Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35382e302f32332d3234203d3e20323632393039.roa
File:                     3137372e33362e35382e302f32332d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          LS3rtKrrxuADjAMCDMuXUbN5Wbpq9dOXFzPJhoXErJ4=
Subject key identifier:   1C:A7:21:DC:0A:FC:A4:29:1E:76:9D:5F:F5:30:15:DD:2F:B6:3A:CE
Certificate issuer:       /CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
Certificate serial:       44EA527E68A92439702450C2648222682C78953A
Authority key identifier: 8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35382e302f32332d3234203d3e20323632393039.roa
Signing time:             Mon 30 May 2022 12:30:29 +0000
ROA not before:           Mon 30 May 2022 12:25:29 +0000
ROA not after:            Mon 29 May 2023 12:30:29 +0000
asID:                     262909
IP address blocks:        177.36.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:52:7e:68:a9:24:39:70:24:50:c2:64:82:22:68:2c:78:95:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
        Validity
            Not Before: May 30 12:25:29 2022 GMT
            Not After : May 29 12:30:29 2023 GMT
        Subject: CN=1CA721DC0AFCA4291E769D5FF53015DD2FB63ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:3c:dc:05:9d:63:03:86:20:54:9d:c4:b3:
                    59:ad:69:3d:1f:39:59:dc:50:4c:22:0c:e0:ee:0f:
                    e5:59:35:3c:7b:23:68:ff:8c:c7:30:a9:07:d6:26:
                    03:fc:8c:19:be:15:84:2c:ab:e5:44:66:17:9f:8a:
                    73:cc:37:fe:15:c0:3f:bd:6f:4e:dd:3b:a1:3f:dc:
                    47:e1:b9:b3:eb:d5:ab:a4:30:c6:f2:24:3f:3b:ef:
                    1e:55:f0:96:65:d6:ca:b4:2b:dd:fb:9a:d0:e7:4a:
                    c2:24:2f:ef:45:7c:ba:23:da:dc:89:d0:45:64:22:
                    a3:20:50:4a:de:09:69:0d:eb:f6:83:7b:df:5c:ab:
                    75:70:86:85:96:8c:a2:58:26:65:8b:4b:fa:98:c4:
                    13:4d:87:94:7c:68:98:f9:92:a0:0b:90:be:67:6c:
                    34:52:15:68:17:81:76:c2:8d:5f:4f:d7:60:a9:ca:
                    7e:0f:8a:63:25:c4:1a:ce:65:ae:71:46:71:43:5a:
                    e7:03:9d:bf:8d:e3:91:e0:7a:f7:1e:7d:02:1b:cc:
                    87:7e:c2:9b:83:c7:fc:21:70:08:1a:3c:89:c3:ac:
                    83:c0:6a:17:83:98:a6:79:80:65:68:42:e5:1b:fc:
                    3f:b4:cf:ff:0a:48:02:e9:5e:1b:35:a0:b7:7e:90:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:21:DC:0A:FC:A4:29:1E:76:9D:5F:F5:30:15:DD:2F:B6:3A:CE
            X509v3 Authority Key Identifier:
                keyid:8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35382e302f32332d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:33:53:be:3f:cc:79:73:52:73:fd:cc:c5:25:ba:7c:70:
         68:42:96:15:b4:d0:19:8c:4a:33:16:8a:71:1c:17:28:95:38:
         29:29:81:e0:13:ee:2e:40:80:60:e6:ff:3e:bf:5e:b8:13:cf:
         c8:d4:b5:b5:84:2a:37:96:97:15:d2:cf:18:d8:7b:bf:c9:8c:
         a3:3e:45:70:45:dc:90:c0:f2:48:13:41:68:87:d6:da:1b:bb:
         f7:a9:5a:49:24:f9:d9:1a:8d:94:cd:43:ca:35:38:b3:1a:04:
         f0:43:de:7e:33:9e:e6:1d:80:0b:ab:94:58:ed:70:4c:cc:96:
         42:6e:69:a3:a7:c3:5c:94:38:81:eb:03:86:9f:45:06:d1:80:
         cd:d4:2e:34:57:b5:28:4a:10:1e:89:6f:2f:4c:54:09:69:59:
         a5:4a:0c:76:a1:a0:8d:30:82:a3:f9:96:92:37:bd:7b:1f:f4:
         69:59:c2:b5:a3:1d:f1:19:b5:77:68:10:78:cc:c8:9d:c9:25:
         88:ca:d5:2f:f7:80:d2:65:61:33:ad:4a:89:8f:95:ad:b0:08:
         78:e9:56:fd:9e:a3:2a:ba:72:9e:13:69:52:e4:c4:cd:24:e2:
         23:c9:ed:a6:cb:2e:1f:0f:7b:32:e7:c8:66:1e:be:17:84:ae:
         c5:12:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org