Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3234203d3e20323632393039.roa
File:                     3137372e33362e36302e302f32322d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          19BwdqSxVxnePGHYVUSNZ/BxjqvLri4vElU/hKeqBz8=
Subject key identifier:   8F:FD:2D:65:CE:DF:4E:BA:40:90:DA:EA:6B:9B:9D:9A:42:EA:51:AA
Certificate issuer:       /CN=24D66C125B27BAB515DDE666FF3601D916A2025C
Certificate serial:       759C178AD51B0345126E99231D4F873AAD0B5D8A
Authority key identifier: 24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3234203d3e20323632393039.roa
Signing time:             Wed 25 May 2022 19:00:36 +0000
ROA not before:           Wed 25 May 2022 18:55:36 +0000
ROA not after:            Wed 24 May 2023 19:00:36 +0000
asID:                     262909
IP address blocks:        177.36.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9c:17:8a:d5:1b:03:45:12:6e:99:23:1d:4f:87:3a:ad:0b:5d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D66C125B27BAB515DDE666FF3601D916A2025C
        Validity
            Not Before: May 25 18:55:36 2022 GMT
            Not After : May 24 19:00:36 2023 GMT
        Subject: CN=8FFD2D65CEDF4EBA4090DAEA6B9B9D9A42EA51AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:d8:f9:e9:c7:93:74:3d:7e:d3:7c:c0:18:
                    e0:a7:56:49:e9:0b:b6:a6:d7:f4:f4:99:44:b1:21:
                    dd:ea:2f:a6:07:75:22:51:11:19:62:19:b9:46:fb:
                    39:14:58:1e:c5:01:b4:5d:20:b6:af:12:2a:4b:56:
                    48:1f:3e:8b:b7:06:70:01:1f:11:9b:ee:96:7d:3b:
                    ea:28:58:64:29:96:18:20:ef:47:d0:02:f6:ec:54:
                    1a:26:24:a1:ca:30:32:e0:67:32:02:ea:57:b8:63:
                    12:ba:cc:f4:ad:48:31:83:ca:41:c8:87:fb:e6:4b:
                    da:96:69:99:51:6b:56:7a:8a:b4:32:4a:a5:34:49:
                    03:a9:fd:ca:a3:12:37:5f:d3:bd:35:10:24:12:6d:
                    f1:72:62:52:59:dd:cc:fd:1b:71:fa:62:b0:ac:e3:
                    0e:dc:0a:17:c8:92:65:21:5c:f7:2b:71:65:69:4f:
                    4e:7c:6c:77:b4:c6:ca:e1:92:9b:82:5c:c7:88:33:
                    b5:51:b4:1e:33:9d:c5:7e:4b:7a:46:4b:7e:4e:60:
                    7c:10:68:0f:38:b1:ff:5f:af:fb:27:e4:86:de:73:
                    0f:0a:d6:65:99:73:2a:0d:2d:e4:67:55:93:ec:98:
                    1e:6a:57:95:06:dd:ec:5d:c1:ab:fb:03:9e:17:21:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FD:2D:65:CE:DF:4E:BA:40:90:DA:EA:6B:9B:9D:9A:42:EA:51:AA
            X509v3 Authority Key Identifier:
                keyid:24:D6:6C:12:5B:27:BA:B5:15:DD:E6:66:FF:36:01:D9:16:A2:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/24D66C125B27BAB515DDE666FF3601D916A2025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D66C125B27BAB515DDE666FF3601D916A2025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36302e302f32322d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:64:07:dd:26:26:1f:6a:cd:3a:4b:32:cd:50:df:ad:9d:
         a4:0f:7a:41:3a:7d:3f:af:06:5b:5c:ee:7c:fd:29:b1:5c:85:
         a6:dd:d7:15:35:33:1e:82:27:ae:37:dc:82:f4:50:e0:b8:03:
         f6:31:c6:80:cb:34:43:e6:61:3d:f7:99:cd:aa:c9:34:38:1d:
         8c:e2:cd:b6:09:b6:9b:6d:91:86:07:3c:a6:30:72:dd:dc:b8:
         48:22:51:d2:5e:a0:1a:93:5d:21:7e:37:02:a2:bd:12:a8:62:
         99:39:1e:2c:2a:bf:7f:5d:5f:f3:2e:ef:ef:bf:0c:9f:a8:48:
         10:40:15:7a:b8:e6:fa:61:ff:e2:1b:7f:0d:6d:de:77:06:7f:
         06:06:0b:ad:6f:d1:e2:81:84:64:33:de:98:ef:9f:83:40:9f:
         8e:d3:0a:4f:72:ad:cd:0a:4e:ee:da:80:aa:8a:9b:b7:b0:87:
         81:5b:e5:40:c5:4a:dc:eb:b8:19:a2:33:3c:0e:90:c1:e5:e4:
         ed:24:0f:b9:3f:bf:b2:49:6d:26:53:a1:9f:3a:9d:55:76:ce:
         08:82:36:ad:5c:01:33:ff:04:63:d9:3d:41:8b:b4:87:7b:17:
         de:9e:07:68:44:96:9d:79:f7:22:57:fc:c5:ba:f5:c3:aa:d0:
         05:87:7c:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdZwXitUbA0USbpkjHU+HOq0LXYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENjZDMTI1QjI3QkFCNTE1RERFNjY2RkYzNjAxRDkx
NkEyMDI1QzAeFw0yMjA1MjUxODU1MzZaFw0yMzA1MjQxOTAwMzZaMDMxMTAvBgNV
BAMTKDhGRkQyRDY1Q0VERjRFQkE0MDkwREFFQTZCOUI5RDlBNDJFQTUxQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiatj56ceTdD1+03zAGOCnVknp
C7am1/T0mUSxId3qL6YHdSJRERliGblG+zkUWB7FAbRdILavEipLVkgfPou3BnAB
HxGb7pZ9O+ooWGQplhgg70fQAvbsVBomJKHKMDLgZzIC6le4YxK6zPStSDGDykHI
h/vmS9qWaZlRa1Z6irQySqU0SQOp/cqjEjdf0701ECQSbfFyYlJZ3cz9G3H6YrCs
4w7cChfIkmUhXPcrcWVpT058bHe0xsrhkpuCXMeIM7VRtB4zncV+S3pGS35OYHwQ
aA84sf9fr/sn5Ibecw8K1mWZcyoNLeRnVZPsmB5qV5UG3exdwav7A54XIQTlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUj/0tZc7fTrpAkNrqa5udmkLqUaowHwYDVR0j
BBgwFoAUJNZsElsnurUV3eZm/zYB2RaiAlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndZRE1YVnljUkV2ZTZ1cjJxYm1wUVhmYkFpNWd1Q2duc3FTclhzVVVC
d3MvMC8yNEQ2NkMxMjVCMjdCQUI1MTVEREU2NjZGRjM2MDFEOTE2QTIwMjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0RDY2QzEyNUIyN0JBQjUx
NURERTY2NkZGMzYwMUQ5MTZBMjAyNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3WURNWFZ5Y1JFdmU2dXIycWJtcFFYZmJBaTVndUNnbnNxU3JYc1VVQndzLzAv
MzEzNzM3MmUzMzM2MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSQ8MA0GCSqGSIb3DQEBCwUAA4IBAQB+O2QH3SYm
H2rNOksyzVDfrZ2kD3pBOn0/rwZbXO58/SmxXIWm3dcVNTMegieuN9yC9FDguAP2
McaAyzRD5mE995nNqsk0OB2M4s22CbabbZGGBzymMHLd3LhIIlHSXqAak10hfjcC
or0SqGKZOR4sKr9/XV/zLu/vvwyfqEgQQBV6uOb6Yf/iG38Nbd53Bn8GBgutb9Hi
gYRkM96Y75+DQJ+O0wpPcq3NCk7u2oCqipu3sIeBW+VAxUrc67gZojM8DpDB5eTt
JA+5P7+ySW0mU6GfOp1Vds4IgjatXAEz/wRj2T1Bi7SHexfengdoRJadefciV/zF
uvXDqtAFh3zl
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:31:37 2025 by rpki-client