Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32322d3232203d3e20323632393039.roa
File:                     3137372e33362e35362e302f32322d3232203d3e20323632393039.roa (raw, json)
Hash identifier:          gjny4uKW+Fnrctc9wyeq9LI9HsAiS4hTQuYp0U3j0K0=
Subject key identifier:   05:9E:94:23:22:05:3D:7F:D9:14:F8:8A:A6:E1:22:F3:49:5C:86:60
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       675E8765ABDEB033CEF3FBF0F29E3E1AE3AF754C
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32322d3232203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:32:58 +0000
ROA not before:           Tue 24 May 2022 19:27:58 +0000
ROA not after:            Tue 23 May 2023 19:32:58 +0000
asID:                     262909
IP address blocks:        177.36.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:87:65:ab:de:b0:33:ce:f3:fb:f0:f2:9e:3e:1a:e3:af:75:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:27:58 2022 GMT
            Not After : May 23 19:32:58 2023 GMT
        Subject: CN=059E942322053D7FD914F88AA6E122F3495C8660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:34:73:5e:39:1c:e4:e5:e5:c5:d4:f1:72:
                    ac:23:cf:e2:48:90:dd:cd:ba:d9:20:97:52:48:0f:
                    18:75:e2:33:8b:53:a3:37:e8:b6:bd:2a:d2:b7:bd:
                    bc:a5:44:31:08:27:52:84:fc:51:04:9f:77:61:e2:
                    58:21:a4:49:a3:82:a3:46:08:1b:10:0a:e0:17:4d:
                    b4:bc:39:71:18:33:59:e4:9f:36:1d:42:5c:88:35:
                    8f:72:13:d6:fe:30:40:21:fe:3b:ec:21:34:48:88:
                    19:e9:14:c5:e6:d9:1d:e5:18:d7:d4:2a:11:ef:24:
                    7e:db:bc:ac:7e:76:b8:8c:6d:a6:67:11:3a:64:60:
                    8d:e9:e6:51:ba:9e:7f:87:ce:8f:d8:49:09:79:c9:
                    fc:bb:0e:35:9f:55:79:3f:8e:92:1e:a8:a3:e1:3f:
                    db:1f:fc:c6:91:f5:f1:f0:79:46:96:76:f0:79:8a:
                    bf:cd:5b:47:68:df:fa:0f:48:dd:e2:97:da:55:bb:
                    b0:5a:05:af:35:e3:c7:ac:86:22:9f:c7:7a:06:a3:
                    5a:6d:c1:5f:45:36:01:66:0e:97:5a:32:85:05:49:
                    33:83:1f:49:95:a9:77:4d:74:c6:d7:8a:65:13:8d:
                    10:fb:17:63:77:55:81:89:a7:71:84:5d:38:87:8a:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:94:23:22:05:3D:7F:D9:14:F8:8A:A6:E1:22:F3:49:5C:86:60
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32322d3232203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:8a:31:8d:5e:ac:d1:71:9f:0f:10:ad:bc:88:24:c6:ca:
         78:7a:61:2c:38:00:a4:48:8e:e0:e1:c5:bf:2d:48:b7:97:dd:
         76:1f:6a:57:82:a5:37:5e:64:f1:35:33:98:ec:3b:2b:d3:89:
         ec:15:70:e5:d7:38:01:cd:54:48:21:6b:99:22:9e:0f:f3:c5:
         d4:aa:02:11:c9:e2:ff:f9:2c:82:67:c6:cc:8e:03:c3:c2:c0:
         c9:38:d0:5d:9c:9b:0e:59:8f:18:f8:a9:44:87:ff:97:0a:52:
         1f:64:b1:96:ee:9d:65:74:a5:e6:cd:cb:84:44:f3:3a:35:5d:
         33:66:d0:97:16:8d:cf:c4:40:fe:c1:8e:5b:f2:cc:5f:00:30:
         74:ec:6a:cd:20:ec:d5:ad:a1:75:21:91:73:a5:7c:5b:9e:78:
         f0:b5:38:eb:11:ba:19:d3:01:6d:d4:0d:0a:0d:88:ae:ec:a6:
         fa:50:de:92:e4:93:d6:b3:d3:bb:83:54:9d:78:6a:94:66:fb:
         00:7f:f0:77:c9:4a:20:30:b1:e3:73:f3:37:88:92:1f:b0:ed:
         d2:9d:8c:69:a4:b5:8b:94:86:bb:0d:ea:85:e6:9d:56:47:9c:
         42:45:f2:ea:67:04:ef:e6:d4:93:b9:bd:6a:aa:7b:0b:65:24:
         3d:8e:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:32 2025 by rpki-client