Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32312d3231203d3e20323632393039.roa
File:                     3137372e33362e35362e302f32312d3231203d3e20323632393039.roa (raw, json)
Hash identifier:          /6w++8REXBgFNcmYgf8glkMfTmAGsy2+pkiRcR79hcg=
Subject key identifier:   F9:00:9B:30:40:E0:BC:38:0D:0E:42:38:BA:D3:12:42:7E:E0:29:47
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       2D95F02578DEFD438BEF5DF0C271D78CDEF17C1C
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32312d3231203d3e20323632393039.roa
Signing time:             Wed 25 May 2022 18:59:45 +0000
ROA not before:           Wed 25 May 2022 18:54:45 +0000
ROA not after:            Wed 24 May 2023 18:59:45 +0000
asID:                     262909
IP address blocks:        177.36.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:f0:25:78:de:fd:43:8b:ef:5d:f0:c2:71:d7:8c:de:f1:7c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 25 18:54:45 2022 GMT
            Not After : May 24 18:59:45 2023 GMT
        Subject: CN=F9009B3040E0BC380D0E4238BAD312427EE02947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:95:c4:83:64:f9:65:5e:2e:ae:bd:5e:e8:
                    dc:3f:61:07:65:ea:db:1e:29:44:2c:a0:71:a4:e4:
                    81:22:10:64:78:4d:c9:b1:8b:9f:9c:46:3a:4b:68:
                    45:dd:5e:31:4e:06:8f:c2:3a:40:97:57:d5:e4:b8:
                    0e:91:ea:59:5e:a6:8b:43:4c:f8:8e:5e:05:26:d8:
                    47:d8:84:78:42:b1:f0:44:6c:5b:b6:da:30:84:cd:
                    9d:ed:a7:eb:2d:d9:8c:42:10:dd:ff:af:a2:47:da:
                    25:28:bd:9b:b6:ea:5b:39:2a:6b:50:44:7f:63:8c:
                    e6:af:c3:99:d2:e4:9a:a4:c6:de:5d:b8:4a:44:ae:
                    69:59:55:3b:e5:04:84:cd:d7:9d:92:be:73:2a:54:
                    5c:01:3a:58:be:d2:cd:00:e5:4c:71:54:16:d6:aa:
                    b2:03:44:2b:e8:0e:6b:55:24:cb:ba:6e:0f:d6:12:
                    9e:86:2c:1c:c8:cc:02:d6:de:90:a1:e2:75:28:91:
                    f2:dc:9a:ed:a1:66:86:ec:4c:aa:8c:be:0a:58:f6:
                    36:65:ca:d0:e8:a9:6d:c0:d7:aa:ae:fb:27:43:d9:
                    7e:47:d3:16:d3:eb:2b:a3:6f:f5:86:e6:aa:aa:3e:
                    d8:68:da:15:97:0a:e0:8c:ac:74:6e:ef:cb:25:61:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:9B:30:40:E0:BC:38:0D:0E:42:38:BA:D3:12:42:7E:E0:29:47
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32312d3231203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:be:d3:1b:45:56:31:ce:6b:fc:9d:b5:af:4c:0c:71:f4:c3:
         cf:06:6f:c5:cd:f8:78:f3:a0:7a:4b:57:7c:7a:20:15:47:1f:
         37:eb:25:2f:62:f2:a6:17:e6:b9:4b:36:23:d4:33:6d:b5:db:
         1e:ca:9a:16:a9:92:6b:77:d4:72:9b:ff:ae:37:8a:b8:d7:8f:
         15:cd:09:b9:42:d5:fd:39:1e:60:05:d1:54:7f:72:9e:14:69:
         f6:b9:32:46:b0:48:38:cc:cf:c1:b0:d3:85:b1:2b:cd:f6:95:
         f4:04:6a:c1:ea:0f:b3:dc:e1:be:43:50:d5:88:73:2b:a5:a0:
         59:7e:bf:69:dc:aa:e2:50:f2:1a:f0:8d:4c:d6:e0:0c:56:a4:
         cb:3a:0b:88:ed:10:fe:23:3c:c6:de:3c:01:90:02:73:ab:9b:
         fa:53:2d:7d:64:2b:a6:ae:53:f8:65:0d:d7:fc:f4:ce:86:43:
         be:56:41:c2:6e:d7:6d:d0:6d:60:d2:2c:b7:40:8d:89:c9:52:
         de:82:48:ed:c7:be:3a:a6:09:49:cf:2f:14:28:7b:06:94:d3:
         b3:53:85:66:e8:22:fc:dc:8a:49:8c:04:0f:eb:d8:ea:42:1f:
         b8:d0:d9:3e:78:b9:2e:26:f0:cf:04:68:f7:a0:b0:87:4f:f1:
         89:fb:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:55 2025 by rpki-client