Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f31392d3234203d3e203532393637.roa
File:                     3137372e33362e3139322e302f31392d3234203d3e203532393637.roa (raw, json)
Hash identifier:          Sc6b03Z6oH015QZ1vENJNJtpTFAxpqZdFIMe53h1p+k=
Subject key identifier:   72:75:C2:69:A5:C5:A4:5B:3C:AF:CE:2D:54:25:71:FC:4A:F7:1D:D7
Certificate issuer:       /CN=AF13A2166949DAD17884467559DDBA331811C5FC
Certificate serial:       287E4A662BFC7A747FE73D6F10803CDA102F0CF5
Authority key identifier: AF:13:A2:16:69:49:DA:D1:78:84:46:75:59:DD:BA:33:18:11:C5:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF13A2166949DAD17884467559DDBA331811C5FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f31392d3234203d3e203532393637.roa
Signing time:             Thu 11 Aug 2022 21:24:42 +0000
ROA not before:           Thu 11 Aug 2022 21:19:42 +0000
ROA not after:            Thu 10 Aug 2023 21:24:42 +0000
asID:                     52967
IP address blocks:        177.36.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7e:4a:66:2b:fc:7a:74:7f:e7:3d:6f:10:80:3c:da:10:2f:0c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF13A2166949DAD17884467559DDBA331811C5FC
        Validity
            Not Before: Aug 11 21:19:42 2022 GMT
            Not After : Aug 10 21:24:42 2023 GMT
        Subject: CN=7275C269A5C5A45B3CAFCE2D542571FC4AF71DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:9d:34:c1:2f:76:83:3b:62:3d:91:5c:0a:
                    e9:5f:87:c5:9a:73:c3:78:26:50:9d:c3:0f:41:f8:
                    a3:de:33:f7:ea:d6:3a:60:4f:8d:d0:29:1f:b7:0f:
                    30:a2:7a:c1:76:1f:93:18:8e:d8:c3:d2:84:50:31:
                    fb:39:f8:2a:8b:ed:3b:85:69:e0:5b:ea:3f:22:c7:
                    78:80:31:3e:b3:2f:00:ad:df:3f:7e:a5:e3:d6:9b:
                    de:4f:37:57:84:07:71:3b:91:8d:00:18:fa:ee:33:
                    fb:77:48:10:59:0f:55:d6:8a:3d:6e:e8:eb:87:77:
                    9b:fd:ad:ee:e8:df:38:ab:68:97:97:bf:1b:a6:50:
                    d8:1f:43:fc:a5:c0:71:a2:21:84:34:cc:92:ea:43:
                    05:39:a5:57:84:44:ea:57:df:4d:a2:a6:47:0f:18:
                    9a:e5:ed:00:ea:a6:17:88:4d:7a:0e:d1:df:26:9b:
                    1a:e5:e8:59:ec:5b:7e:99:b7:95:d5:cc:fc:a0:e6:
                    b1:42:3d:a9:54:75:5f:c6:eb:c1:ff:8b:ac:69:08:
                    dd:6d:60:51:4b:e6:af:62:e4:aa:5b:ae:dd:da:32:
                    0f:78:1c:94:48:3f:58:1d:e3:ae:84:98:ff:a1:5d:
                    cc:b5:16:62:4b:bf:01:f3:78:f5:a8:cc:57:a1:62:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:C2:69:A5:C5:A4:5B:3C:AF:CE:2D:54:25:71:FC:4A:F7:1D:D7
            X509v3 Authority Key Identifier:
                keyid:AF:13:A2:16:69:49:DA:D1:78:84:46:75:59:DD:BA:33:18:11:C5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/AF13A2166949DAD17884467559DDBA331811C5FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF13A2166949DAD17884467559DDBA331811C5FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f31392d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:20:53:21:2b:02:93:a5:f3:7b:44:ef:5d:03:b5:80:1a:
         89:12:89:46:9f:ff:f4:ab:61:8d:3c:36:04:60:ab:58:b8:d6:
         44:a4:84:fa:f6:40:22:1b:65:b8:67:6c:35:ad:88:21:80:9b:
         ce:f1:67:fe:18:29:ab:aa:0e:90:75:6d:44:39:cd:51:0f:ff:
         77:73:29:41:b6:98:ff:dc:5e:bd:2b:e7:4f:cc:0c:5e:0e:31:
         68:a4:1c:b1:50:ca:20:cf:f8:18:10:9e:84:c1:30:70:18:87:
         be:b9:f2:43:d8:05:2f:0e:e1:3f:4d:23:5f:79:8e:20:bc:37:
         59:13:a6:7f:2e:17:5d:93:94:de:7c:2d:d7:03:14:9b:22:36:
         13:a1:6b:93:cf:fc:81:96:db:19:34:b7:bd:52:dc:47:7c:6e:
         8f:3d:6b:a0:89:06:96:b6:49:67:e3:bb:1a:08:36:a2:8b:bf:
         a0:de:bd:3e:b3:d1:c3:e6:8d:a0:3a:fd:46:30:f3:50:a8:39:
         63:12:69:72:1e:b7:50:59:b5:83:30:66:e8:7e:9d:c7:64:86:
         b6:7b:e5:54:9f:9b:f8:20:6f:5e:52:ed:29:7a:0e:1f:44:b4:
         b9:95:57:88:ab:c5:7e:83:3a:ea:2f:b2:1f:69:71:42:9a:2f:
         c3:d6:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:17 2025 by rpki-client