Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3232322e302f32342d3234203d3e203532393637.roa
File:                     3137372e33362e3232322e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          nPk9oR7EEczJV4nrREEYvafxiZLBUWRPshFTgrM+PVY=
Subject key identifier:   E0:BE:D0:44:FC:69:E2:74:4B:EB:42:DF:30:40:2A:B0:1E:A7:E2:42
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       416F9C34FB6B2FC31BF4C22BC95A652BBECC4EA0
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3232322e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:53:17 +0000
ROA not before:           Thu 01 Sep 2022 13:48:17 +0000
ROA not after:            Thu 31 Aug 2023 13:53:17 +0000
asID:                     52967
IP address blocks:        177.36.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6f:9c:34:fb:6b:2f:c3:1b:f4:c2:2b:c9:5a:65:2b:be:cc:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:48:17 2022 GMT
            Not After : Aug 31 13:53:17 2023 GMT
        Subject: CN=E0BED044FC69E2744BEB42DF30402AB01EA7E242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:7e:fb:b8:51:ae:4e:e0:79:2f:a4:b6:e6:
                    0a:bd:f2:5c:33:b7:78:dc:55:6b:5c:4c:d0:b4:6c:
                    c9:00:ce:22:3c:a9:10:1c:33:11:fb:64:c6:69:2f:
                    76:dd:da:8f:ee:b4:4a:59:91:c4:ae:4c:a2:39:c8:
                    26:fc:74:10:f5:07:10:95:65:5c:a4:d5:78:d8:a0:
                    a1:98:24:55:e2:08:51:cd:ad:f3:f5:28:79:32:8b:
                    8e:25:16:e6:a4:bd:d4:8c:90:a6:fe:e3:87:91:a2:
                    d9:3a:a7:b3:5a:84:27:e0:7d:c4:d4:2e:4e:6c:76:
                    26:11:44:f9:2d:14:1b:c3:c5:69:70:d3:f7:ae:d1:
                    23:4f:80:9c:a3:e6:87:6b:f3:a2:6e:a1:02:28:a5:
                    ec:30:9a:ac:11:0b:cc:c2:0b:d1:b6:f0:df:d0:cb:
                    cc:5b:33:c1:ca:e2:65:3f:48:2d:74:81:8c:f1:94:
                    07:85:04:67:f8:1d:5e:e5:4c:92:2c:ae:d1:4f:53:
                    71:c8:79:ee:7d:1c:6e:3d:f5:b2:fe:f7:ad:9b:31:
                    ad:64:9c:59:48:71:e7:8a:a0:e2:4e:ac:65:10:c4:
                    f0:4d:90:77:c9:59:24:57:2a:10:8e:73:4d:96:df:
                    1d:6b:4f:bf:14:e2:d4:98:19:ce:bc:25:35:95:e2:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:D0:44:FC:69:E2:74:4B:EB:42:DF:30:40:2A:B0:1E:A7:E2:42
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/3137372e33362e3232322e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:dc:c1:4c:ee:c7:d2:9b:eb:c8:7e:67:4c:84:22:d3:2c:
         93:f9:58:6b:14:b9:9a:7e:30:d7:a6:02:d5:c3:bf:bc:96:e7:
         99:62:2e:f0:88:5e:92:c9:ad:1a:28:23:90:48:de:83:a2:a5:
         f1:a0:7f:10:f5:bf:d0:14:e4:ca:59:ca:ff:3d:a4:2a:28:a6:
         d6:77:cc:d7:d6:28:40:74:9e:3b:7c:b7:7d:65:4d:2b:3b:9f:
         8e:33:b6:f1:e1:86:53:88:ca:2b:a6:52:69:5d:ba:24:bb:2c:
         10:64:77:d7:48:df:fa:38:e8:20:15:06:c3:c4:20:cd:ff:00:
         3e:b3:10:84:f3:d8:af:10:5a:47:8d:21:58:e4:80:23:b4:55:
         86:ab:eb:01:bd:1a:26:7a:82:05:c4:ff:e3:97:fa:3a:73:35:
         99:8f:c6:ea:04:6b:fc:14:60:ab:08:78:6c:db:94:0b:73:4f:
         e1:68:0a:9c:6d:87:ff:1b:dc:fa:8f:b3:1c:46:39:d4:43:78:
         7c:6e:84:52:af:dc:c9:b6:9c:6d:d8:c5:76:e0:ec:36:d7:a3:
         30:17:2b:b3:ca:07:49:0a:6d:7b:be:9c:2d:67:d9:17:f4:85:
         6e:47:30:6c:3f:59:94:8f:9a:af:95:5b:84:39:4a:f6:fc:a1:
         92:f4:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:57:06 2025 by rpki-client