Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3234203d3e20323632393039.roa
File:                     3137372e33362e35342e302f32332d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          q+L7iAi0K4KOIJApVTYGB++umZlZjVro5DyQ2PtXZts=
Subject key identifier:   0C:D6:8B:DF:50:72:C2:FD:D3:EC:1F:96:69:8B:C9:D4:30:CC:3E:B0
Certificate issuer:       /CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
Certificate serial:       40CEBF0A8EF14E9D43C9B0CC7CA87F77B34FE18D
Authority key identifier: 8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3234203d3e20323632393039.roa
Signing time:             Mon 30 May 2022 12:44:24 +0000
ROA not before:           Mon 30 May 2022 12:39:24 +0000
ROA not after:            Mon 29 May 2023 12:44:24 +0000
asID:                     262909
IP address blocks:        177.36.54.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:bf:0a:8e:f1:4e:9d:43:c9:b0:cc:7c:a8:7f:77:b3:4f:e1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
        Validity
            Not Before: May 30 12:39:24 2022 GMT
            Not After : May 29 12:44:24 2023 GMT
        Subject: CN=0CD68BDF5072C2FDD3EC1F96698BC9D430CC3EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:94:63:c2:a4:08:88:13:82:b0:95:13:30:
                    05:66:99:69:86:fb:b8:33:7c:72:40:31:c9:5e:66:
                    2e:e2:95:0b:db:6c:d0:0a:cb:62:e7:bf:20:f4:04:
                    a0:5a:55:b0:f5:f4:74:5e:4c:5e:cd:43:8b:35:89:
                    6a:4e:4f:5b:14:e7:28:18:c8:2b:e9:e5:6c:74:9f:
                    f4:59:18:8a:e5:2a:74:4b:de:4e:62:dc:ff:0d:19:
                    20:22:ac:ab:27:ad:50:bd:c8:f6:59:4c:ad:73:33:
                    46:f9:83:48:c5:3f:65:f8:1c:25:05:5a:aa:14:90:
                    a6:c2:79:34:42:08:ce:f6:c5:d4:a4:9f:5b:37:09:
                    a9:b0:9d:9f:14:89:5d:d1:9d:09:e8:b0:81:69:91:
                    74:9c:84:d8:73:65:bf:ea:d8:de:a9:df:21:78:ad:
                    39:a4:a1:2a:8b:31:ce:7f:17:35:44:24:68:39:95:
                    5c:cb:23:f4:06:d8:d7:b9:bc:eb:57:eb:5f:92:9a:
                    6c:cb:92:e0:ce:18:a8:c7:93:fe:3d:91:d6:e0:29:
                    2f:fa:f2:3e:45:7b:df:74:14:74:61:1a:cb:fb:76:
                    3b:f5:04:5e:35:7d:64:7a:42:48:9f:3e:be:84:b8:
                    31:e6:f6:f6:46:6d:41:17:3e:4f:41:a4:f9:84:3b:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D6:8B:DF:50:72:C2:FD:D3:EC:1F:96:69:8B:C9:D4:30:CC:3E:B0
            X509v3 Authority Key Identifier:
                keyid:8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35342e302f32332d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:09:5d:8d:b9:f1:e6:dd:89:65:78:d1:82:25:d4:90:34:
         e5:bb:55:a0:41:20:fe:f7:66:de:ef:9b:99:a4:2f:93:78:3c:
         eb:68:db:a0:0c:9b:4a:4f:17:de:8d:24:92:86:ea:28:2e:f9:
         51:c1:0d:8f:0d:ed:e4:df:f6:e5:31:a3:3f:8f:5d:68:86:25:
         e5:4b:15:32:26:20:62:1f:46:5d:e8:cd:02:80:0e:6f:34:6a:
         d3:c1:2b:5a:cf:c4:b1:92:97:df:aa:11:04:9c:91:90:76:8e:
         2b:1e:31:8c:22:8e:38:0c:69:47:1e:ad:b2:e9:15:7d:d5:c0:
         21:ce:9f:6b:06:ac:85:af:16:2c:fa:5f:61:f9:90:cc:a7:63:
         d6:61:4b:e2:b4:61:86:c7:4a:f9:7d:3f:5c:c1:f1:ca:c4:ad:
         fc:56:b4:98:7a:c5:22:42:dc:b3:97:30:d9:d7:62:48:b8:c8:
         78:b0:f5:2f:08:93:34:fa:1f:a7:25:5e:6b:52:b8:45:20:23:
         d7:23:eb:e7:9f:79:23:5e:5c:31:44:8b:aa:8a:dd:78:88:b1:
         1e:30:f2:88:ad:f6:85:26:79:a6:8e:05:39:c0:8f:a3:cf:f3:
         32:ce:bc:23:00:86:71:88:2b:f0:74:0a:e0:90:1b:b6:5b:6b:
         48:0e:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org