Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231322e302f32322d3232203d3e203533323137.roa
File:                     3137372e37302e3231322e302f32322d3232203d3e203533323137.roa (raw, json)
Hash identifier:          58r1DiNtIdX3Wx3BS4l1HB5eoOEtsN1+uU2o3DNvT+I=
Subject key identifier:   7D:B4:4C:A0:C3:B4:74:EE:D0:D1:96:D0:FC:C9:B1:E6:EF:46:0E:5E
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       35A49245AFEE1E09101F3A9469E5D79A862E005E
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231322e302f32322d3232203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:41 +0000
ROA not before:           Sun 28 Jul 2024 18:48:41 +0000
ROA not after:            Sun 27 Jul 2025 18:53:41 +0000
asID:                     53217
IP address blocks:        177.70.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:92:45:af:ee:1e:09:10:1f:3a:94:69:e5:d7:9a:86:2e:00:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:41 2024 GMT
            Not After : Jul 27 18:53:41 2025 GMT
        Subject: CN=7DB44CA0C3B474EED0D196D0FCC9B1E6EF460E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:e9:32:30:1f:c1:4b:10:12:00:fc:a3:64:
                    83:77:7f:e5:c6:7d:07:d6:70:98:43:43:3a:b3:46:
                    3c:91:d4:2e:d6:1a:77:13:ec:24:96:d5:34:6c:d3:
                    56:98:1a:aa:43:9a:30:86:14:f6:68:49:9f:57:70:
                    a7:36:81:30:bb:40:f8:e4:3e:4e:33:7f:36:ae:30:
                    80:ec:2d:70:bb:e9:07:d5:fb:5d:d6:96:03:1e:b5:
                    66:25:82:74:7f:3b:e1:b3:fd:5e:c1:eb:f5:2e:13:
                    2f:30:c9:6a:8e:7d:0b:71:72:fa:03:b0:25:3d:20:
                    91:2c:cf:9e:e0:6e:82:00:2b:fc:0a:4a:d1:83:f3:
                    81:52:86:92:33:eb:35:be:1d:ec:81:f8:06:54:24:
                    2e:dc:bf:03:d8:d1:10:f0:89:61:61:0f:13:10:14:
                    c2:a9:73:46:de:69:23:b5:ff:e4:99:34:f4:b0:23:
                    f2:54:26:34:0c:28:21:fb:4a:3b:76:d6:5f:1e:aa:
                    6c:2e:1b:47:9d:89:fa:e4:db:e6:52:b3:e8:e8:c9:
                    53:47:13:0d:29:b7:1c:39:14:36:62:92:3e:d5:cc:
                    ae:91:ec:74:da:e4:c3:b6:79:3a:b7:bc:4e:b3:39:
                    14:de:30:59:14:9c:27:31:96:e9:8c:cc:9b:ce:51:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:4C:A0:C3:B4:74:EE:D0:D1:96:D0:FC:C9:B1:E6:EF:46:0E:5E
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231322e302f32322d3232203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:d6:8d:bc:3d:2a:70:df:76:85:75:15:19:17:a0:d0:4b:
         8f:47:d8:64:7b:3d:a4:57:83:a0:8f:c1:cd:d2:b7:11:61:82:
         f5:60:74:f9:71:3c:64:f7:14:fe:0e:08:dd:21:cb:09:56:f8:
         da:fd:06:e1:68:f7:a4:7b:90:bd:6b:56:fc:10:b6:af:7b:42:
         1c:99:1f:eb:06:68:b8:a1:63:8d:5b:f2:52:0d:8c:16:0d:e5:
         38:dc:e1:47:b7:55:cc:1c:32:57:13:5d:96:cd:fa:64:83:1d:
         96:54:32:6c:5e:13:52:ee:26:88:a6:69:18:8e:9b:b0:43:20:
         6b:f1:28:2a:f8:5e:e2:bd:19:7b:18:88:b8:0b:02:53:77:9a:
         d5:87:a3:61:2e:54:36:11:08:2f:61:0f:76:b4:5a:73:95:c2:
         fd:a6:84:74:64:4e:ad:08:37:c1:b5:3f:8f:c9:e9:6d:6f:f1:
         06:1d:38:79:4f:d1:60:40:9f:9f:74:8e:1d:23:2a:45:98:d2:
         a5:b8:4f:f1:f5:55:f9:cd:a8:ae:48:c1:44:22:eb:c9:25:41:
         bf:a6:a6:0e:bb:ed:f7:a1:d0:3f:90:37:b2:fe:e1:a7:b5:01:
         64:e0:ad:fa:fb:a1:b1:8d:80:02:c9:34:d5:4c:a4:b5:79:46:
         33:a4:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:19:21 2025 by rpki-client