Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230382e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3230382e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          UJ2lhq7RACd8ZKn7OFvzm6yLs8KE2Z3fk+Yx5yp0O2U=
Subject key identifier:   1C:C4:BB:E0:14:87:13:1C:88:B1:EE:9C:63:C8:81:A3:44:C3:98:E5
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       4E7485F40674E10456EA960EC851752D9BB442FB
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230382e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:52:19 +0000
ROA not before:           Thu 01 Sep 2022 13:47:19 +0000
ROA not after:            Thu 31 Aug 2023 13:52:19 +0000
asID:                     52967
IP address blocks:        177.36.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:85:f4:06:74:e1:04:56:ea:96:0e:c8:51:75:2d:9b:b4:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:47:19 2022 GMT
            Not After : Aug 31 13:52:19 2023 GMT
        Subject: CN=1CC4BBE01487131C88B1EE9C63C881A344C398E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:8b:28:07:8e:5c:bf:17:42:1f:c2:49:04:
                    ec:d4:e1:32:17:0c:2f:8f:0e:d6:cf:86:22:79:b5:
                    e9:2a:2b:7e:09:25:ba:ac:91:24:e6:f2:51:80:07:
                    1d:3d:e9:b0:90:5f:6e:55:09:6f:12:ee:49:a0:32:
                    43:ef:90:e1:16:9f:f1:82:90:33:77:48:0c:2b:70:
                    10:c7:b6:7d:cb:e4:5f:2b:f4:76:16:92:c2:ff:d2:
                    8a:bb:86:bb:dd:ac:85:83:56:d5:57:bd:41:cf:61:
                    69:8b:e6:bb:cd:0d:f7:7e:bc:87:d1:1c:a0:71:0b:
                    c0:a9:cb:a3:ca:cf:2c:6c:19:b6:a2:b0:26:c8:a1:
                    ab:43:2e:f4:98:ba:9f:f0:8e:5e:a0:50:9e:9f:0d:
                    0b:f0:d8:67:7c:0f:88:37:92:99:63:db:ad:e2:c5:
                    73:f9:12:83:34:0f:c0:da:18:d1:fe:73:9f:d2:e1:
                    6b:c2:95:e8:73:4b:15:75:24:08:4b:0d:ae:79:22:
                    c6:f3:7f:85:35:0f:1e:7e:b0:32:c0:a4:eb:1d:0d:
                    8d:72:68:22:60:f2:d0:72:85:11:1b:fb:8f:24:3f:
                    28:75:a4:fe:b5:96:00:1d:9b:24:02:99:7a:c3:ea:
                    ea:1e:f9:51:d8:06:7c:02:77:94:e7:04:ad:dd:3f:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:BB:E0:14:87:13:1C:88:B1:EE:9C:63:C8:81:A3:44:C3:98:E5
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3230382e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:d8:28:28:0d:1c:dc:32:9a:cf:a9:65:e3:bf:d4:31:67:
         9d:0f:08:e4:69:bc:4c:a7:ae:b5:9b:2e:9d:6b:6e:42:31:3c:
         bd:97:1e:6c:1e:e5:6a:b8:f6:9c:8c:b9:11:7d:7c:95:cd:30:
         7d:c4:75:d1:84:8c:b3:60:90:7d:9d:eb:92:d8:a8:6a:1c:84:
         7c:c5:a5:0b:40:c0:02:25:1f:66:53:dc:53:7a:11:64:1d:ba:
         9c:7d:b4:d5:af:88:21:7f:a9:2a:31:6a:0e:9c:96:27:67:ae:
         68:a8:4c:63:36:9c:5a:ed:5b:01:d0:b6:cd:5f:8e:a7:b6:a4:
         3f:b2:d4:01:c4:3b:82:59:5b:60:75:2d:30:a5:d3:f1:e0:68:
         4f:d0:4a:fa:20:c0:f0:4b:7c:82:2f:78:46:1b:d6:3b:9e:2b:
         b4:c4:a5:07:5a:1b:ce:70:48:b5:54:54:1b:46:9a:c9:8d:df:
         fc:ab:0e:02:ca:b5:f1:8c:4d:c2:57:72:00:47:2f:35:3e:a4:
         d5:3a:82:cb:b8:d7:87:42:d0:b3:da:55:0e:1c:8e:08:95:b8:
         5b:ac:7d:6d:73:0c:e8:a8:6a:30:c3:5f:cb:ba:d3:71:8b:9e:
         91:f2:8e:ec:c3:ea:5d:06:3f:cb:7a:a0:56:87:d6:64:54:52:
         d1:86:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:56 2025 by rpki-client