Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139392e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3139392e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          xineprLvcUD+E6GezD0H6MAihGfNbhWWz5NxH1erYR0=
Subject key identifier:   E2:B7:D3:16:A0:17:59:BD:AE:30:85:CE:01:15:2A:10:99:F2:AA:91
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       022D102903246E8E953E44A33B2E301512A4A4E8
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139392e302f32342d3234203d3e203532393637.roa
Signing time:             Wed 21 Dec 2022 14:31:45 +0000
ROA not before:           Wed 21 Dec 2022 14:26:45 +0000
ROA not after:            Wed 20 Dec 2023 14:31:45 +0000
asID:                     52967
IP address blocks:        177.36.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2d:10:29:03:24:6e:8e:95:3e:44:a3:3b:2e:30:15:12:a4:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Dec 21 14:26:45 2022 GMT
            Not After : Dec 20 14:31:45 2023 GMT
        Subject: CN=E2B7D316A01759BDAE3085CE01152A1099F2AA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:50:9d:a7:8b:f7:07:18:88:87:7a:88:09:
                    d6:1c:f3:ec:86:9b:7e:e7:ce:90:e1:99:fd:1f:83:
                    dc:02:29:88:aa:47:89:8e:fb:4c:09:af:ac:ad:55:
                    4a:21:ae:ee:f3:d8:1c:46:6b:30:90:8a:13:8a:e1:
                    dc:c5:93:39:b9:8a:c5:3c:7c:65:19:3d:66:2a:7e:
                    e5:23:e8:57:a0:23:0c:8c:cc:50:a0:a2:3f:c5:5a:
                    6f:42:63:73:b8:11:eb:40:51:4f:45:f7:0c:ff:f3:
                    34:73:c6:94:fd:32:80:d2:6a:17:0b:c9:a4:44:9d:
                    92:0b:85:29:b8:fb:51:87:fe:18:b8:06:89:51:2b:
                    a8:52:10:a9:9d:10:66:3f:a4:31:ce:e5:21:74:57:
                    8a:b9:14:24:25:8e:d9:b1:28:1a:62:b2:94:c9:72:
                    80:96:fd:98:94:42:8f:f2:c4:fe:4b:8f:22:1d:20:
                    13:6b:0a:20:62:39:b4:d7:c4:f1:10:f5:f0:0b:80:
                    22:da:0a:37:a7:35:54:77:fa:88:ba:5f:a1:e8:19:
                    8a:8d:bd:c8:6a:43:5b:58:e6:c4:cf:0e:67:25:b9:
                    84:c8:40:00:73:f4:14:45:96:fe:eb:6a:11:67:26:
                    0c:8c:9d:e2:15:2f:0e:d0:62:f9:c6:90:17:3f:ab:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:D3:16:A0:17:59:BD:AE:30:85:CE:01:15:2A:10:99:F2:AA:91
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3139392e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:09:62:4d:11:c9:47:2a:7e:dc:35:f6:76:1d:5a:f1:ee:74:
         39:fe:2d:f0:61:54:77:37:e4:70:f6:64:67:83:29:dd:2d:4d:
         d7:21:8a:66:a3:b0:4d:fe:fd:6b:9a:18:e4:57:8d:b2:aa:4e:
         91:40:a9:e6:7a:15:d5:3b:58:04:80:bb:50:3a:55:a2:0c:60:
         4e:9d:48:a5:0a:70:79:af:fb:3f:1e:29:e9:0a:1c:37:81:11:
         2e:e6:1f:06:be:87:d6:cb:7e:1c:61:be:09:0a:ce:46:70:6a:
         6a:4b:4d:4e:6d:bc:67:fe:cd:31:b6:5e:ff:05:c3:ba:01:41:
         e2:59:29:d6:a7:91:e1:7b:e6:1b:11:44:41:af:32:8b:5e:db:
         f8:62:7a:46:0d:a7:d1:35:5e:93:17:6d:3c:1a:d5:a6:27:e5:
         8f:2e:f6:72:6b:dc:75:71:b4:34:a1:76:f5:a2:3d:29:95:e8:
         16:7c:b7:40:50:cc:01:af:e0:40:d3:6f:db:69:f2:d2:ca:bf:
         58:0f:75:32:60:27:59:1e:0e:da:02:c5:af:87:37:99:10:bb:
         77:7a:75:b9:f6:41:8f:00:61:f3:61:7c:01:c5:4c:d5:41:4f:
         a4:fb:61:6c:d3:e0:23:42:93:f1:84:5e:db:40:45:6b:41:98:
         cf:df:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org