Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231302e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3231302e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          UBMoqrGtHI9ck6Nap9xrJQB+U6u1DkHpQGE7FJbHRZc=
Subject key identifier:   D8:4A:12:28:C7:DD:D1:50:C1:0C:4C:1C:05:FC:43:F0:1E:2D:E2:3C
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       55BBDFC99204BDAB43CAABECF6FC346DB6669838
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231302e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 10 Nov 2022 17:07:57 +0000
ROA not before:           Thu 10 Nov 2022 17:02:57 +0000
ROA not after:            Thu 09 Nov 2023 17:07:57 +0000
asID:                     52967
IP address blocks:        177.36.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:df:c9:92:04:bd:ab:43:ca:ab:ec:f6:fc:34:6d:b6:66:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Nov 10 17:02:57 2022 GMT
            Not After : Nov  9 17:07:57 2023 GMT
        Subject: CN=D84A1228C7DDD150C10C4C1C05FC43F01E2DE23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:c8:66:42:50:ef:05:39:a3:8d:c7:b8:90:
                    fc:c6:74:eb:8d:6c:8f:1d:fd:ae:74:78:8a:8f:06:
                    94:b6:ea:59:f4:aa:ce:27:7e:e2:da:15:91:7a:05:
                    75:0f:65:42:d8:3a:d0:a9:39:76:a3:15:89:21:9d:
                    7a:e1:a2:e9:ae:d7:c7:56:e5:c6:fe:bd:00:24:92:
                    db:88:68:e6:9c:89:2d:c3:af:2a:d0:dd:9a:13:31:
                    0b:c4:e3:6d:cb:ee:4a:f7:a4:6b:2c:0a:d8:38:95:
                    76:b0:ac:f4:9f:b7:8e:ab:9f:3e:54:25:fe:51:68:
                    03:0b:f2:a3:02:8c:e0:0e:50:e8:a4:51:4e:8a:89:
                    a0:71:c5:fa:9f:e5:bc:b4:ea:2b:43:0a:e5:48:09:
                    ff:72:08:5d:7b:0d:d3:67:0f:38:e7:5e:ec:3f:5b:
                    db:a3:dc:9b:2e:bc:cf:a3:de:93:8c:0b:44:e9:e3:
                    cf:7e:57:50:45:12:d4:dd:80:6d:ae:de:07:37:0a:
                    af:3b:c7:21:50:8c:2b:e4:fc:3b:18:c3:92:82:6b:
                    87:df:bc:c4:a4:9c:fe:9c:c1:81:c0:59:08:ab:aa:
                    46:4f:7a:cf:75:f9:45:c4:76:6b:50:3b:02:20:eb:
                    da:f5:00:a8:91:a5:ef:bb:cd:dd:0e:25:cd:01:38:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:12:28:C7:DD:D1:50:C1:0C:4C:1C:05:FC:43:F0:1E:2D:E2:3C
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231302e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:57:c1:89:a4:b5:a3:a4:a7:78:bb:8e:e3:51:18:85:01:
         00:e6:4c:c0:5e:24:54:d5:81:d3:88:30:89:86:dc:99:4c:e8:
         e5:8d:21:95:c0:ee:f9:b4:dd:9d:81:d3:3e:e0:35:3f:9b:d8:
         3d:47:c6:37:51:96:5b:ca:00:4f:a4:19:a3:35:ee:e7:cc:05:
         09:8c:01:fc:c3:bb:84:34:c3:a4:64:26:20:f6:0a:41:9d:da:
         69:9f:d5:93:1a:e2:75:99:92:2b:76:7b:3e:8f:1e:4d:16:61:
         64:1c:b0:67:fb:ab:bc:7f:b7:b1:19:91:2a:1b:54:d0:30:55:
         bd:9f:df:70:50:c6:9b:77:59:37:6f:bd:88:4f:09:54:cc:1d:
         05:ba:d1:cb:50:a0:f9:e4:90:6d:e8:87:3a:b1:37:d3:40:ea:
         c5:b6:e7:b3:1a:1c:c1:f9:b6:e4:d8:50:ba:c5:37:b8:f1:ff:
         45:95:a5:e6:c8:d6:4b:41:46:34:3c:ef:1f:e5:d0:46:7c:6e:
         d1:9e:d0:5b:39:77:20:5c:5d:45:c7:75:0e:98:97:a9:08:7c:
         ef:ff:83:0b:fb:c8:61:d3:ad:68:b0:ec:00:e0:aa:8f:a7:1e:
         3e:e2:ec:e3:a2:ea:3a:4b:17:47:9b:54:fa:57:5d:57:cc:e8:
         d5:5f:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org