Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139382e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3139382e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          SIBzKKa/SQASm0oOveiUX+/8q1AwfxfHrTIduTBkDmk=
Subject key identifier:   D9:78:D7:14:5D:8B:5F:84:A1:AF:DB:65:D9:E9:07:F3:76:EC:6B:C1
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       34AF35D3344630E5E090DF7659D21BBE994E1E65
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139382e302f32342d3234203d3e203532393637.roa
Signing time:             Wed 21 Dec 2022 14:31:38 +0000
ROA not before:           Wed 21 Dec 2022 14:26:38 +0000
ROA not after:            Wed 20 Dec 2023 14:31:38 +0000
asID:                     52967
IP address blocks:        177.36.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:35:d3:34:46:30:e5:e0:90:df:76:59:d2:1b:be:99:4e:1e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Dec 21 14:26:38 2022 GMT
            Not After : Dec 20 14:31:38 2023 GMT
        Subject: CN=D978D7145D8B5F84A1AFDB65D9E907F376EC6BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:4e:34:6b:f1:43:ad:a9:b2:85:67:fd:b5:
                    37:26:d8:30:f3:b4:18:1d:84:c6:c7:cc:9d:e4:04:
                    5c:1b:96:62:54:3b:6c:18:6a:cb:ba:13:d9:5c:9a:
                    8f:4f:b8:61:82:a3:10:35:ca:bf:26:db:e5:3c:54:
                    85:96:1e:19:76:7b:32:bc:be:78:b3:23:b1:a1:ee:
                    1b:d3:10:ea:5c:0e:0e:47:7a:30:4a:9f:83:e0:13:
                    a8:53:e1:a3:cf:a5:7b:b9:f0:5a:50:65:87:80:99:
                    8a:77:b1:29:7c:06:5c:1e:6a:2a:d9:82:da:9a:3b:
                    c4:af:d0:ec:b7:37:fd:94:fd:86:c8:a3:e1:78:c8:
                    f1:a0:90:9a:d9:1b:cc:b8:9c:f1:6c:81:6b:b7:91:
                    c0:72:a1:ac:5e:fa:ec:00:a8:d4:d6:d7:70:09:61:
                    67:49:7f:c7:de:75:65:c5:9b:71:1d:29:19:43:da:
                    a1:c3:b3:53:4c:e5:b1:a1:5b:1a:31:b4:b7:04:ef:
                    a3:b4:72:95:1c:9d:38:64:cc:6e:0f:ce:d5:bc:e1:
                    a7:02:a3:14:87:f1:4a:da:26:9c:31:17:5f:e9:92:
                    bc:aa:61:47:ca:a5:4f:78:ea:ba:c5:29:13:4a:bd:
                    08:a5:ec:2a:f3:75:f2:89:20:b6:16:fe:48:a9:19:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:D7:14:5D:8B:5F:84:A1:AF:DB:65:D9:E9:07:F3:76:EC:6B:C1
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139382e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:8b:d8:94:51:07:01:af:97:20:89:c0:b6:c0:4d:d1:4a:
         6b:39:07:78:3c:5f:bd:4e:06:30:fc:bc:7d:08:7f:53:53:36:
         5d:9a:73:64:e1:82:b4:1f:a6:2e:a2:83:6c:af:43:7f:fb:7b:
         d3:6b:7b:f0:1d:05:1e:86:ab:a7:1f:ea:02:9f:fa:d8:c7:40:
         ed:01:77:80:4b:29:53:e7:d3:b6:9f:42:6f:90:03:85:52:67:
         06:ef:39:a2:88:e3:ae:f1:48:55:fc:d3:ed:61:a4:94:e0:43:
         16:0d:12:fe:e4:cd:08:60:5c:a1:e2:2e:0e:6d:e5:4f:47:91:
         d2:40:55:b0:b5:26:49:8e:e3:a7:05:19:a8:0c:98:b7:93:17:
         70:c5:eb:8e:1e:ba:63:a3:2c:37:cf:76:e0:d7:1e:1e:6a:18:
         9e:02:b7:18:8b:5e:56:46:22:23:06:2b:65:28:c5:0a:26:4f:
         e6:38:64:4a:e0:87:29:dc:61:68:12:85:e2:69:54:45:09:eb:
         2d:70:26:a0:48:7a:6a:24:cb:0b:ea:40:37:73:51:6e:1e:8e:
         62:db:96:93:46:2e:80:0c:4f:af:37:b7:3a:f6:d5:89:9c:20:
         92:f2:b1:d3:28:1b:95:0a:c7:c0:f7:44:a8:24:fd:24:ac:cd:
         6e:08:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org