Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32322d3232203d3e20323632393039.roa
File:                     3137372e33362e34382e302f32322d3232203d3e20323632393039.roa (raw, json)
Hash identifier:          hhvR2RfvqDveeX20go1JSv790y181BijsAx8SrC53cc=
Subject key identifier:   21:3F:57:03:03:3F:69:4C:4F:07:81:AD:D0:43:8E:D0:28:42:96:B1
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       3B179A4C48250D189CA3F9F0B28B50CE7E460EC9
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32322d3232203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:32:34 +0000
ROA not before:           Tue 24 May 2022 19:27:34 +0000
ROA not after:            Tue 23 May 2023 19:32:34 +0000
asID:                     262909
IP address blocks:        177.36.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:17:9a:4c:48:25:0d:18:9c:a3:f9:f0:b2:8b:50:ce:7e:46:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:27:34 2022 GMT
            Not After : May 23 19:32:34 2023 GMT
        Subject: CN=213F5703033F694C4F0781ADD0438ED0284296B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:38:de:66:25:3a:09:09:3f:26:fc:0e:56:
                    e3:5b:3d:99:4f:16:ad:07:15:8e:ab:ca:96:ef:39:
                    c6:56:4b:da:bd:8b:7b:4e:bd:60:13:1f:53:4d:71:
                    42:0d:25:17:2b:d1:e9:25:ac:a0:ea:32:7b:d4:27:
                    b2:a0:ec:99:5c:21:d1:bd:55:29:d2:0f:35:35:24:
                    ff:cf:02:06:a3:63:ca:b4:d3:83:c5:94:de:a2:c9:
                    14:b2:19:a9:f7:e3:65:da:64:3d:9a:86:59:c5:1b:
                    5e:c4:33:52:64:c6:ec:6a:33:14:29:62:f2:c3:45:
                    53:7c:95:4c:b7:3b:8b:8f:bf:43:7c:2f:e7:90:f0:
                    16:96:36:f7:1f:62:74:10:e2:ff:bc:e9:69:f0:ea:
                    e0:f8:a6:29:76:c0:a3:14:69:60:45:a6:f9:e7:a2:
                    6b:d7:f0:eb:59:06:6c:d4:f9:5d:58:e5:d0:b3:b9:
                    72:9a:d3:c7:65:29:aa:d8:94:87:c1:8d:ea:4b:77:
                    bc:d5:3f:c6:68:63:23:fc:30:33:2d:b3:18:7c:92:
                    5a:b9:f7:ed:96:78:1a:a7:a8:d6:a3:13:31:4d:a3:
                    dc:c2:12:90:26:ed:41:5d:44:1f:95:87:c2:b8:47:
                    22:45:11:c7:48:3a:73:67:26:79:26:55:e3:27:6d:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3F:57:03:03:3F:69:4C:4F:07:81:AD:D0:43:8E:D0:28:42:96:B1
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32322d3232203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:9c:0c:34:53:33:b9:8d:1e:55:5d:e3:59:87:17:95:7b:
         1f:ce:d9:fc:4b:8d:14:aa:d5:40:f1:ca:0b:01:c9:a9:34:28:
         96:73:ba:61:b5:1a:f2:26:e2:db:6e:0f:96:6f:97:4d:a1:25:
         6a:37:31:31:22:f9:da:83:f8:50:3d:ad:ce:1a:0d:5d:dc:78:
         e8:ea:63:c2:6a:da:e6:2a:e9:74:33:a5:01:fa:d8:1f:47:98:
         84:df:79:9b:b7:c0:b4:78:1b:36:3e:b8:20:2f:5a:d4:cd:5d:
         f3:04:82:fa:8c:da:b0:e3:84:d2:57:0a:11:8f:de:bf:d9:b6:
         e2:5d:4c:ee:fd:0f:81:d5:83:9d:f4:9f:bc:14:c6:57:ca:a1:
         0d:b5:f1:9e:16:f9:58:00:37:a7:ec:b3:b7:65:f4:19:37:b8:
         b0:5e:ee:40:cb:cb:f4:d8:8b:75:af:c6:0b:56:dd:d6:db:75:
         c2:09:7e:ac:06:2c:53:16:c6:5d:a6:fb:f8:ac:18:de:46:54:
         71:d1:59:6d:ff:62:04:03:6e:20:21:c0:37:d1:d8:27:4e:13:
         0e:b8:44:23:c6:21:6c:60:8d:61:37:32:22:c3:e7:85:f3:ae:
         c9:b5:a5:d9:e3:a7:7c:61:e5:7b:b9:aa:d8:85:28:56:b6:f2:
         8f:5a:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org