Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36312e302f32342d3234203d3e20323632393039.roa
File:                     3137372e33362e36312e302f32342d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          ERuYELik7MvpEZsPO4dnsDmBobwve9sbnNLw2rpZhls=
Subject key identifier:   52:9B:95:4B:87:3C:C4:68:0B:16:A4:57:D0:76:DB:ED:61:95:09:45
Certificate issuer:       /CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
Certificate serial:       5FDCBBB52FDCF67CB3A890282D3656DDD526A858
Authority key identifier: 8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36312e302f32342d3234203d3e20323632393039.roa
Signing time:             Fri 03 Jun 2022 11:18:48 +0000
ROA not before:           Fri 03 Jun 2022 11:13:48 +0000
ROA not after:            Fri 02 Jun 2023 11:18:48 +0000
asID:                     262909
IP address blocks:        177.36.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:bb:b5:2f:dc:f6:7c:b3:a8:90:28:2d:36:56:dd:d5:26:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD4584296B9D33BE347BEB9493BA5B4BE6D9615
        Validity
            Not Before: Jun  3 11:13:48 2022 GMT
            Not After : Jun  2 11:18:48 2023 GMT
        Subject: CN=529B954B873CC4680B16A457D076DBED61950945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:8e:38:55:03:74:87:3c:8a:1c:2f:36:fc:
                    70:d2:b0:42:aa:a0:1d:97:a6:b9:70:44:3e:0f:14:
                    c2:46:d4:dd:37:a1:6b:e8:c9:49:0a:73:ab:0b:af:
                    54:26:a0:2a:3d:c7:af:cc:7e:3e:4e:90:76:a5:67:
                    8b:45:7d:7a:d9:98:f0:cb:7f:85:21:e1:9d:83:9d:
                    9d:91:65:6d:53:92:06:a4:40:7c:76:1a:b9:5a:95:
                    54:d0:87:9f:99:3a:96:6d:b4:b1:68:f3:65:fd:b0:
                    3a:47:85:65:66:7e:d6:97:58:2d:e0:fe:fd:11:3b:
                    ad:d2:33:a4:9a:b8:57:6b:d3:24:ec:fb:fa:f8:14:
                    c5:80:8f:2a:75:f1:3f:c9:67:fc:27:d4:ca:1c:88:
                    ed:36:8b:6e:d8:4c:15:1f:45:48:74:1b:ca:a4:51:
                    b3:9b:6a:d2:3a:95:5f:6a:ce:e8:6d:21:82:4f:05:
                    a5:12:40:fe:b3:ff:37:84:f4:c0:06:84:46:80:0f:
                    15:1d:08:5a:85:cb:88:29:c1:0a:13:04:7f:2b:da:
                    c0:05:82:b5:1c:89:01:33:4a:71:a4:10:94:23:37:
                    f0:f5:f1:d1:f0:81:95:3e:d4:81:69:67:57:79:e3:
                    2a:35:65:87:f4:85:dd:29:c0:d3:d9:5b:a4:9a:13:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:95:4B:87:3C:C4:68:0B:16:A4:57:D0:76:DB:ED:61:95:09:45
            X509v3 Authority Key Identifier:
                keyid:8F:D4:58:42:96:B9:D3:3B:E3:47:BE:B9:49:3B:A5:B4:BE:6D:96:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD4584296B9D33BE347BEB9493BA5B4BE6D9615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e36312e302f32342d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:3b:49:fc:7c:58:9b:38:a4:3a:4d:3a:d3:2e:7c:28:10:
         82:1d:c4:52:38:45:3a:e8:9e:fa:56:bf:ce:a5:2c:a1:1f:7a:
         79:ec:fb:56:60:cd:d6:88:48:d5:8d:5e:1d:9d:a9:5d:1c:b8:
         65:7f:85:c0:2d:6a:1e:b9:46:8f:50:15:c8:2a:54:b7:27:e0:
         cb:26:58:bc:09:d2:9c:10:24:2b:a2:4e:8a:e3:b4:1c:c9:5b:
         12:34:9c:c6:a6:77:ae:5c:d5:4f:0d:ca:88:09:f4:c8:17:04:
         21:7b:1b:9c:7d:ae:a8:89:3e:12:bc:30:6f:6b:a0:65:f6:0f:
         94:5b:8c:f7:04:0d:4c:00:84:84:c9:70:2c:ac:2d:a4:9b:62:
         68:f0:07:25:89:f9:bc:3a:d2:b0:72:72:d5:f6:a8:1f:c0:72:
         5d:27:7d:ab:a8:3e:90:97:3c:2d:c3:f8:42:5d:79:d7:0a:4c:
         04:98:db:ca:d6:be:65:17:bd:05:ad:9f:1b:92:32:ad:b6:20:
         25:22:98:0f:06:fe:9a:e5:75:d6:8c:91:a7:40:f2:69:75:c9:
         a6:d0:9b:d6:32:dc:d2:99:b3:0a:e9:45:c9:34:4d:47:6d:80:
         f1:cf:35:bf:52:55:d1:95:7c:1a:47:bf:97:e8:3b:7e:65:46:
         50:76:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:12 2025 by rpki-client