Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34392e302f32342d3234203d3e20323632393039.roa
File:                     3137372e33362e34392e302f32342d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          mfry8qvt6ZwRVNEQuE13lpC9oelrOFA1TbrmGSK8aeQ=
Subject key identifier:   1D:72:47:AC:A6:C9:80:C1:BD:69:AD:D9:60:E8:E3:3B:2D:44:85:60
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       49C2C33464C17F6E8A2A182E99F5D6E27A58C850
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34392e302f32342d3234203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:30:52 +0000
ROA not before:           Tue 24 May 2022 19:25:52 +0000
ROA not after:            Tue 23 May 2023 19:30:52 +0000
asID:                     262909
IP address blocks:        177.36.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c2:c3:34:64:c1:7f:6e:8a:2a:18:2e:99:f5:d6:e2:7a:58:c8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:25:52 2022 GMT
            Not After : May 23 19:30:52 2023 GMT
        Subject: CN=1D7247ACA6C980C1BD69ADD960E8E33B2D448560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:a7:95:7d:e9:71:be:0e:99:22:04:b4:41:
                    c6:07:7a:00:81:ed:df:c1:32:f2:33:1e:7e:45:e6:
                    06:e1:5a:31:14:74:4e:b7:b6:3e:2a:7c:39:47:1e:
                    a0:43:3e:37:cb:c6:b8:16:16:74:89:2f:04:52:0a:
                    4f:dc:aa:ad:b3:dd:2f:d7:bf:a5:1b:37:90:df:58:
                    b0:b3:e8:a7:82:a8:52:b5:bf:6c:fb:bf:00:45:c2:
                    a9:5c:c5:d0:ae:71:34:c1:97:cd:26:0a:7a:3b:db:
                    b3:e2:f4:44:8c:fa:29:88:c3:dc:63:43:2a:7c:bc:
                    48:39:a2:40:84:42:f5:63:7e:4f:dd:89:a1:9e:6a:
                    c3:17:ba:f0:01:1b:cd:e0:bf:ae:cd:b1:e7:2e:58:
                    ba:79:b4:eb:db:5c:46:b8:18:6c:64:c3:dd:8f:28:
                    91:ac:30:75:06:5a:3d:41:d6:fd:8d:19:34:20:97:
                    ac:c8:91:35:9c:7d:8f:96:87:68:c3:6a:79:e1:e0:
                    e0:4b:b1:7c:61:db:fc:70:f8:68:9b:ef:78:5e:de:
                    18:59:7c:1d:00:75:29:46:f9:1d:ea:70:33:0b:c7:
                    93:0b:a1:af:0b:f6:b4:d5:9f:4c:d4:22:21:cb:37:
                    c4:fb:5c:5a:b7:89:4c:b5:30:fa:ad:f0:97:0a:9a:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:72:47:AC:A6:C9:80:C1:BD:69:AD:D9:60:E8:E3:3B:2D:44:85:60
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34392e302f32342d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:df:13:b2:03:6a:95:d8:79:3a:6a:ab:12:0a:ac:75:43:55:
         33:b8:26:1e:25:45:8b:0d:fa:f8:b7:7e:b2:09:ac:96:67:55:
         02:d8:0a:3c:c8:3b:ac:3d:a2:5a:37:32:1c:17:0f:ad:e0:55:
         ea:b4:0c:9f:a0:fa:93:cf:7b:c0:41:bb:a7:98:68:1f:0d:b8:
         88:b0:fa:2a:f8:1e:00:4b:3b:cb:62:8d:d8:04:c8:f3:35:8a:
         af:f5:fc:95:e6:f1:43:21:1d:ce:34:3b:04:e0:81:99:cf:49:
         1a:67:5b:c7:9b:98:ba:1d:52:ba:89:c3:77:84:15:63:ce:07:
         d3:c7:6f:b5:10:bc:a3:c1:c7:93:6e:c1:0a:a0:4f:c0:bc:48:
         ef:1d:20:b1:c0:97:7e:20:c8:8e:f4:a2:36:41:23:93:43:e5:
         0e:93:33:3d:ad:c3:f4:b4:fe:b0:a1:3b:9b:13:35:02:1a:39:
         a6:4a:8b:d2:70:74:85:af:9c:00:48:cb:23:52:d9:21:db:63:
         ee:ef:b5:2b:bc:48:fc:e6:a6:b8:58:34:8f:6b:14:80:00:9a:
         b6:3e:3e:79:0a:df:27:6e:e2:51:ed:18:5c:2a:85:3e:3b:33:
         13:cc:c4:86:c9:f3:28:55:b7:74:63:ed:d4:a8:db:a0:1f:af:
         6a:65:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:48 2025 by rpki-client