Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35392e302f32342d3234203d3e20323632393039.roa
File:                     3137372e33362e35392e302f32342d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          LobxO+1pPAjgGH6EfjDYzdLywAFumJKLWo3ZMd6kZvo=
Subject key identifier:   24:C5:21:63:F3:BF:6C:77:12:F8:F3:76:A3:C0:4C:68:F8:F7:8A:4D
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       3F9D218328F2659B48CC23E0387D9E4E740F324A
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35392e302f32342d3234203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:31:11 +0000
ROA not before:           Tue 24 May 2022 19:26:11 +0000
ROA not after:            Tue 23 May 2023 19:31:11 +0000
asID:                     262909
IP address blocks:        177.36.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9d:21:83:28:f2:65:9b:48:cc:23:e0:38:7d:9e:4e:74:0f:32:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:26:11 2022 GMT
            Not After : May 23 19:31:11 2023 GMT
        Subject: CN=24C52163F3BF6C7712F8F376A3C04C68F8F78A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:48:7a:7a:a1:95:e0:09:d7:09:8f:78:9f:
                    cd:f6:44:44:8d:82:b8:8b:3c:0d:8b:42:25:11:98:
                    bb:a6:48:ce:2e:fc:6f:8a:87:2b:d2:1e:c1:b2:39:
                    db:27:8c:ab:53:34:b9:0d:d2:64:9b:c2:e5:ff:ce:
                    55:99:d5:ad:b3:87:05:53:4d:ee:4c:8f:16:40:47:
                    c0:57:b0:fa:fc:7d:02:9f:ce:eb:df:f7:cb:92:53:
                    f4:9c:dc:f2:7f:30:1c:c0:6b:02:b9:8c:b6:8b:ed:
                    d9:68:44:f6:f5:d0:f0:de:43:f1:44:9d:9f:02:36:
                    81:08:cf:e1:18:67:00:f3:f2:2e:13:ac:c1:01:1f:
                    92:a7:e0:2f:5d:ee:eb:7a:fb:4e:27:04:bc:65:43:
                    c0:4c:2a:c0:4e:a7:d0:57:f3:95:84:43:41:20:14:
                    46:4f:7a:d7:47:33:d9:86:70:ae:0b:25:43:f4:ec:
                    e7:64:b3:45:a5:98:0b:aa:22:f0:c1:b4:97:3a:c8:
                    dc:c0:6b:a7:8c:e5:a2:18:b6:30:1d:4a:64:62:92:
                    e2:9a:91:fd:b2:79:2f:58:82:ef:10:cf:9f:30:88:
                    d0:4c:9e:56:28:55:a4:25:b7:5c:a2:a2:8c:f6:31:
                    14:b8:71:05:1a:1f:10:12:fa:9a:73:5d:2f:b1:31:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:21:63:F3:BF:6C:77:12:F8:F3:76:A3:C0:4C:68:F8:F7:8A:4D
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e35392e302f32342d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:65:29:de:5c:9f:51:34:18:7e:7d:a0:a9:62:30:de:cf:
         0b:5b:d8:12:75:2e:f3:4e:ef:93:18:6f:5b:ea:ec:ad:26:e3:
         8a:02:d5:d9:8e:7b:d1:c0:78:50:7d:bc:c5:ad:b6:ba:36:77:
         3c:f5:2c:9c:87:ab:f5:f8:e4:66:5e:4f:3a:ef:12:89:9b:73:
         41:3c:78:23:66:ac:28:82:9d:de:c6:be:26:76:2c:74:9c:81:
         c4:4a:dc:8a:4a:11:87:35:09:87:e7:77:04:af:ff:a1:57:61:
         d5:97:d9:5d:64:31:98:8d:5c:e2:20:c4:9f:0e:59:3d:87:57:
         5b:8c:01:5e:21:a7:3f:d5:cf:fa:cf:8e:8c:88:f3:bf:23:1b:
         80:15:32:b2:2b:75:c7:26:a6:3d:a1:00:4b:b2:f8:f6:15:10:
         a1:38:1b:f2:50:97:2e:95:58:6f:a0:e1:26:38:d9:97:6c:85:
         64:62:fb:ee:14:a3:b9:bc:d9:08:ca:80:1b:80:d6:6e:8e:78:
         12:f4:f9:8b:6b:c8:d8:9f:fa:6c:65:a7:98:b8:43:16:64:28:
         2f:3b:1c:c4:a8:94:a2:45:a7:9c:14:87:7e:ac:6c:4a:52:d9:
         5d:f4:0b:22:2f:a4:1d:d9:07:9c:ca:06:04:8d:98:5a:70:21:
         0a:63:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:47 2025 by rpki-client