Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231312e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3231312e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          AVGnx8+zrxQaK1chol5QqQEw0sFLREfeOyVy9aB91u4=
Subject key identifier:   04:2A:7C:FD:9F:7B:03:B4:25:80:1E:79:0B:12:23:01:39:42:4A:72
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       327A1BB9FFBF55FFEEABC2EFD77E7479210507DC
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231312e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:52:35 +0000
ROA not before:           Thu 01 Sep 2022 13:47:35 +0000
ROA not after:            Thu 31 Aug 2023 13:52:35 +0000
asID:                     52967
IP address blocks:        177.36.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7a:1b:b9:ff:bf:55:ff:ee:ab:c2:ef:d7:7e:74:79:21:05:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:47:35 2022 GMT
            Not After : Aug 31 13:52:35 2023 GMT
        Subject: CN=042A7CFD9F7B03B425801E790B12230139424A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:7c:fe:d7:25:1d:8b:02:7f:d3:85:69:71:
                    0c:3f:4b:45:36:e4:ae:3b:e7:60:11:92:94:60:c4:
                    4f:61:75:08:37:49:0a:7a:20:ae:74:7a:13:33:3e:
                    eb:53:32:89:30:b9:08:e4:77:a3:00:06:34:18:02:
                    33:d7:4d:57:39:67:48:00:38:c0:26:3c:a3:72:12:
                    48:f5:b1:22:48:d5:57:75:74:f3:10:75:31:cf:6d:
                    ae:6c:81:2b:ef:43:12:8e:57:f4:7b:1a:1b:60:3e:
                    37:f8:aa:1d:93:11:30:34:a6:01:d4:e0:01:50:e0:
                    88:65:70:b7:cc:b8:c6:2e:a9:b8:14:b9:73:45:a1:
                    e1:30:75:a3:b0:2e:bf:0f:dd:be:e1:b8:2f:55:12:
                    5c:12:27:8c:af:a8:be:13:6d:20:06:8c:f2:46:7d:
                    02:a7:d0:38:80:24:ef:a7:18:6f:c8:97:e0:90:45:
                    da:f4:c9:66:09:b3:32:42:d1:d6:57:98:15:11:a6:
                    81:c6:3f:ff:a4:81:96:1b:69:36:25:8c:82:02:45:
                    9a:69:f6:75:fd:d5:1b:6b:c0:a9:11:ed:d6:dd:00:
                    f7:fd:71:87:07:8f:1e:ce:3e:94:c7:1f:50:00:89:
                    6e:16:7a:42:9d:9c:9b:09:b8:5d:71:57:18:fe:28:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:7C:FD:9F:7B:03:B4:25:80:1E:79:0B:12:23:01:39:42:4A:72
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231312e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:c9:11:52:75:e7:c5:56:39:c1:e8:ef:a9:3e:91:6f:66:
         b2:64:cc:1d:99:f7:78:94:2c:f1:09:cf:62:d8:06:94:5f:9a:
         a8:66:11:66:7f:d4:bd:c3:ea:49:bc:3e:ad:20:f6:82:1b:23:
         00:0b:29:0f:18:bd:6c:14:40:d6:24:54:fb:69:c7:5a:4d:13:
         7a:89:1e:5e:b8:72:23:38:23:20:27:98:a6:ea:6c:97:cc:31:
         c5:6e:0b:7b:d4:69:de:4e:c2:7b:74:99:a1:9c:50:40:e1:54:
         5a:12:ec:15:25:07:c2:90:3c:fb:6d:dc:0d:f1:69:03:a6:a5:
         58:b6:a5:cf:93:a5:82:5b:6b:43:d6:07:b8:de:72:59:bd:00:
         b8:d7:27:ad:41:3c:96:13:1d:dc:22:54:35:7d:40:db:51:63:
         9a:0e:0f:6c:6c:a6:e9:94:00:e9:4f:38:ce:66:80:55:bc:02:
         20:0e:51:0a:79:23:2b:1c:13:9a:e6:a9:27:45:86:d3:3c:26:
         95:8d:0a:e5:43:38:ba:ef:98:b3:98:ba:72:53:1a:56:16:c4:
         46:7d:10:81:cf:fb:f3:0b:9a:78:12:d6:3b:0d:d3:95:5e:03:
         f8:0e:d8:9b:cf:60:1b:03:28:80:ea:34:5e:f0:0b:5b:c7:92:
         e6:b6:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org