Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3232203d3e20323632393039.roa
File:                     3137372e33362e35322e302f32322d3232203d3e20323632393039.roa (raw, json)
Hash identifier:          N89gfwMHr/Ug2bCZPDMrYLe9RlU3isXMoW674OzPGvY=
Subject key identifier:   87:40:1A:A5:C0:87:5E:FC:14:54:E6:D5:26:39:1C:6F:F1:93:19:8E
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       77AEF35B7C24DE27B65C5235E5332DF9FC54C62C
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3232203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:32:46 +0000
ROA not before:           Tue 24 May 2022 19:27:46 +0000
ROA not after:            Tue 23 May 2023 19:32:46 +0000
asID:                     262909
IP address blocks:        177.36.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ae:f3:5b:7c:24:de:27:b6:5c:52:35:e5:33:2d:f9:fc:54:c6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:27:46 2022 GMT
            Not After : May 23 19:32:46 2023 GMT
        Subject: CN=87401AA5C0875EFC1454E6D526391C6FF193198E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:cc:d1:b5:50:3f:ae:ed:4c:a7:c2:a0:2c:
                    d5:2d:a1:c4:5d:e5:f6:4c:cd:7f:13:9c:02:e6:a0:
                    b2:d8:ef:93:7e:d8:b8:18:15:fc:24:dc:63:a4:8c:
                    c7:87:a8:e0:4c:58:86:bc:b5:2b:f2:fe:2d:4a:32:
                    cf:d6:71:97:a9:e4:70:43:38:84:9f:f7:55:19:b5:
                    ab:28:e3:3a:1a:ee:03:f4:54:44:71:11:a5:07:75:
                    33:7c:5b:62:07:90:21:85:a2:c4:02:75:d2:c7:b0:
                    49:69:19:b7:b6:cd:5e:55:94:61:08:7d:24:f8:93:
                    35:9e:43:30:68:56:08:c3:51:9a:ee:32:92:b1:98:
                    80:42:d9:b7:66:ed:d5:fa:4e:c3:d4:7c:7b:d0:65:
                    ab:61:c8:e4:22:63:48:df:57:64:84:b7:c6:71:35:
                    b6:c9:c8:0f:66:b5:0e:87:6c:51:26:11:0b:09:4f:
                    bd:3e:88:3b:60:68:69:bf:f6:8a:7b:bd:06:17:47:
                    24:2c:b2:ae:b0:d9:f6:02:d2:38:00:f1:c7:86:c1:
                    c0:81:65:d3:10:64:65:a2:13:95:72:83:97:61:57:
                    dc:86:80:b9:96:a0:b8:f5:33:08:be:b4:7a:ce:28:
                    31:84:a0:11:a2:9e:63:f5:92:d5:0d:60:e1:de:68:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:40:1A:A5:C0:87:5E:FC:14:54:E6:D5:26:39:1C:6F:F1:93:19:8E
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3232203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:cd:e4:ab:44:fa:11:5b:39:c2:d0:61:ba:7b:94:b5:54:
         39:80:50:11:6f:9e:88:4a:4f:3c:b6:6d:f5:5e:29:26:a9:bf:
         13:ea:70:4c:86:1e:d5:a3:9a:33:c5:39:5b:e1:82:8b:22:fe:
         bb:24:69:28:d0:33:30:1c:6e:bb:19:7a:1c:21:6f:fe:90:8a:
         b3:79:81:81:44:7c:be:b3:26:3d:8d:ab:8b:45:e0:6b:90:59:
         c9:37:c9:7e:9b:95:89:25:e7:32:50:a9:3e:ae:67:b5:3c:d7:
         ed:7f:85:71:94:e9:76:1c:a8:80:69:7d:f1:82:cd:e4:c2:d1:
         2f:17:fe:b4:f3:87:b2:7f:44:47:6d:7d:f2:b9:ff:2d:76:13:
         5c:43:37:01:a5:c7:5e:af:24:17:73:b5:32:2d:d7:90:9b:30:
         57:c4:dd:3d:ae:4e:d4:6e:91:bf:a3:5d:db:f2:10:01:37:68:
         fc:a2:a6:aa:db:42:5f:0f:b3:a5:d8:81:07:c4:33:d8:9c:a9:
         a9:d0:af:fe:f6:cd:ce:3c:12:65:48:57:d2:06:ae:96:14:ed:
         8e:46:60:e6:76:b7:5a:4a:97:15:dd:ce:5d:d5:35:38:09:41:
         e9:af:3d:12:11:a4:d9:26:21:3b:c6:1a:0a:18:64:b4:1f:28:
         6b:70:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:05 2025 by rpki-client