Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e33362e302e302f32302d3234203d3e203532393635.roa
File:                     3137372e33362e302e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          pAaZiFFm+wlP0SDh+fB1y6umEEM+ZmPju5W1/R8jqOk=
Subject key identifier:   8D:34:B7:0A:7C:EB:EB:E8:C8:AD:9C:0C:7F:D1:EB:26:33:0E:3C:AA
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       620E41091F6D254A8FF1BD75D56F58AB45EC9B36
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e33362e302e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 06 Oct 2022 19:09:03 +0000
ROA not before:           Thu 06 Oct 2022 19:04:03 +0000
ROA not after:            Thu 05 Oct 2023 19:09:03 +0000
asID:                     52965
IP address blocks:        177.36.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:41:09:1f:6d:25:4a:8f:f1:bd:75:d5:6f:58:ab:45:ec:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Oct  6 19:04:03 2022 GMT
            Not After : Oct  5 19:09:03 2023 GMT
        Subject: CN=8D34B70A7CEBEBE8C8AD9C0C7FD1EB26330E3CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:a2:ba:2a:7d:7a:09:73:a6:90:8e:7a:2e:
                    9d:21:01:ce:ff:67:4b:d6:60:75:a0:3b:68:e0:98:
                    7a:79:91:ef:42:00:dd:39:d3:ae:84:8d:49:61:92:
                    86:17:ea:3f:a1:35:78:c9:84:72:71:4d:ef:d2:b8:
                    91:c4:47:5f:12:44:84:e4:8e:2e:bc:f7:18:3d:7d:
                    2e:64:38:30:dc:5d:c3:f9:3f:b9:62:ad:3f:82:4d:
                    90:4e:69:d1:01:41:cf:c4:4a:4e:e3:32:04:70:83:
                    b2:75:41:72:39:60:91:2f:d4:26:60:be:d4:9e:d5:
                    bb:85:83:eb:83:cc:af:38:b6:a0:a6:be:71:f4:7f:
                    f6:24:3a:8f:c6:62:95:1e:1c:17:ba:89:6f:cc:91:
                    b4:59:83:8a:d2:d6:c5:86:fb:5b:ad:e4:2d:3c:9f:
                    92:64:48:48:72:5d:31:a0:bd:e1:36:3f:ce:22:83:
                    d3:45:df:fc:02:80:a9:6a:86:27:b3:ad:5b:7e:24:
                    1c:cc:fa:70:00:32:ed:7a:82:0d:eb:53:5e:b2:ac:
                    2c:7f:65:76:4b:6d:03:53:9d:39:a9:9a:e2:e4:e9:
                    b6:fe:b1:15:3c:23:e4:4a:43:9b:0a:59:d4:e9:2c:
                    c3:b9:87:d3:59:7d:5b:93:0b:12:21:08:8e:1a:ea:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:B7:0A:7C:EB:EB:E8:C8:AD:9C:0C:7F:D1:EB:26:33:0E:3C:AA
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e33362e302e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:ad:9a:17:2d:18:0c:6b:0a:a8:a0:1f:d8:93:e8:3d:ff:
         8b:df:e2:74:48:6c:26:f7:80:61:6e:93:e0:c8:1c:e4:bc:d5:
         14:98:17:ed:bf:74:ae:8f:21:f3:48:a9:0a:c0:9d:58:fe:1a:
         25:74:3f:f7:9e:27:32:42:06:b1:b9:ee:2d:24:4f:41:12:84:
         c8:4d:00:bc:4a:5b:8d:54:8b:31:8a:56:c1:8c:f9:4c:e7:15:
         9e:23:70:91:0d:55:f2:89:d5:03:ed:be:4c:30:1e:21:c7:9a:
         d8:ba:d5:5b:a2:46:36:af:2a:09:b5:22:00:ee:ec:f7:40:76:
         e1:c3:c2:39:61:25:a0:a6:15:59:d7:7d:8d:09:b0:8b:3c:da:
         46:a3:87:df:50:5c:bb:62:e4:c4:00:da:fc:1f:33:30:50:50:
         e9:e7:77:da:a9:02:b0:84:dd:f8:86:67:f3:d2:ec:c0:d0:a5:
         54:f3:01:75:1a:f4:62:80:03:ed:1a:93:d5:df:13:17:87:58:
         0e:8b:29:08:c8:97:70:c3:97:2f:77:5d:04:16:62:6d:b2:52:
         65:60:19:96:bd:2f:df:8b:74:7e:bf:18:e2:c6:bb:5c:9b:da:
         71:ca:c5:d3:bb:21:89:af:81:1d:b4:db:7f:ce:a7:f5:eb:4c:
         27:bd:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:20:21 2025 by rpki-client