Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3139322e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          fTCKG814Ysc6il/9Muki4EKya4eDSvFTfPNr0tBn7N4=
Subject key identifier:   8A:E8:F9:57:AD:EB:0C:F9:A2:80:61:4B:B8:73:E6:5E:23:E8:2D:7D
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       35CDB0E01FA446B36322419DBB2994723D7FF5FB
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:51:12 +0000
ROA not before:           Thu 01 Sep 2022 13:46:12 +0000
ROA not after:            Thu 31 Aug 2023 13:51:12 +0000
asID:                     52967
IP address blocks:        177.36.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:b0:e0:1f:a4:46:b3:63:22:41:9d:bb:29:94:72:3d:7f:f5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:46:12 2022 GMT
            Not After : Aug 31 13:51:12 2023 GMT
        Subject: CN=8AE8F957ADEB0CF9A280614BB873E65E23E82D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:ff:dc:1a:69:61:57:85:64:30:96:a7:ca:
                    60:ac:e3:91:de:39:12:b4:80:4c:82:75:25:74:a2:
                    5a:6b:74:c2:f2:61:6d:d5:38:cc:b8:fa:f5:05:6d:
                    44:4d:ca:22:ff:c6:42:97:a1:1e:15:d9:76:d4:02:
                    38:10:f0:32:c3:69:28:98:c6:ae:04:b1:03:2a:d6:
                    26:6c:be:af:da:65:c0:7c:30:e0:25:bf:0f:8e:9c:
                    2b:c7:c7:3b:f7:bc:2f:2b:44:78:52:ba:0c:a6:93:
                    7e:93:b1:e6:d1:3b:e8:c7:48:98:4f:13:34:e5:a1:
                    ac:79:6a:26:08:89:ca:5b:66:55:30:56:50:fe:7f:
                    c7:0b:c0:3e:01:1b:85:ee:d2:ee:01:02:ac:ed:fa:
                    24:45:ea:45:81:fe:b7:cd:e6:63:cf:f7:58:98:da:
                    89:ae:f8:ee:9e:9b:eb:ce:58:d1:78:1e:82:bb:ff:
                    33:14:eb:a5:98:de:5f:d7:8c:64:cd:13:35:cc:3b:
                    28:cf:33:46:cd:35:2d:4a:2e:bc:5f:02:58:15:b2:
                    4c:94:5f:6d:2c:ad:68:27:2f:40:17:46:1f:dd:7b:
                    2d:ae:04:b8:be:33:20:70:d3:b2:ad:5a:bb:4a:ef:
                    dc:71:5f:64:57:65:91:8b:48:c5:e8:cb:28:82:9c:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:F9:57:AD:EB:0C:F9:A2:80:61:4B:B8:73:E6:5E:23:E8:2D:7D
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139322e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:8c:81:9b:36:f8:56:d6:58:35:3c:b7:cd:14:67:d2:02:
         00:ec:93:d1:1d:e7:8d:24:d6:6c:ed:d8:b9:16:92:57:07:0e:
         61:cb:67:ac:3d:72:d0:5d:2e:ae:18:c7:26:a8:69:3c:cc:fe:
         12:e5:87:5f:4d:15:16:b0:20:e8:21:b4:0b:46:e9:2c:14:9c:
         e1:d3:87:e0:c3:95:8a:cf:9b:0e:60:54:e4:54:fb:e3:55:9b:
         49:28:f2:b5:34:b1:b7:23:97:a5:f0:73:d8:1f:ed:e8:b9:f2:
         1d:3f:c7:06:8d:31:da:21:bd:38:e7:27:66:b2:b3:b4:6b:7f:
         ff:eb:1f:98:a4:f2:24:e9:d3:5e:ea:10:71:b1:51:1e:ed:a8:
         4a:d8:5f:51:2e:33:79:1b:21:e3:dc:ce:24:a8:92:5f:98:b8:
         71:9b:61:0d:89:91:25:d8:1b:cf:97:a8:f7:b9:95:7f:88:07:
         2c:d2:5b:db:fa:29:d9:f1:b9:a6:d1:c3:17:2a:7d:d3:ab:b8:
         fb:aa:9d:ba:50:53:d8:a5:12:b1:3f:00:3e:7f:c8:f7:3b:ca:
         19:c1:17:dc:49:3b:b4:8c:2f:e3:b9:3a:b9:fa:55:52:18:75:
         4f:5c:36:87:82:f9:22:90:6c:d8:4f:c3:bc:e1:d7:dd:de:28:
         cf:66:26:41
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNc2w4B+kRrNjIkGduymUcj1/9fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMzQUNGQTA2QkNCMUMxMDZFOEZEQUQwN0VCMjY1NUMz
NzQzOEM4MTAeFw0yMjA5MDExMzQ2MTJaFw0yMzA4MzExMzUxMTJaMDMxMTAvBgNV
BAMTKDhBRThGOTU3QURFQjBDRjlBMjgwNjE0QkI4NzNFNjVFMjNFODJEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzv/cGmlhV4VkMJanymCs45He
ORK0gEyCdSV0olprdMLyYW3VOMy4+vUFbURNyiL/xkKXoR4V2XbUAjgQ8DLDaSiY
xq4EsQMq1iZsvq/aZcB8MOAlvw+OnCvHxzv3vC8rRHhSugymk36TsebRO+jHSJhP
EzTloax5aiYIicpbZlUwVlD+f8cLwD4BG4Xu0u4BAqzt+iRF6kWB/rfN5mPP91iY
2omu+O6em+vOWNF4HoK7/zMU66WY3l/XjGTNEzXMOyjPM0bNNS1KLrxfAlgVskyU
X20srWgnL0AXRh/dey2uBLi+MyBw07KtWrtK79xxX2RXZZGLSMXoyyiCnJEhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiuj5V63rDPmigGFLuHPmXiPoLX0wHwYDVR0j
BBgwFoAUEzrPoGvLHBBuj9rQfrJlXDdDjIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVp6b1R3Y1FDM2JQcGFLWTFNOFJhbTc2Y2Z5QkRHTW5QaTl5ckN5RXNG
NFQvMC8xMzNBQ0ZBMDZCQ0IxQzEwNkU4RkRBRDA3RUIyNjU1QzM3NDM4QzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzM0FDRkEwNkJDQjFDMTA2
RThGREFEMDdFQjI2NTVDMzc0MzhDODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Faem9Ud2NRQzNiUHBhS1kxTThSYW03NmNmeUJER01uUGk5eXJDeUVzRjRULzAv
MzEzNzM3MmUzMzM2MmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSTAMA0GCSqGSIb3DQEBCwUAA4IBAQCoh4yBmzb4
VtZYNTy3zRRn0gIA7JPRHeeNJNZs7di5FpJXBw5hy2esPXLQXS6uGMcmqGk8zP4S
5YdfTRUWsCDoIbQLRuksFJzh04fgw5WKz5sOYFTkVPvjVZtJKPK1NLG3I5el8HPY
H+3oufIdP8cGjTHaIb045ydmsrO0a3//6x+YpPIk6dNe6hBxsVEe7ahK2F9RLjN5
GyHj3M4kqJJfmLhxm2ENiZEl2BvPl6j3uZV/iAcs0lvb+inZ8bmm0cMXKn3Tq7j7
qp26UFPYpRKxPwA+f8j3O8oZwRfcSTu0jC/juTq5+lVSGHVPXDaHgvkikGzYT8O8
4dfd3ijPZiZB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org