Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230372e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3230372e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          SfPpGuAGh3r04oFGZn1LsHp+Rdpzh/QEWH1+kINKqSM=
Subject key identifier:   3D:57:9F:5E:6B:E9:42:19:0A:97:C8:3A:34:80:14:AD:1B:97:68:FB
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       23DD542B5695F851575245379E0D4A324985364A
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230372e302f32342d3234203d3e203532393637.roa
Signing time:             Wed 21 Dec 2022 14:31:52 +0000
ROA not before:           Wed 21 Dec 2022 14:26:52 +0000
ROA not after:            Wed 20 Dec 2023 14:31:52 +0000
asID:                     52967
IP address blocks:        177.36.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:54:2b:56:95:f8:51:57:52:45:37:9e:0d:4a:32:49:85:36:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Dec 21 14:26:52 2022 GMT
            Not After : Dec 20 14:31:52 2023 GMT
        Subject: CN=3D579F5E6BE942190A97C83A348014AD1B9768FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:c6:70:f4:5c:7a:66:9c:34:d9:ea:68:9e:
                    dd:e9:1a:e4:94:f6:10:2e:32:39:55:26:02:da:2a:
                    bf:86:80:ee:c4:0e:83:ac:1f:9f:42:09:b2:ac:4f:
                    87:c6:8f:1d:47:23:e6:ab:42:6b:4c:bb:4f:8e:4f:
                    3f:0e:86:17:62:60:40:07:82:ad:da:b7:76:07:c0:
                    9b:36:98:eb:ec:84:14:a2:1c:35:3b:69:d0:64:2c:
                    22:9d:b9:c6:82:65:6a:fd:22:d8:57:00:03:8b:25:
                    94:af:75:fc:50:ff:ee:b2:34:44:d6:3c:9f:32:6e:
                    87:50:be:a8:57:32:97:e3:72:05:33:82:22:9f:cb:
                    99:80:a2:6c:4d:26:62:05:ba:b6:c4:d3:e7:2b:c0:
                    d4:76:6f:9b:12:8b:f5:e1:38:69:68:19:b8:04:2c:
                    92:87:28:e9:35:60:49:96:d0:63:8f:7a:4e:67:84:
                    9d:84:68:0a:80:89:1c:ff:a6:b0:4c:f2:8e:7c:f0:
                    26:67:65:06:4d:77:46:02:67:1d:f2:8b:7b:6f:f0:
                    6e:90:6a:46:fa:34:ff:93:22:00:0f:d5:47:36:80:
                    71:ad:93:ac:50:8a:9c:4f:c2:33:e5:99:aa:98:c9:
                    48:b7:62:13:07:63:90:50:18:cc:f3:6f:e3:28:b5:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:9F:5E:6B:E9:42:19:0A:97:C8:3A:34:80:14:AD:1B:97:68:FB
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230372e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:92:07:96:a3:1e:6e:45:d7:0f:76:6a:4c:54:99:3f:c7:c9:
         8b:45:ec:6d:65:a1:67:5a:dd:61:be:49:58:c0:94:1c:73:79:
         8a:c5:21:e3:19:f9:43:8a:f2:f2:84:d9:2b:e7:e0:d4:85:2c:
         ec:e3:5d:59:79:ce:53:85:a7:2c:5c:aa:76:8b:e0:a0:a9:a2:
         a5:68:a0:a8:6c:cc:b4:ca:8a:a3:c4:54:00:bd:a8:57:8c:aa:
         ca:be:05:12:e4:b0:8e:5e:60:32:6f:a4:7d:cd:b6:17:ff:df:
         e0:0c:59:0a:b4:56:0a:83:e8:9b:24:14:8b:c9:0d:4d:36:9d:
         a6:e9:1e:78:1e:3a:6a:d3:1c:70:71:fe:79:8a:61:2b:45:f9:
         c7:2a:75:01:c4:c7:14:9a:11:df:4a:8f:84:5c:1a:2b:2f:1d:
         ad:d4:78:99:06:3f:12:6a:bf:f6:59:ed:93:51:77:23:dd:8e:
         5d:bc:45:ba:b7:0e:d1:13:3e:eb:8a:0c:71:b0:55:b3:57:1f:
         15:b7:6f:04:1d:2b:b3:5f:28:b9:32:b9:f7:c4:91:f5:2c:d8:
         4d:5c:3a:0a:80:9e:da:67:c4:a2:f1:f8:ab:e3:e8:10:ff:71:
         5d:6b:23:e5:ce:27:fd:9f:e2:6d:79:cc:97:a9:61:68:34:06:
         4e:56:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:16:53 2025 by rpki-client