Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139342e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3139342e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          OcJKOUcxfwNqMhYzEV0SQJfdxLynXKBBYN2VrBsK3+Y=
Subject key identifier:   EE:19:66:2C:5D:76:C4:8F:7B:77:DB:AA:07:2E:57:EB:EC:4A:E5:7C
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       4F78A8F4FCF9C7359CC4803A339DB72600209D3C
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139342e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:51:21 +0000
ROA not before:           Thu 01 Sep 2022 13:46:21 +0000
ROA not after:            Thu 31 Aug 2023 13:51:21 +0000
asID:                     52967
IP address blocks:        177.36.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:78:a8:f4:fc:f9:c7:35:9c:c4:80:3a:33:9d:b7:26:00:20:9d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:46:21 2022 GMT
            Not After : Aug 31 13:51:21 2023 GMT
        Subject: CN=EE19662C5D76C48F7B77DBAA072E57EBEC4AE57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:68:93:94:47:fc:51:2d:8a:10:39:3f:c2:
                    d0:8c:50:0f:b9:84:e3:00:dc:67:28:04:ac:da:eb:
                    c7:6d:9a:16:75:02:c2:69:6b:d9:e9:49:33:ec:5e:
                    ff:e0:fe:46:f6:4b:91:46:e3:ae:5a:25:15:e2:e8:
                    36:19:1e:22:c6:97:61:80:ec:be:18:76:43:f1:6c:
                    84:a7:2a:e5:ab:b4:21:6d:3b:6a:02:af:92:bf:b3:
                    99:17:b7:8a:8d:44:25:73:c1:7f:4d:b7:07:27:e6:
                    50:b1:01:09:d9:10:41:03:c1:6d:e0:d7:cf:11:b7:
                    ef:9f:f6:fd:99:6b:0f:0e:72:d5:2a:1c:80:fc:3e:
                    0e:da:e7:ee:e7:ee:bb:ba:46:8c:b4:e7:43:1c:c6:
                    3d:74:62:3c:76:7b:75:af:db:8c:a2:27:e0:a1:95:
                    d9:e6:fc:d7:b9:30:b7:9b:00:70:15:b7:cf:80:f7:
                    d3:97:e3:e7:3b:88:93:0e:43:33:45:03:fb:b6:98:
                    fb:61:bf:04:6e:7e:fa:e5:30:86:7d:83:c5:b9:c0:
                    98:da:20:54:10:9a:04:73:64:92:85:d1:ae:f1:22:
                    a3:7f:f1:12:95:9e:50:65:3c:5f:fd:cc:dc:b9:c1:
                    a0:e5:19:fc:ab:7f:de:a4:63:84:57:9c:71:eb:b7:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:66:2C:5D:76:C4:8F:7B:77:DB:AA:07:2E:57:EB:EC:4A:E5:7C
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139342e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:1c:c8:64:f6:89:31:09:dc:1d:4a:b9:6d:6b:33:c4:53:
         bf:f0:31:43:fb:7b:77:a8:d2:11:40:40:d1:c3:fc:c1:b3:c5:
         98:de:80:35:21:0e:27:9b:2c:dd:6e:38:12:fb:21:c1:b8:b4:
         7c:31:da:cd:4b:ec:ce:d0:af:13:c3:a4:9a:cf:b4:8c:9b:2b:
         45:94:ff:af:65:a5:14:77:e6:c6:db:4c:0c:71:8e:20:d0:d2:
         f1:7c:f1:02:88:f2:09:63:e9:dc:0f:39:c6:0e:d0:a4:04:ce:
         b4:7d:bb:9f:70:c2:b3:24:77:4a:24:a4:cf:7b:37:fb:f8:41:
         70:88:32:5a:85:c7:bd:f3:d3:04:10:0b:7b:31:67:51:c7:19:
         d7:fc:03:53:41:fe:24:1f:2b:da:de:92:b6:84:12:f0:63:8e:
         ed:ba:a4:c6:eb:27:74:22:83:ca:9b:82:2a:4a:7f:c7:73:cd:
         dc:db:8b:04:46:13:89:2a:2f:a0:60:57:28:66:06:5d:2e:58:
         42:8f:d9:57:61:e9:11:c7:1a:ad:b7:7b:bc:15:2a:13:ec:1a:
         59:df:3b:56:72:a2:6e:c1:4d:61:ba:ca:54:c3:04:c3:74:f3:
         a7:7f:e0:b6:9e:96:3a:c8:e4:de:d4:10:16:ba:f0:f7:e8:bb:
         bf:4f:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:47 2025 by rpki-client