Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230342e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3230342e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          fr2jWmdAEKI2ceImpxAnUyfTssiT/YdKsX3jnyue5QU=
Subject key identifier:   9D:B5:6B:30:D1:DC:2B:26:08:DF:97:FA:CD:BB:D9:31:47:8F:9B:E8
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       708AA7365E25BAC3F6CC284EC528A2B240DC124D
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230342e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:52:00 +0000
ROA not before:           Thu 01 Sep 2022 13:47:00 +0000
ROA not after:            Thu 31 Aug 2023 13:52:00 +0000
asID:                     52967
IP address blocks:        177.36.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8a:a7:36:5e:25:ba:c3:f6:cc:28:4e:c5:28:a2:b2:40:dc:12:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:47:00 2022 GMT
            Not After : Aug 31 13:52:00 2023 GMT
        Subject: CN=9DB56B30D1DC2B2608DF97FACDBBD931478F9BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:d5:3f:48:e3:d4:0f:60:a7:f4:70:72:5a:
                    aa:f1:72:d4:37:3d:a9:25:f2:e8:d4:79:57:53:fe:
                    b5:04:bc:b4:a9:9a:30:6a:46:5e:21:44:bd:6e:02:
                    64:e9:8f:e6:c6:2e:14:12:dd:b6:59:2e:8a:ac:bc:
                    81:d7:56:8b:c3:08:a8:c8:18:9d:17:88:2b:c7:e2:
                    35:bd:b0:08:85:e7:7a:dc:e0:3b:07:72:44:60:5a:
                    f0:6c:f2:ee:40:ee:e2:9e:6d:0e:44:e5:f5:af:fe:
                    21:e1:6e:98:13:29:6c:49:b4:4a:a8:c7:b6:82:f0:
                    d8:1d:a3:85:e1:cf:09:75:37:d0:7e:a2:67:9f:5c:
                    7d:ef:1b:c0:ee:ee:b5:7d:32:86:a0:65:79:ff:76:
                    4f:8a:7f:16:7d:aa:2f:3f:da:ff:df:06:e3:79:61:
                    35:d5:1f:31:c9:d6:cd:ad:7c:95:a2:72:f4:db:31:
                    c8:cf:31:69:71:d4:9b:34:90:c7:7b:f9:fa:95:cd:
                    bc:9c:2f:ee:b6:2e:07:3e:9c:07:8e:cc:5c:b1:fa:
                    eb:c1:28:a3:ba:8a:9b:84:b9:2c:ae:36:94:27:a9:
                    ce:aa:87:5f:95:05:a1:d1:f9:c8:c7:91:54:1c:d7:
                    68:af:bf:49:4d:11:3b:60:1b:46:aa:30:5f:94:0d:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B5:6B:30:D1:DC:2B:26:08:DF:97:FA:CD:BB:D9:31:47:8F:9B:E8
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230342e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1e:56:f6:24:43:09:81:a7:fe:c4:dc:e2:63:f9:0f:35:9c:
         e8:13:cf:02:ea:5d:fa:ba:ff:a7:e4:0c:4b:87:f5:20:47:61:
         f5:7d:54:35:b9:e0:6f:ce:98:3b:0a:3c:b8:cf:7a:2e:89:d6:
         db:19:ee:e5:aa:ad:5d:d9:e1:4c:c2:58:4e:20:28:e9:87:76:
         52:f9:78:3d:3d:d0:a7:ea:03:3d:4f:9b:3a:16:40:8e:21:74:
         bd:73:c0:4c:89:17:88:3c:d4:bc:42:dd:21:55:d6:99:4a:02:
         5f:c5:c3:4e:5e:d1:75:61:69:68:5e:69:48:db:03:92:1b:5d:
         dc:f5:54:4b:8b:6f:64:ee:46:a8:e6:74:7b:1e:a4:dd:1e:9b:
         8e:04:2e:82:12:d6:e3:3a:55:77:0a:3e:d6:c7:9d:19:3c:c5:
         9e:2b:dc:9a:9f:a7:89:f5:2e:d3:27:e4:5e:9b:da:fc:37:bb:
         39:d2:33:6a:e2:96:cb:47:ce:47:3a:5b:0a:d2:98:53:5d:ae:
         ed:cf:6f:99:f5:d6:75:27:e0:85:9f:f3:94:77:d7:60:82:43:
         71:63:38:62:86:96:a5:cd:12:12:17:dc:4f:d4:93:87:b3:e1:
         18:ad:43:c2:96:c1:31:12:df:6c:94:f2:5e:a0:3e:34:f2:bf:
         1a:86:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org