Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231352e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3231352e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          L8uudAQ/2WONfkwLLvJjlNCFb5Gha88p/MvG74ckTlg=
Subject key identifier:   EA:F4:B5:2B:F0:F5:0D:04:35:1E:6A:DA:7F:EB:C5:3D:FE:F0:FC:A2
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       51D0AE4EDC0F6428115781A21A8F38DEDF0CA045
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231352e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:52:52 +0000
ROA not before:           Thu 01 Sep 2022 13:47:52 +0000
ROA not after:            Thu 31 Aug 2023 13:52:52 +0000
asID:                     52967
IP address blocks:        177.36.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d0:ae:4e:dc:0f:64:28:11:57:81:a2:1a:8f:38:de:df:0c:a0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:47:52 2022 GMT
            Not After : Aug 31 13:52:52 2023 GMT
        Subject: CN=EAF4B52BF0F50D04351E6ADA7FEBC53DFEF0FCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:80:8b:a4:7c:51:ab:5f:5f:8b:ae:72:2d:
                    6c:9a:0d:cc:cb:49:7a:65:2c:2e:74:46:87:0a:9e:
                    ad:b1:39:ac:d5:30:02:87:6e:87:de:d7:83:36:05:
                    7e:4c:04:05:9a:e9:b8:65:d3:02:f9:79:3f:7a:01:
                    3e:43:92:9c:8f:6f:87:91:41:2e:73:e8:fb:c7:e6:
                    4c:53:8b:af:10:9f:72:91:0f:fc:c4:4d:6a:d3:0a:
                    d0:1e:db:13:f6:f7:b6:05:6f:8a:c9:71:59:1d:1e:
                    12:31:64:fe:9d:80:58:3b:2c:b5:90:46:dd:7c:6e:
                    87:c5:fe:26:9a:0a:a1:ff:39:e6:30:6c:70:dc:76:
                    e7:19:65:75:a5:08:b3:4c:53:33:19:d2:cd:64:46:
                    0c:26:88:c2:8a:5d:43:84:4b:15:50:c8:73:bf:ac:
                    6a:2b:b2:4b:4a:61:df:ea:93:6b:7f:45:a1:a6:6b:
                    cd:cf:ee:9b:31:5e:ef:f6:7f:20:98:46:2c:ab:11:
                    28:3c:b5:1b:cb:3a:e4:0c:04:45:9f:09:ea:00:63:
                    c3:9c:0e:66:fe:cc:a2:b5:f7:73:f0:6b:b2:97:6e:
                    d1:a1:38:42:b4:fd:82:da:76:36:41:4b:de:59:d0:
                    bb:1e:ad:75:2d:b5:22:ae:58:17:30:34:7f:44:a9:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:B5:2B:F0:F5:0D:04:35:1E:6A:DA:7F:EB:C5:3D:FE:F0:FC:A2
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3231352e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:68:d7:03:2c:6d:3f:d4:ce:bd:76:95:88:e3:8e:93:41:28:
         95:f6:e2:6e:a7:2e:04:a7:2d:17:26:da:7a:94:12:33:f6:fc:
         1e:6f:b6:a2:64:2a:9c:0e:ef:34:fb:69:35:24:3f:84:9a:37:
         a8:b1:f3:24:de:78:fc:fb:28:c5:cc:0f:96:3e:6c:48:a7:a0:
         0e:5c:1a:aa:62:dd:64:ca:02:3e:0b:0b:aa:a0:04:d2:12:b4:
         87:ea:c1:77:0e:d1:61:85:cf:86:b7:fc:99:be:01:74:f0:d7:
         07:cd:82:ee:68:78:71:cf:73:3e:75:3d:67:6e:be:4b:7c:9c:
         20:8c:fa:f8:b0:3c:8b:52:a3:ce:34:ea:0e:bc:3f:d7:e6:a6:
         b1:2e:39:3c:74:d7:7e:1a:a8:17:cc:80:69:92:5f:33:ee:35:
         56:3a:bc:ce:00:81:d3:4f:85:1a:7e:36:cb:96:ca:d8:82:cb:
         fb:1e:2e:af:b0:14:cd:84:74:5e:6d:61:8e:9f:44:52:8c:0d:
         90:85:5a:c2:fe:95:45:f4:fe:b0:68:ad:64:6f:08:64:1b:20:
         c1:64:27:35:f2:c7:3b:0e:b6:75:39:d4:13:a8:67:1d:cc:f2:
         b5:48:3d:ed:71:ee:53:4f:7e:07:12:08:3d:77:b3:8b:2d:da:
         d2:d2:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org