Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          l9Q7hDkCxJvOcexWs78Gs8vJ32MnMGuWrcztqSXs6oc=
Subject key identifier:   AA:5D:C2:F3:A4:1F:82:9B:DE:00:C7:B9:16:87:5F:42:BB:5F:97:5E
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       5AC87B92C8DBC3812BFBB1346CA625225FFB3CA3
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:32 +0000
ROA not before:           Tue 16 May 2023 14:19:32 +0000
ROA not after:            Tue 14 May 2024 14:24:32 +0000
asID:                     52653
IP address blocks:        177.221.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c8:7b:92:c8:db:c3:81:2b:fb:b1:34:6c:a6:25:22:5f:fb:3c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:32 2023 GMT
            Not After : May 14 14:24:32 2024 GMT
        Subject: CN=AA5DC2F3A41F829BDE00C7B916875F42BB5F975E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:bf:71:15:d5:43:09:d2:b9:19:84:b0:05:
                    ab:1c:83:f1:8e:99:99:02:e4:a3:b3:f0:be:7b:80:
                    b6:6f:0f:dc:6f:8c:a5:ac:75:96:fb:17:19:c2:db:
                    d6:5f:e9:67:38:70:20:15:36:2f:c0:60:5e:9a:d6:
                    58:08:4e:70:6f:ae:95:7a:a3:4e:65:f3:7f:0b:91:
                    6b:d0:18:f8:79:b8:76:16:0d:80:b5:2f:ac:e7:04:
                    9f:79:b2:67:2b:b0:07:99:fe:0e:ad:36:dd:f2:fb:
                    7c:d6:32:8c:00:ae:e5:85:ad:74:2e:15:84:e2:c6:
                    f7:98:75:5a:5d:91:e2:2d:d8:cf:d1:68:7b:e7:5c:
                    4a:88:b7:20:3d:fe:f6:21:5c:40:2c:87:db:34:a2:
                    69:2a:2e:09:98:ad:b3:76:6b:2f:e4:3f:ad:a4:ee:
                    68:f9:f3:c4:9b:71:7e:5c:70:cf:a7:8c:2b:0c:0b:
                    0f:01:3e:47:9f:e1:f6:0a:11:b6:28:66:66:91:7d:
                    5d:f5:99:96:7a:37:ac:9c:1a:05:e3:11:c7:79:e6:
                    32:19:5c:e7:2c:1a:5f:73:60:47:39:50:b7:37:70:
                    8a:7d:76:a3:68:af:b9:c2:a9:71:da:f8:c9:11:43:
                    a3:e3:fb:9a:63:44:42:69:5b:e5:ab:bb:95:3b:89:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:C2:F3:A4:1F:82:9B:DE:00:C7:B9:16:87:5F:42:BB:5F:97:5E
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:3c:b8:07:ab:da:20:d3:15:1f:1c:7f:f9:a6:68:37:3a:
         8f:62:f3:b9:db:44:72:47:fc:6c:74:99:a0:3b:5f:75:87:07:
         86:2e:cb:3a:4a:ac:20:94:0c:5c:e3:4d:75:1a:55:14:a3:14:
         09:02:83:98:fb:70:03:95:60:e9:02:6d:cc:d5:4d:ed:f6:d5:
         d7:a3:d9:5b:98:6a:78:43:31:c2:d0:bc:86:00:84:7e:d0:e7:
         58:11:22:4e:26:9c:53:d1:8e:90:77:33:c3:f0:9f:2a:3f:83:
         90:2c:34:f4:90:1c:b9:4b:8e:c9:5a:18:22:99:e8:b6:f4:d7:
         b7:55:23:06:54:7d:99:6d:94:c4:c8:e4:17:c6:8d:6a:79:3f:
         76:d7:c3:fa:e6:6b:74:ee:22:aa:b3:0c:ff:40:80:c4:83:21:
         ae:3c:da:1a:d2:04:7a:6b:06:f4:d6:38:4a:95:d5:a5:2b:20:
         6e:26:ee:23:21:62:2b:97:65:68:8a:1c:5e:1b:29:9d:d8:b5:
         71:c4:93:9a:c0:e8:00:44:3e:33:94:a9:52:99:5d:25:af:7c:
         ad:6c:fe:e1:7c:67:cb:1c:53:ad:31:ad:5c:21:4c:94:b1:5a:
         72:1e:10:e7:80:a5:75:70:d1:6d:b3:0d:6c:b6:fc:b6:a8:c7:
         44:4c:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:15:36 2025 by rpki-client