Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3233203d3e20323632393039.roa
File:                     3137372e33362e35342e302f32332d3233203d3e20323632393039.roa (raw, json)
Hash identifier:          XVh3MphR8yrEK4ZJ9CgJ+06+fWIfsu1hkmO6yoRbzvo=
Subject key identifier:   9E:CF:5C:07:99:95:F2:31:D3:24:14:2F:A6:9B:57:58:73:0D:AE:AE
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       587F29CA0FDB81DC43822333BCC99A363AEAA801
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3233203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:33:59 +0000
ROA not before:           Tue 24 May 2022 19:28:59 +0000
ROA not after:            Tue 23 May 2023 19:33:59 +0000
asID:                     262909
IP address blocks:        177.36.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:29:ca:0f:db:81:dc:43:82:23:33:bc:c9:9a:36:3a:ea:a8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:28:59 2022 GMT
            Not After : May 23 19:33:59 2023 GMT
        Subject: CN=9ECF5C079995F231D324142FA69B5758730DAEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:f7:64:58:58:4b:ba:4c:50:85:6d:6e:6a:
                    20:24:21:05:ff:07:09:3f:63:11:52:c0:20:e6:b1:
                    b8:e5:99:cd:de:2e:bf:13:12:8f:e3:a8:57:24:11:
                    55:8d:36:95:8a:05:aa:55:87:c8:3b:07:2a:d7:8b:
                    2a:f0:01:09:d3:bc:52:30:70:f7:f1:b8:bb:28:74:
                    4c:3d:5f:dc:83:29:c1:a0:5e:e4:12:9f:32:87:33:
                    0a:35:3d:9d:47:c5:c4:43:8b:83:1b:f8:10:1f:b0:
                    93:2d:a9:a0:a0:f5:75:1e:5a:4e:3f:66:5e:7a:fc:
                    c8:7c:d5:29:ee:61:cd:ac:99:2a:7b:cd:63:52:45:
                    f2:31:95:e7:ea:a7:89:de:37:d8:5f:91:3b:78:93:
                    63:81:b5:4f:11:51:20:ca:19:ea:3d:d7:8d:c7:da:
                    9a:d2:7d:dd:62:a8:9d:1e:0b:a4:46:15:0d:e8:5c:
                    f2:11:d6:92:71:ab:56:ec:ae:9b:41:b6:50:a8:ff:
                    b9:e4:71:c5:2e:53:af:6c:c8:53:57:06:03:dd:5f:
                    73:08:ca:6c:f5:e5:25:a5:a7:e2:af:c6:72:7e:82:
                    e8:81:b7:de:74:78:92:a7:b3:cd:81:4c:3e:2c:c5:
                    aa:27:40:35:02:a8:b3:5e:da:67:41:45:1a:6a:7e:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:5C:07:99:95:F2:31:D3:24:14:2F:A6:9B:57:58:73:0D:AE:AE
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3233203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:5c:cd:95:58:2f:89:ca:70:dd:e7:74:bf:fc:f1:a1:bc:bc:
         cb:72:a4:96:51:c3:09:56:aa:49:20:6f:ff:08:52:65:bb:d0:
         30:2e:f0:51:bc:36:cd:32:94:e9:90:ce:ac:4a:e0:79:c0:ba:
         72:1c:24:93:60:07:bc:22:c8:56:41:f0:5e:d3:2a:cc:e0:46:
         b7:f4:79:3f:b9:df:14:d0:29:01:1f:28:8a:b8:66:11:04:4b:
         a3:9c:27:c3:28:ae:5b:5b:08:8c:ec:1d:8f:f8:49:f3:6f:cf:
         4c:47:6e:fb:ad:71:03:f8:a4:25:cf:9e:f7:3b:25:2b:25:bf:
         13:77:c8:d6:fe:b3:ca:72:8a:97:3b:d6:06:13:d4:21:fc:cd:
         7a:e2:62:1c:3f:8f:ac:da:d8:8e:e9:28:62:c1:d1:2a:df:30:
         96:71:9c:8b:a2:34:c5:6c:bb:10:ed:93:5e:2b:3a:af:43:ec:
         15:1f:48:1b:9d:78:d5:6b:15:2b:7d:d5:ae:5b:b3:ff:ef:81:
         ac:e2:68:5b:d3:ad:37:29:3b:b9:6c:f2:08:c9:3c:3c:7e:ea:
         00:91:df:14:2a:27:b0:0b:9c:e1:e6:7e:83:a5:51:41:6c:25:
         50:eb:a4:24:f3:a0:7f:14:31:be:d9:b5:d8:ff:52:39:a0:e7:
         c8:2e:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:53 2025 by rpki-client