Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32332d3234203d3e20323632393039.roa
File:                     3137372e33362e34382e302f32332d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          P2UzHYhNd/f/2HJsn2jH6GygT8BQNQLXBpN1l9vdtPo=
Subject key identifier:   BC:A7:75:91:55:50:5A:17:48:CD:D4:4C:7C:81:03:16:45:AE:9C:57
Certificate issuer:       /CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
Certificate serial:       7821F53B84C8B40B01667BFF46A01AE422B8DE2B
Authority key identifier: 8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32332d3234203d3e20323632393039.roa
Signing time:             Mon 30 May 2022 12:28:11 +0000
ROA not before:           Mon 30 May 2022 12:23:11 +0000
ROA not after:            Mon 29 May 2023 12:28:11 +0000
asID:                     262909
IP address blocks:        177.36.48.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:21:f5:3b:84:c8:b4:0b:01:66:7b:ff:46:a0:1a:e4:22:b8:de:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
        Validity
            Not Before: May 30 12:23:11 2022 GMT
            Not After : May 29 12:28:11 2023 GMT
        Subject: CN=BCA7759155505A1748CDD44C7C81031645AE9C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:50:d4:c1:4e:ea:47:b3:3f:74:38:b5:9b:
                    a6:23:c5:da:29:f1:0f:7e:8e:ee:cd:77:93:57:19:
                    86:3b:38:80:53:52:c5:d8:9c:76:83:6a:41:5c:1a:
                    d5:b0:0c:52:56:e0:d2:e5:01:37:1a:3a:82:f0:1e:
                    92:e7:69:9c:f4:79:e7:f2:a9:25:08:e6:52:95:76:
                    76:cb:b5:4e:16:96:e9:99:33:12:2d:29:40:bb:10:
                    a1:33:c3:9e:37:bf:6b:ee:6b:0b:1f:48:b2:ed:8a:
                    e1:8c:da:4c:e8:27:86:35:95:00:1a:88:08:39:66:
                    50:2a:03:46:1b:de:1d:8b:50:1a:ee:cd:fa:8f:0e:
                    2e:b6:5e:35:2b:7c:77:7c:21:74:e7:92:84:8f:e5:
                    8c:0a:1a:8b:b9:11:cb:24:f8:f9:45:47:a1:4a:2f:
                    51:19:1e:76:fb:54:4d:cd:ea:56:94:db:c9:2a:cf:
                    3a:62:62:0c:bf:43:b3:85:ff:5d:80:71:68:33:a5:
                    0c:98:8e:cf:d0:d7:b2:a9:19:d9:de:93:2d:08:0c:
                    6e:af:e9:ee:24:19:a2:29:e8:7e:a1:e9:bd:e5:63:
                    4e:49:46:a5:6e:da:5d:b0:38:58:42:24:e8:68:35:
                    f5:fa:c0:a6:73:d3:cf:cb:1b:ee:e5:6d:41:17:e9:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:75:91:55:50:5A:17:48:CD:D4:4C:7C:81:03:16:45:AE:9C:57
            X509v3 Authority Key Identifier:
                keyid:8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32332d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:69:17:c1:71:23:ab:34:05:47:35:19:f4:ff:a0:af:1d:
         e0:2b:7c:b3:fd:e4:65:85:da:8b:00:fb:6a:74:af:64:cc:9b:
         b7:83:1a:68:8d:02:8a:5c:a3:da:ba:3c:9d:f6:ed:5f:f2:20:
         18:a8:98:d7:f9:01:3d:32:e2:a5:21:fd:b0:f0:0d:8b:a6:c5:
         fc:09:2e:ca:94:6f:f1:2f:43:9c:b4:e3:a8:91:a5:56:e3:92:
         fc:09:9c:f5:25:dd:a1:85:fd:9f:a1:3f:d3:66:8d:64:63:7b:
         12:2d:e2:8d:73:03:d6:93:00:aa:dc:3c:04:2d:ff:6b:42:90:
         71:b3:70:a3:fe:4f:91:5e:0a:89:76:52:8a:b8:46:bc:77:f7:
         a1:01:e3:63:a7:2c:8b:1b:60:fc:90:b1:66:9e:c0:4f:95:d3:
         3f:a3:ee:b0:06:46:43:c2:e0:03:dd:71:d1:51:99:17:69:d3:
         31:24:3b:f6:bc:61:02:20:49:ba:fc:15:e9:b3:44:a7:ff:63:
         d1:5c:49:0b:4d:6c:3c:7e:22:24:dc:8e:22:9b:46:46:f5:f8:
         0c:9e:9a:86:28:b5:fe:b4:ea:d0:d2:bd:d2:40:7a:30:a2:23:
         11:46:ae:36:11:11:97:fb:05:2a:eb:4b:66:70:7e:8b:32:e8:
         07:1f:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:38:19 2025 by rpki-client