Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32342d3234203d3e20323632393039.roa
File:                     3137372e33362e35362e302f32342d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          wZBX81Xwhn2EoLJbOU1jMoLZLY/kFlcCxxHOXM8bCqU=
Subject key identifier:   33:38:1A:25:1F:43:5A:9D:71:73:60:E8:96:F3:DD:F7:7D:57:C2:0B
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       51577D34FAB496276FC7809DC9066B2BDF3A333A
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32342d3234203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:31:20 +0000
ROA not before:           Tue 24 May 2022 19:26:20 +0000
ROA not after:            Tue 23 May 2023 19:31:20 +0000
asID:                     262909
IP address blocks:        177.36.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:7d:34:fa:b4:96:27:6f:c7:80:9d:c9:06:6b:2b:df:3a:33:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:26:20 2022 GMT
            Not After : May 23 19:31:20 2023 GMT
        Subject: CN=33381A251F435A9D717360E896F3DDF77D57C20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:c9:4a:52:f8:a9:b4:3e:e3:f1:4d:09:40:
                    48:64:a6:4a:ea:fd:d5:5b:78:3e:27:57:d4:d2:56:
                    ca:f1:22:f2:80:7a:8c:4d:a1:ef:dd:21:dc:cf:5d:
                    33:50:5a:d6:d8:e4:3b:36:1d:2c:56:1f:fb:64:0d:
                    35:f2:7c:83:4a:26:22:86:20:da:0e:35:83:63:05:
                    f9:fb:3d:b0:98:18:f5:af:2c:c3:2a:29:0e:21:eb:
                    a6:19:98:99:4d:d4:be:ef:3f:49:33:7e:b7:7e:ca:
                    dd:6c:1e:2c:c8:cf:5d:73:bc:36:01:cd:02:9a:bc:
                    92:ce:a4:a8:23:0e:6b:1f:ea:e4:d3:bf:5f:5b:91:
                    4c:8d:db:1a:78:19:e2:73:39:4f:f8:6f:9e:16:e5:
                    56:34:70:73:7b:67:a7:fe:06:1d:45:e4:c5:d4:f4:
                    21:1f:79:e7:e1:aa:cb:f7:44:98:45:0f:4f:0e:81:
                    7f:30:63:db:82:ab:7d:e2:3b:83:25:de:75:bc:02:
                    aa:e5:c8:7d:f6:98:3f:aa:da:81:2d:72:f6:fe:31:
                    d3:c4:7b:2c:f0:a2:a2:db:59:5d:bf:7f:a9:6d:63:
                    a7:14:45:24:fd:14:ab:e4:00:bc:63:d8:60:0a:58:
                    2a:db:20:e7:b0:9d:9c:00:55:80:60:ed:19:31:27:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:1A:25:1F:43:5A:9D:71:73:60:E8:96:F3:DD:F7:7D:57:C2:0B
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35362e302f32342d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:85:3d:99:27:b2:8b:ef:23:fc:1e:cb:03:98:7f:aa:d6:
         f3:95:18:76:73:ed:3c:dc:99:37:e2:8e:73:6a:45:10:f4:16:
         e0:24:36:a1:6e:de:03:10:7d:e0:f5:57:c9:6d:a4:98:2a:f1:
         33:e3:0f:83:16:40:d9:d9:4f:16:ad:68:b8:3f:d0:b5:2e:d4:
         87:52:02:94:62:b2:7c:ce:38:bc:0a:20:8c:99:da:7e:b2:ce:
         7a:8d:9a:cf:61:5d:ad:ee:98:3a:95:7e:58:0e:3a:29:39:0f:
         dd:fc:56:65:f3:8e:11:d7:0e:80:25:fc:fb:5f:60:49:8c:a7:
         a6:73:de:90:76:de:2f:6e:b2:8a:12:28:d4:9d:0b:9a:08:6e:
         24:b4:9d:04:6c:08:e6:53:0b:12:d5:cc:6d:39:21:88:ec:fe:
         8e:fd:4c:00:9e:ee:43:b8:07:d5:4d:69:48:fc:79:f4:49:d3:
         2c:82:c1:cb:cb:0e:06:46:32:b7:09:fd:0e:dd:8c:3c:36:89:
         ae:0c:85:2d:26:2f:3b:62:6a:45:20:66:66:f9:82:73:d7:c3:
         62:28:91:e4:ae:0f:e8:96:0c:16:d8:ad:06:63:6c:71:f8:2c:
         a9:18:15:59:bb:f3:c4:82:90:44:ac:34:0e:d2:d4:66:85:d1:
         44:6c:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org