Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3234203d3e20323632393039.roa
File:                     3137372e33362e35322e302f32322d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          r06Qe1SEVduQkCBUwBEb706YBLQpF5fC375kczAlGMk=
Subject key identifier:   10:93:D5:34:A4:72:27:0B:9B:03:F2:92:60:09:DB:6C:4C:BC:E8:F6
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       319DCABF6FC7C508BB24F19C524341A8F6D45BCC
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3234203d3e20323632393039.roa
Signing time:             Wed 25 May 2022 19:00:12 +0000
ROA not before:           Wed 25 May 2022 18:55:12 +0000
ROA not after:            Wed 24 May 2023 19:00:12 +0000
asID:                     262909
IP address blocks:        177.36.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9d:ca:bf:6f:c7:c5:08:bb:24:f1:9c:52:43:41:a8:f6:d4:5b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 25 18:55:12 2022 GMT
            Not After : May 24 19:00:12 2023 GMT
        Subject: CN=1093D534A472270B9B03F2926009DB6C4CBCE8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:32:3d:dd:8f:e2:9c:33:08:e3:0c:5b:9e:
                    f4:9e:5e:b0:7a:57:2f:11:62:26:48:2a:d2:b5:4a:
                    45:b8:df:fd:bd:a7:0f:09:5c:73:92:82:17:65:ed:
                    cd:eb:42:59:22:ea:8b:30:89:bd:ca:bc:43:1d:80:
                    16:c1:54:c2:26:56:3d:48:aa:f0:45:e6:fd:59:75:
                    ee:e7:4f:fe:2b:87:ab:fb:80:80:f0:50:98:39:cf:
                    e4:5a:2d:ae:6c:0f:a3:62:47:3f:2b:95:a3:a1:91:
                    ae:16:d0:8b:d1:cc:8e:4d:f8:61:27:c2:18:af:fd:
                    a3:77:55:d5:de:aa:47:09:47:8e:6d:a9:89:f3:99:
                    6a:5b:4e:3b:3a:35:b7:68:d4:58:95:d2:0b:0e:30:
                    28:74:dd:fe:be:95:e3:5e:34:47:e3:19:bd:a8:c9:
                    57:27:b0:a8:53:92:22:dc:d8:3a:df:ff:ba:9f:7e:
                    0d:ba:05:05:b7:e4:ad:f6:33:46:ac:6f:84:fa:48:
                    23:54:e5:2d:f2:c9:62:1e:15:72:96:6a:7d:b8:23:
                    e6:b0:a7:57:fb:51:7d:0c:af:ff:f6:c3:95:2a:79:
                    81:23:25:67:8b:2a:16:11:01:f4:93:2a:37:3b:9e:
                    38:66:71:d8:ad:61:1b:2b:75:83:ba:70:e8:46:fe:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:D5:34:A4:72:27:0B:9B:03:F2:92:60:09:DB:6C:4C:BC:E8:F6
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35322e302f32322d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a5:92:83:e6:aa:2f:0a:4a:86:8b:6b:f2:e4:32:ee:95:6c:
         35:37:27:59:5a:b0:fa:16:1f:98:24:10:ca:39:9f:f0:8f:62:
         26:04:ae:7a:f7:ea:aa:04:2d:f3:46:5b:76:a6:8d:ac:d4:2a:
         75:53:9f:73:4a:17:7b:6f:44:8b:d2:1f:f0:1f:6d:d5:39:8e:
         f8:20:f6:38:90:b4:cb:7e:94:e5:88:65:2d:73:d8:11:32:d8:
         a4:0a:32:59:2f:0f:82:9d:99:38:fb:ba:56:71:5e:26:f8:3d:
         ae:6e:92:38:eb:34:1a:24:79:14:10:38:26:97:33:e5:65:5b:
         22:b1:e3:b8:53:d3:d6:9f:dd:70:12:c3:f9:da:99:61:4a:04:
         1d:6d:4c:e8:08:5c:00:3f:f9:b6:ff:e4:85:6f:49:33:d7:9a:
         0c:c0:1e:fa:2e:23:da:a8:cf:f5:65:85:18:f4:bf:8a:c3:d4:
         63:1a:33:e8:76:2d:23:f9:9c:cd:05:13:5b:53:ac:3e:b8:8f:
         25:59:de:a1:0c:8b:3c:fa:98:90:66:33:60:4a:42:45:4d:f4:
         25:3f:40:42:83:18:46:a0:0a:1a:f6:c7:ba:cb:0f:e6:ab:55:
         56:aa:4c:86:1a:75:46:0a:e9:86:48:b9:c3:e8:f4:16:99:d5:
         4f:36:58:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org