Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3332203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32322d3332203d3e20323731323136.roa (raw, json)
Hash identifier:          X++XoesRR6kaJYnDRQWeMJAF/lCE7MEaaBshVA1ZhXg=
Subject key identifier:   59:F7:F4:1C:60:34:18:82:E3:36:E4:3B:E9:F6:60:36:28:92:29:09
Certificate issuer:       /CN=2D57DC568E3C8E17BB6B774884F023141D642273
Certificate serial:       33D0B035E48A131F50C8FC5D5F97E821E60877EA
Authority key identifier: 2D:57:DC:56:8E:3C:8E:17:BB:6B:77:48:84:F0:23:14:1D:64:22:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D57DC568E3C8E17BB6B774884F023141D642273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3332203d3e20323731323136.roa
Signing time:             Mon 23 Dec 2024 16:12:15 +0000
ROA not before:           Mon 23 Dec 2024 16:07:15 +0000
ROA not after:            Mon 22 Dec 2025 16:12:15 +0000
asID:                     271216
IP address blocks:        177.36.76.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d0:b0:35:e4:8a:13:1f:50:c8:fc:5d:5f:97:e8:21:e6:08:77:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D57DC568E3C8E17BB6B774884F023141D642273
        Validity
            Not Before: Dec 23 16:07:15 2024 GMT
            Not After : Dec 22 16:12:15 2025 GMT
        Subject: CN=59F7F41C60341882E336E43BE9F6603628922909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:c6:f7:fc:fa:43:0a:e4:02:40:b8:8d:b5:
                    f9:6a:36:0e:23:a2:3a:02:a7:d9:8e:21:2a:46:61:
                    84:ab:d8:b9:cf:2c:a0:d2:bd:9a:03:ed:3c:b0:b6:
                    00:f0:07:5b:8a:01:cd:fa:8e:dc:3e:f4:52:33:f7:
                    e9:ee:99:f9:3d:47:c9:ed:60:23:aa:38:7f:af:34:
                    a0:ac:6d:87:59:b1:0a:5d:67:94:0b:5e:a0:0c:89:
                    36:a3:24:13:56:2f:72:96:09:df:91:30:30:28:66:
                    89:b1:33:9f:52:da:d8:78:2c:eb:e5:6f:f9:00:f2:
                    52:6c:b7:72:4c:f0:9a:85:33:d2:8a:90:42:54:bf:
                    9d:c0:30:c0:19:9c:4c:4e:df:56:50:8e:8d:5b:f2:
                    c7:aa:50:49:30:2a:24:a0:75:29:1e:92:d0:da:e6:
                    4e:3d:10:2d:b1:17:b5:c6:c0:23:20:f6:d1:58:8d:
                    d2:90:fb:e2:58:0e:b1:52:50:0d:fb:1a:23:f4:9a:
                    91:43:dd:d8:3d:bf:80:af:d3:5b:85:00:0b:1e:64:
                    13:73:78:9e:46:da:5b:41:21:53:6f:a2:cb:45:f3:
                    6d:03:06:20:3c:bf:53:52:32:fd:99:08:e6:9a:13:
                    9d:24:df:0f:fb:57:96:29:10:8b:d0:1a:d9:e5:d1:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:F4:1C:60:34:18:82:E3:36:E4:3B:E9:F6:60:36:28:92:29:09
            X509v3 Authority Key Identifier:
                keyid:2D:57:DC:56:8E:3C:8E:17:BB:6B:77:48:84:F0:23:14:1D:64:22:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/2D57DC568E3C8E17BB6B774884F023141D642273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D57DC568E3C8E17BB6B774884F023141D642273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32322d3332203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:50:c9:cb:3b:fd:7e:01:41:d2:90:b3:a1:5f:eb:0d:ec:7f:
         6f:e1:1c:c5:1e:d2:68:bb:c8:61:d4:af:a2:00:f9:20:39:a1:
         b1:ab:10:cf:f4:5c:ea:e8:09:8a:dc:e3:82:c6:94:34:99:1c:
         15:e7:f6:4b:1c:ff:cc:98:72:4b:ac:b1:ad:13:a8:56:86:ca:
         1c:9e:fb:00:b0:25:7a:8d:69:76:47:67:37:16:5e:4f:19:af:
         d3:ac:a5:66:aa:fc:a6:35:43:9c:4c:73:e2:c6:9f:ca:ac:68:
         e0:29:02:31:19:5c:63:08:ad:37:a2:22:63:c0:83:de:c7:5a:
         1b:69:84:8a:60:e6:ae:95:0e:71:b2:4b:2f:c7:2d:df:39:03:
         81:9b:3c:a2:e0:ba:40:70:f6:82:d3:9b:54:b1:1e:51:4e:4a:
         41:74:39:6e:77:12:55:22:d8:51:9d:06:7e:36:ee:12:05:fb:
         c1:0b:f6:0d:0c:cd:9b:27:36:8a:48:5e:48:a8:22:54:a3:54:
         10:6f:88:5f:a6:f0:80:98:66:dd:e6:ac:20:59:45:d2:98:04:
         ae:9a:1d:68:30:94:07:f9:a1:3a:1c:12:e0:84:a3:16:6e:23:
         db:a6:48:79:03:9b:66:dc:46:8b:80:7d:36:8b:63:af:15:40:
         4d:93:46:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM9CwNeSKEx9QyPxdX5foIeYId+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1N0RDNTY4RTNDOEUxN0JCNkI3NzQ4ODRGMDIzMTQx
RDY0MjI3MzAeFw0yNDEyMjMxNjA3MTVaFw0yNTEyMjIxNjEyMTVaMDMxMTAvBgNV
BAMTKDU5RjdGNDFDNjAzNDE4ODJFMzM2RTQzQkU5RjY2MDM2Mjg5MjI5MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+8b3/PpDCuQCQLiNtflqNg4j
ojoCp9mOISpGYYSr2LnPLKDSvZoD7TywtgDwB1uKAc36jtw+9FIz9+numfk9R8nt
YCOqOH+vNKCsbYdZsQpdZ5QLXqAMiTajJBNWL3KWCd+RMDAoZomxM59S2th4LOvl
b/kA8lJst3JM8JqFM9KKkEJUv53AMMAZnExO31ZQjo1b8seqUEkwKiSgdSkektDa
5k49EC2xF7XGwCMg9tFYjdKQ++JYDrFSUA37GiP0mpFD3dg9v4Cv01uFAAseZBNz
eJ5G2ltBIVNvostF820DBiA8v1NSMv2ZCOaaE50k3w/7V5YpEIvQGtnl0RbvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWff0HGA0GILjNuQ76fZgNiiSKQkwHwYDVR0j
BBgwFoAULVfcVo48jhe7a3dIhPAjFB1kInMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu
S1QvMC8yRDU3REM1NjhFM0M4RTE3QkI2Qjc3NDg4NEYwMjMxNDFENjQyMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTdEQzU2OEUzQzhFMTdC
QjZCNzc0ODg0RjAyMzE0MUQ2NDIyNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RLd2lCM01IRFU5OTEyUHhVWXVBTGQ4aEd6dGZYaWI5V0RBR0FDVDVjbktULzAv
MzEzNzM3MmUzMzM2MmUzNzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSRMMA0GCSqGSIb3DQEBCwUAA4IBAQCBUMnLO/1+
AUHSkLOhX+sN7H9v4RzFHtJou8hh1K+iAPkgOaGxqxDP9Fzq6AmK3OOCxpQ0mRwV
5/ZLHP/MmHJLrLGtE6hWhsocnvsAsCV6jWl2R2c3Fl5PGa/TrKVmqvymNUOcTHPi
xp/KrGjgKQIxGVxjCK03oiJjwIPex1obaYSKYOaulQ5xsksvxy3fOQOBmzyi4LpA
cPaC05tUsR5RTkpBdDludxJVIthRnQZ+Nu4SBfvBC/YNDM2bJzaKSF5IqCJUo1QQ
b4hfpvCAmGbd5qwgWUXSmASumh1oMJQH+aE6HBLghKMWbiPbpkh5A5tm3EaLgH02
i2OvFUBNk0as
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:24:06 2025 by rpki-client