Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139352e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3139352e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          uqU/OgVn30J6jd6OXrAunzke2W7LeLQcM24dsyOzFu8=
Subject key identifier:   63:73:44:85:52:EF:09:A3:36:7E:25:07:42:5C:8A:53:38:AB:49:D8
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       64F8E2B0804635B3E82D78E2406834F434501519
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139352e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:51:32 +0000
ROA not before:           Thu 01 Sep 2022 13:46:32 +0000
ROA not after:            Thu 31 Aug 2023 13:51:32 +0000
asID:                     52967
IP address blocks:        177.36.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f8:e2:b0:80:46:35:b3:e8:2d:78:e2:40:68:34:f4:34:50:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:46:32 2022 GMT
            Not After : Aug 31 13:51:32 2023 GMT
        Subject: CN=6373448552EF09A3367E2507425C8A5338AB49D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:c1:44:11:ad:5b:80:5e:97:77:6d:81:2d:
                    a4:0a:56:79:44:68:83:4e:c5:97:47:88:11:4e:1e:
                    28:79:e2:70:4b:89:49:3d:dc:b0:65:eb:4e:a9:d3:
                    ba:c1:ce:05:61:a5:07:c4:75:b7:26:6d:28:31:16:
                    08:85:2f:0d:7b:90:ba:36:e1:db:60:5e:b8:ae:94:
                    26:63:d7:30:1c:48:2d:01:9a:0f:cf:04:89:91:e2:
                    ef:2d:fd:08:e7:c7:f0:44:3b:33:80:40:92:22:d6:
                    94:c4:e4:c4:b5:48:6e:51:07:2b:0c:62:f5:58:56:
                    7c:7c:95:93:f0:cf:e6:00:a3:33:1d:44:7e:f6:a5:
                    9e:5d:14:e7:d4:87:bf:3d:96:3d:25:c9:2c:95:5f:
                    06:ff:67:22:87:a7:b1:c9:df:96:80:3d:57:4a:6f:
                    35:16:a6:0e:21:a8:5c:df:c6:84:fc:e1:d1:3b:1c:
                    f5:f0:40:a6:35:ac:eb:a5:c2:06:1e:3f:13:be:0b:
                    49:54:7a:1e:81:9f:8c:b7:31:6c:f0:e5:2d:6d:ab:
                    1a:1a:4d:bc:f9:e6:d6:1c:22:99:b4:9b:01:de:c8:
                    45:02:ff:fe:79:d6:a0:e1:88:6f:cf:01:06:3a:c1:
                    a8:2a:2d:a7:a5:82:db:c3:9f:22:92:86:22:93:ca:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:44:85:52:EF:09:A3:36:7E:25:07:42:5C:8A:53:38:AB:49:D8
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139352e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:6d:c5:7d:1b:bd:7d:87:40:0e:3a:81:19:c8:e4:b8:48:
         8d:52:a0:d1:4b:ed:e3:af:dc:78:4e:f9:7a:0f:b6:4f:96:83:
         b2:50:52:e4:98:d6:8d:d2:86:a7:f0:db:7c:bf:6c:72:a0:6c:
         ed:f6:2c:9e:af:ce:ac:b3:87:d9:2a:82:a3:08:b3:1b:b0:ce:
         af:52:7b:1b:f5:5b:af:11:41:e0:94:ec:cf:ac:0e:b9:cb:f9:
         2f:4c:34:eb:0d:97:bb:36:5a:77:f9:49:50:b1:c4:41:a6:ad:
         42:dc:f6:96:28:66:ba:c2:98:22:90:44:98:b5:e8:d3:94:8a:
         c2:71:d3:3a:39:eb:07:32:44:6d:34:13:3d:ea:79:72:6a:be:
         ca:6a:c9:a7:56:eb:23:18:22:b7:cb:49:dd:97:d6:9d:fa:6b:
         e2:f0:95:77:ac:02:3f:61:7a:e7:e2:86:7a:6c:b4:bf:f0:db:
         0b:10:3a:fd:aa:fc:e0:6d:47:41:63:4e:18:2e:fb:d4:68:0a:
         ea:0e:c4:37:a3:4e:72:24:39:56:1f:33:ee:bc:aa:f1:aa:29:
         4a:62:12:a7:67:4d:9d:fd:92:5a:b5:ce:5e:0b:a4:54:fc:64:
         bb:71:a2:1f:5f:96:f9:ff:c7:c1:2b:72:d4:1a:06:5b:66:88:
         f5:9f:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:06 2025 by rpki-client