Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3232203d3e20323632393039.roa
File:                     3137372e33362e36302e302f32322d3232203d3e20323632393039.roa (raw, json)
Hash identifier:          cgWLErzgWITuSSxznEmIqINbTk43jioHzLs61I29T7U=
Subject key identifier:   3B:62:19:B8:65:35:36:AF:F3:14:83:6D:62:4A:77:98:FE:D6:A2:D3
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       739D46AF7A1B12A0E3D64F7A04FEB1C517A76595
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3232203d3e20323632393039.roa
Signing time:             Tue 24 May 2022 19:33:09 +0000
ROA not before:           Tue 24 May 2022 19:28:09 +0000
ROA not after:            Tue 23 May 2023 19:33:09 +0000
asID:                     262909
IP address blocks:        177.36.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9d:46:af:7a:1b:12:a0:e3:d6:4f:7a:04:fe:b1:c5:17:a7:65:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 24 19:28:09 2022 GMT
            Not After : May 23 19:33:09 2023 GMT
        Subject: CN=3B6219B8653536AFF314836D624A7798FED6A2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:4b:f8:f4:fc:16:d2:7e:86:44:35:fc:bd:
                    05:b7:ec:2b:dc:ea:19:23:9f:04:27:20:95:62:9b:
                    98:20:4c:76:1f:d7:23:4d:14:e4:4e:57:a8:4e:86:
                    86:21:ec:85:32:6f:2d:cc:53:47:b3:e2:e4:f6:52:
                    b9:06:08:38:97:ee:bf:8a:89:5a:eb:ef:1f:9f:bc:
                    50:94:b0:01:fc:78:03:de:3b:18:31:11:f9:67:4f:
                    d2:00:c6:8e:8d:34:d0:f9:0d:9b:a3:55:b5:72:3b:
                    41:0c:2f:db:39:76:a5:79:89:45:9b:05:c8:c2:9c:
                    1f:8d:fa:d2:f9:ce:21:42:77:d4:9c:9a:3e:b9:57:
                    19:86:78:a7:19:f5:48:b4:5d:5a:df:2b:11:7e:c3:
                    80:00:bf:9d:08:e1:e1:32:fc:41:15:c7:39:c5:c0:
                    9c:f5:0b:63:c0:ac:c1:a6:70:71:e3:c5:47:1f:92:
                    fe:26:71:15:cd:f9:c8:66:50:d9:b3:91:f2:ae:16:
                    aa:e0:8d:03:d0:a0:58:2e:58:38:4d:4b:c7:cf:e6:
                    e2:2d:82:4b:1f:1d:ed:22:37:06:ac:05:88:3f:57:
                    3d:2a:09:a3:96:d7:3c:e2:6f:ba:25:69:2e:08:76:
                    82:88:52:4a:0b:81:e2:94:56:80:47:99:39:ed:54:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:19:B8:65:35:36:AF:F3:14:83:6D:62:4A:77:98:FE:D6:A2:D3
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3232203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:d8:76:99:63:a1:d0:45:e3:2d:c9:5c:87:ed:27:db:18:
         e3:93:1b:19:c4:70:19:9b:a7:f2:57:c0:7e:cf:fb:87:50:b3:
         54:a5:6e:04:cb:d4:f9:d4:99:42:bf:20:62:fa:a5:b6:af:0b:
         e8:26:c8:22:1b:a2:48:11:06:45:bb:2a:43:c3:74:8f:8d:d4:
         da:1a:45:fd:5a:2b:ad:3b:c4:11:da:00:1c:f4:75:76:c2:32:
         7f:a8:de:b5:1b:bb:a1:a7:c5:2f:0e:17:f6:ec:a3:0f:d9:d4:
         2b:7d:68:3b:ae:f6:bc:1d:7d:bd:de:1c:18:22:9b:02:e1:9e:
         a0:ec:eb:78:dc:94:6d:a0:c3:cf:b9:e3:62:00:93:57:e0:6c:
         19:5d:94:af:1f:52:8f:64:3f:bb:67:10:63:d4:29:49:3b:8f:
         54:6e:db:f1:46:13:7b:93:7e:58:c8:a5:4f:a7:2a:25:a3:4c:
         77:cb:79:61:5a:be:b5:48:ef:63:85:4e:3a:04:d1:9a:81:07:
         13:f1:ab:26:7f:22:3f:f5:f0:11:95:87:77:b2:0f:0f:f7:9e:
         e7:48:2e:32:5a:0b:6c:35:53:a5:b8:66:35:fe:b5:37:15:ea:
         e4:64:da:bd:51:0d:cf:9c:08:c0:4b:0c:5b:86:fd:ad:9a:d0:
         e5:7b:d5:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc51Gr3obEqDj1k96BP6xxRenZZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENjZDMTI1QjI3QkFCNTE1RERFNjY2RkYzNjAxRDkx
NkEyMDI1QzAeFw0yMjA1MjQxOTI4MDlaFw0yMzA1MjMxOTMzMDlaMDMxMTAvBgNV
BAMTKDNCNjIxOUI4NjUzNTM2QUZGMzE0ODM2RDYyNEE3Nzk4RkVENkEyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMUv49PwW0n6GRDX8vQW37Cvc
6hkjnwQnIJVim5ggTHYf1yNNFOROV6hOhoYh7IUyby3MU0ez4uT2UrkGCDiX7r+K
iVrr7x+fvFCUsAH8eAPeOxgxEflnT9IAxo6NNND5DZujVbVyO0EML9s5dqV5iUWb
BcjCnB+N+tL5ziFCd9Scmj65VxmGeKcZ9Ui0XVrfKxF+w4AAv50I4eEy/EEVxznF
wJz1C2PArMGmcHHjxUcfkv4mcRXN+chmUNmzkfKuFqrgjQPQoFguWDhNS8fP5uIt
gksfHe0iNwasBYg/Vz0qCaOW1zzib7olaS4IdoKIUkoLgeKUVoBHmTntVPQDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO2IZuGU1Nq/zFINtYkp3mP7WotMwHwYDVR0j
BBgwFoAUJNZsElsnurUV3eZm/zYB2RaiAlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndZRE1YVnljUkV2ZTZ1cjJxYm1wUVhmYkFpNWd1Q2duc3FTclhzVVVC
d3MvMC8yNEQ2NkMxMjVCMjdCQUI1MTVEREU2NjZGRjM2MDFEOTE2QTIwMjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0RDY2QzEyNUIyN0JBQjUx
NURERTY2NkZGMzYwMUQ5MTZBMjAyNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3WURNWFZ5Y1JFdmU2dXIycWJtcFFYZmJBaTVndUNnbnNxU3JYc1VVQndzLzAv
MzEzNzM3MmUzMzM2MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzkzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSQ8MA0GCSqGSIb3DQEBCwUAA4IBAQCmrdh2mWOh
0EXjLclch+0n2xjjkxsZxHAZm6fyV8B+z/uHULNUpW4Ey9T51JlCvyBi+qW2rwvo
JsgiG6JIEQZFuypDw3SPjdTaGkX9WiutO8QR2gAc9HV2wjJ/qN61G7uhp8UvDhf2
7KMP2dQrfWg7rva8HX293hwYIpsC4Z6g7Ot43JRtoMPPueNiAJNX4GwZXZSvH1KP
ZD+7ZxBj1ClJO49UbtvxRhN7k35YyKVPpyolo0x3y3lhWr61SO9jhU46BNGagQcT
8asmfyI/9fARlYd3sg8P957nSC4yWgtsNVOluGY1/rU3FerkZNq9UQ3PnAjASwxb
hv2tmtDle9W/
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:06 2025 by rpki-client