Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3137392e34392e3234392e302f32342d3234203d3e20323731323231.roa
File:                     3137392e34392e3234392e302f32342d3234203d3e20323731323231.roa (raw, json)
Hash identifier:          likg72rObCCAjUsYlEmSvwXOWJ21jhZG+32BKyGNRb0=
Subject key identifier:   93:8D:48:90:F0:AE:B6:88:FA:A6:34:BE:8F:7E:7C:51:8B:88:DA:E0
Certificate issuer:       /CN=3499771B5EB4066540F215449553AD5B4EB27176
Certificate serial:       49AF7E21E465C6F22CC6AED22509A2EFF6EE5C04
Authority key identifier: 34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3499771B5EB4066540F215449553AD5B4EB27176.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3137392e34392e3234392e302f32342d3234203d3e20323731323231.roa
Signing time:             Tue 15 Aug 2023 12:45:06 +0000
ROA not before:           Tue 15 Aug 2023 12:40:06 +0000
ROA not after:            Tue 13 Aug 2024 12:45:06 +0000
asID:                     271221
IP address blocks:        179.49.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:7e:21:e4:65:c6:f2:2c:c6:ae:d2:25:09:a2:ef:f6:ee:5c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3499771B5EB4066540F215449553AD5B4EB27176
        Validity
            Not Before: Aug 15 12:40:06 2023 GMT
            Not After : Aug 13 12:45:06 2024 GMT
        Subject: CN=938D4890F0AEB688FAA634BE8F7E7C518B88DAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:da:d1:36:e7:b0:14:4a:52:8a:ba:50:0a:
                    ae:5d:f8:f3:bb:4e:05:78:16:b5:cc:8f:56:70:a1:
                    d7:ad:9d:a8:31:b1:b8:63:64:d7:07:5a:8e:07:8c:
                    e5:ac:9e:db:43:55:9b:88:5a:ea:3d:f7:71:76:ff:
                    ec:e2:39:9b:c2:7a:ba:dd:ed:26:0b:02:9e:dd:ae:
                    b4:61:b8:8f:18:9f:6d:4b:5b:23:51:19:09:db:18:
                    fa:cd:ca:11:de:68:03:76:c9:fc:d1:0b:c8:b3:76:
                    5c:7d:64:4e:1c:05:4b:70:1b:86:79:04:45:58:8c:
                    63:a7:23:d1:32:99:38:cf:31:9a:36:6b:cd:ce:c8:
                    bb:6d:a6:32:be:6c:0a:0a:29:13:68:9b:8d:46:98:
                    f5:81:71:59:55:94:2d:7e:34:8d:91:9c:65:46:06:
                    ff:f7:7d:0d:8e:32:f1:cd:46:bb:d1:c6:e3:49:01:
                    e7:b9:c9:0f:f0:e0:03:79:49:6a:18:69:c3:e2:3d:
                    13:96:fa:5c:59:1f:4a:04:93:c0:d4:14:ce:43:b0:
                    7a:14:f9:bd:c8:1b:bb:11:ac:cc:bf:0b:73:c4:6e:
                    1a:c6:70:56:20:82:88:0c:ab:a4:fa:8a:2b:3f:6d:
                    98:08:90:51:56:af:cc:8f:c9:4a:03:a3:b7:50:aa:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:48:90:F0:AE:B6:88:FA:A6:34:BE:8F:7E:7C:51:8B:88:DA:E0
            X509v3 Authority Key Identifier:
                keyid:34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3499771B5EB4066540F215449553AD5B4EB27176.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3137392e34392e3234392e302f32342d3234203d3e20323731323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:92:a8:19:f6:ab:50:eb:fd:8c:0d:c8:3c:14:00:54:c5:
         7d:78:49:96:e1:9e:e6:1b:e4:f9:7e:34:f9:83:f3:7e:8b:a6:
         b4:71:c2:ed:8e:ee:36:51:44:8f:d8:4f:41:cb:41:c6:ed:e5:
         10:ff:4b:9c:08:f0:c4:61:05:8c:bf:1e:8f:eb:89:d5:8c:ae:
         5e:df:23:7a:e5:b7:2b:54:d2:5a:90:15:53:a8:7e:6d:d4:82:
         e1:ce:1b:01:cc:69:81:7e:3f:23:18:da:38:39:0c:7b:a2:ab:
         e0:b3:32:17:2a:c3:95:24:a8:43:9d:ac:df:3f:cc:bc:9f:e7:
         4e:35:ff:30:8c:b4:c8:25:40:72:4b:d8:44:5a:0c:e2:fb:b4:
         be:63:ef:18:47:10:dd:19:cd:e5:e1:bd:bd:54:ea:3e:9b:06:
         45:8b:c8:3a:59:9c:d1:7b:a2:13:62:1e:64:47:1b:eb:cb:f7:
         54:9d:a5:77:f5:ae:68:49:1e:5d:b0:91:a0:38:78:3e:c6:06:
         7c:59:74:36:84:3b:26:55:d8:69:88:e3:62:fd:e1:7c:85:c9:
         44:2e:29:70:2a:64:06:d9:6a:b7:ee:76:01:c5:b9:c8:cc:2a:
         ec:39:b5:0e:02:1a:f7:8d:04:5a:de:ce:f8:25:a8:e0:b4:4b:
         cf:ed:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org