:eb:0a:68:7b:44:06:b8:bf:1e:ee:51:e3:
                    bf:10:a1:02:85:98:8f:bb:7d:66:e2:0b:04:ff:57:
                    27:e4:ec:ee:05:a8:27:0d:c5:7e:1c:fe:c9:1f:9f:
                    41:80:70:6d:38:8e:c7:08:99:2a:44:f3:2f:7d:d8:
                    cf:12:f7:e1:b5:50:3a:0b:92:55:9f:36:97:06:e6:
                    64:05:b1:cc:85:af:eb:3a:e3:09:8f:d8:ab:8b:0f:
                    a6:90:d4:29:d0:49:54:b2:93:c9:ec:36:15:92:f9:
                    d4:7a:2e:9b:12:74:71:2f:fa:44:17:45:a1:c8:47:
                    78:56:ab:1c:a2:a9:75:ac:32:f3:28:c4:a3:f2:27:
                    01:c7:4f:1c:82:da:00:76:d3:b7:4b:1e:3b:9a:59:
                    18:1d:da:22:e8:5f:7e:89:c5:0e:e2:70:84:a2:22:
                    b9:a3:7a:e0:16:f7:37:0f:4d:d4:3a:19:03:e6:af:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:08:A0:26:CF:5D:AC:35:E6:9E:DE:20:48:01:44:0D:69:C8:CB
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:34:b2:cd:1a:52:4e:56:9c:63:65:52:b2:9a:63:de:b0:
         68:46:13:d0:cd:20:a5:d0:39:98:56:58:72:30:88:c3:37:14:
         41:fe:d9:6f:4f:49:90:15:f0:13:eb:a1:71:63:63:18:ab:fd:
         3c:de:ae:f7:f3:2c:a8:2f:c5:43:29:d9:2f:d2:96:33:39:2a:
         e5:6b:7b:cb:ba:7b:25:a1:52:d4:02:36:ec:d4:9d:89:95:88:
         3b:9c:2d:e8:be:5a:47:0d:3a:4b:0b:00:f2:e6:ea:48:36:df:
         2f:6a:6e:4b:2b:29:fd:48:e8:a2:91:d8:10:2c:a2:cb:f0:30:
         91:77:18:11:e8:1f:db:cb:5f:f1:4a:15:12:b5:be:a2:7f:1a:
         40:a1:eb:01:c9:32:1d:4c:74:1e:d0:af:84:1e:34:b6:a7:bc:
         ce:7d:87:38:20:4d:8e:cd:6e:3f:a0:1c:f6:ee:59:7a:a7:5d:
         02:a9:d0:e4:1c:af:35:64:87:73:65:36:a9:dc:af:3a:d6:bc:
         b7:13:c8:81:b7:52:e0:fd:83:6d:a1:77:a3:8d:7d:6b:0c:a2:
         d7:69:7e:bc:cf:93:1c:22:9b:b6:f6:9e:b2:2c:2e:ba:3f:05:
         4e:ed:0a:a1:4a:2f:9b:64:e1:23:53:b3:62:25:45:20:5e:a8:
         7d:f6:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org