Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39342e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          fHg/eG64SAUK04J5lY/t/TUs2yo3WlfjyUKyyr1wybU=
Subject key identifier:   BC:36:41:97:F2:92:6E:AD:15:EF:C6:41:DA:C2:CA:DF:D5:A6:33:84
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       777EBE4D0971193CE27133A402014761440F204F
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:25:37 +0000
ROA not before:           Tue 16 May 2023 14:20:37 +0000
ROA not after:            Tue 14 May 2024 14:25:37 +0000
asID:                     52653
IP address blocks:        177.221.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7e:be:4d:09:71:19:3c:e2:71:33:a4:02:01:47:61:44:0f:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:20:37 2023 GMT
            Not After : May 14 14:25:37 2024 GMT
        Subject: CN=BC364197F2926EAD15EFC641DAC2CADFD5A63384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:c6:a3:27:2e:05:c7:c2:88:29:5c:3c:12:
                    bc:11:11:f5:ce:82:e5:93:57:dc:65:31:c1:7e:b1:
                    4a:a7:78:f8:ef:a0:d6:13:7e:05:04:50:84:c9:36:
                    12:f7:cb:00:38:7b:98:32:54:96:04:1c:31:fa:30:
                    39:86:de:1e:9a:e6:36:49:bf:3b:d8:b3:fb:7f:2e:
                    e1:09:0b:ed:bb:55:2b:4b:41:7a:3c:dc:40:19:d4:
                    ef:f5:9d:84:95:b3:57:9b:ba:93:5a:6a:60:45:dd:
                    32:56:06:99:82:d9:dd:a3:69:2e:21:86:b6:4e:9b:
                    8e:7a:23:56:96:93:e2:31:a1:ff:54:71:47:b5:14:
                    c2:c8:9f:30:08:37:a9:7d:b8:73:36:a9:33:de:62:
                    16:d1:91:df:8d:59:9a:a4:bc:12:d5:eb:e0:ff:44:
                    c3:fe:e9:a5:33:bd:55:3d:65:0a:64:93:f4:44:66:
                    76:44:5f:2c:9f:4c:11:e7:dc:84:c4:df:42:76:35:
                    b3:ee:d3:e6:a5:be:99:0b:da:c5:f6:cf:89:f3:70:
                    1f:be:34:49:83:c1:0f:25:3e:8c:20:53:4e:03:4f:
                    cc:c7:ea:35:56:23:eb:de:eb:1a:2e:7c:8d:96:4b:
                    2d:18:63:93:9c:c4:b9:00:01:1f:5a:24:fb:0e:df:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:36:41:97:F2:92:6E:AD:15:EF:C6:41:DA:C2:CA:DF:D5:A6:33:84
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:fd:c8:fc:54:32:73:c7:12:f2:fc:8f:66:f9:57:d0:21:c3:
         79:38:10:54:06:58:61:81:43:6a:85:4b:04:76:dd:3c:d2:5e:
         46:74:14:21:67:c2:3c:81:c8:2e:e8:9e:b7:eb:86:85:d7:ac:
         d0:bd:78:8b:86:bb:17:c4:c4:9c:35:c4:7f:0a:65:07:25:34:
         1a:06:5a:3b:b5:40:22:8d:fa:e3:14:d6:be:e0:28:06:a8:15:
         01:9a:fd:24:b7:1b:2a:32:9f:95:a3:b0:fb:c5:3a:83:46:67:
         6c:bd:e3:48:83:55:c1:8b:fa:47:8d:31:70:2a:4f:b3:bb:68:
         e0:91:c0:b4:5c:57:7a:5a:cd:76:df:20:7c:99:85:a1:1c:2d:
         e3:1e:18:32:ab:db:fd:55:a9:b7:02:92:e4:a1:14:c9:81:b3:
         91:4c:36:86:e7:70:30:db:4c:2f:3c:f4:26:67:84:2c:7a:f9:
         57:e5:9b:fc:01:8e:e7:31:04:60:1f:48:9b:41:fd:8a:5f:a8:
         14:78:55:1b:25:1f:71:47:76:fc:aa:ee:89:f1:af:10:f9:5b:
         1e:a4:52:a7:85:1f:24:33:b8:0d:a5:4c:f8:97:66:b6:f6:d6:
         8a:c5:2f:45:60:80:bc:6a:8a:47:b1:b9:9b:89:ba:eb:a3:0e:
         72:3e:72:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd36+TQlxGTzicTOkAgFHYUQPIE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDIwMzdaFw0yNDA1MTQxNDI1MzdaMDMxMTAvBgNV
BAMTKEJDMzY0MTk3RjI5MjZFQUQxNUVGQzY0MURBQzJDQURGRDVBNjMzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8MajJy4Fx8KIKVw8ErwREfXO
guWTV9xlMcF+sUqnePjvoNYTfgUEUITJNhL3ywA4e5gyVJYEHDH6MDmG3h6a5jZJ
vzvYs/t/LuEJC+27VStLQXo83EAZ1O/1nYSVs1ebupNaamBF3TJWBpmC2d2jaS4h
hrZOm456I1aWk+Ixof9UcUe1FMLInzAIN6l9uHM2qTPeYhbRkd+NWZqkvBLV6+D/
RMP+6aUzvVU9ZQpkk/REZnZEXyyfTBHn3ITE30J2NbPu0+alvpkL2sX2z4nzcB++
NEmDwQ8lPowgU04DT8zH6jVWI+ve6xoufI2WSy0YY5OcxLkAAR9aJPsO37GTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvDZBl/KSbq0V78ZB2sLK39WmM4QwHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzNzM3MmUzMjMyMzEyZTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsd1eMA0GCSqGSIb3DQEBCwUAA4IBAQAr/cj8VDJz
xxLy/I9m+VfQIcN5OBBUBlhhgUNqhUsEdt080l5GdBQhZ8I8gcgu6J6364aF16zQ
vXiLhrsXxMScNcR/CmUHJTQaBlo7tUAijfrjFNa+4CgGqBUBmv0ktxsqMp+Vo7D7
xTqDRmdsveNIg1XBi/pHjTFwKk+zu2jgkcC0XFd6Ws123yB8mYWhHC3jHhgyq9v9
Vam3ApLkoRTJgbORTDaG53Aw20wvPPQmZ4QsevlX5Zv8AY7nMQRgH0ibQf2KX6gU
eFUbJR9xR3b8qu6J8a8Q+VsepFKnhR8kM7gNpUz4l2a29taKxS9FYIC8aopHsbmb
ibrrow5yPnI3
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org