Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32312d3231203d3e203533323137.roa
File:                     3137372e37302e3231362e302f32312d3231203d3e203533323137.roa (raw, json)
Hash identifier:          WzapbnJhELHAsgYaLSR5jiN6ucF1eqW9T9ZmYDGwB3g=
Subject key identifier:   46:2A:E3:D3:BE:07:3E:A3:35:75:28:7D:18:BF:C6:E9:EC:C4:50:4C
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       64364FA6D9580623AF9D5CAB19FEB358A2A1DCC6
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32312d3231203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:51 +0000
ROA not before:           Sun 28 Jul 2024 18:48:51 +0000
ROA not after:            Sun 27 Jul 2025 18:53:51 +0000
asID:                     53217
IP address blocks:        177.70.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:36:4f:a6:d9:58:06:23:af:9d:5c:ab:19:fe:b3:58:a2:a1:dc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:51 2024 GMT
            Not After : Jul 27 18:53:51 2025 GMT
        Subject: CN=462AE3D3BE073EA33575287D18BFC6E9ECC4504C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:51:d2:ee:b3:06:1a:01:a5:b3:e3:c2:4a:
                    f4:6b:86:3f:b4:de:c3:25:8d:c4:c1:f0:85:c9:bd:
                    2c:43:91:19:ff:af:ad:96:80:d6:57:17:3a:c5:ce:
                    f5:0d:87:c1:fc:d7:38:42:9a:5c:68:c3:29:6e:65:
                    cb:d1:d2:f8:8e:d8:04:24:a4:84:03:18:0a:8c:f3:
                    2c:8f:c8:17:34:16:85:2f:b5:19:72:fd:8b:bd:f5:
                    5a:5f:09:6c:32:39:e7:16:38:26:2a:15:50:cd:80:
                    28:a8:d6:c9:89:a8:97:b1:98:57:27:62:37:a6:66:
                    ab:60:00:e9:a3:07:94:cc:fb:67:ca:c3:fd:03:3d:
                    f5:d3:77:4e:31:5b:ee:b9:a1:6e:3d:ed:b8:c9:8e:
                    b1:cb:4c:f4:de:b3:c6:8b:e4:b3:4e:a9:b9:09:61:
                    3a:7c:0c:96:24:36:2d:20:5d:df:fb:71:10:a7:87:
                    2b:79:17:8f:c5:da:1e:f6:ea:2e:62:f6:54:24:00:
                    ed:54:a6:2a:4f:6d:3c:bc:22:b8:a9:f2:fe:fd:95:
                    70:01:d6:9f:fe:35:57:0e:b6:97:bf:51:7e:cf:58:
                    c5:b4:69:c4:04:a9:13:fa:dc:1b:c3:03:c2:61:71:
                    f2:62:4e:5e:f5:ee:a0:8f:d6:bb:ed:17:e9:1e:b6:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:E3:D3:BE:07:3E:A3:35:75:28:7D:18:BF:C6:E9:EC:C4:50:4C
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32312d3231203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:47:e7:11:a3:d8:8d:1f:31:72:c8:53:9a:65:e5:11:d7:
         4a:04:54:78:6b:69:9c:1e:7d:e4:dd:bb:2f:ee:c9:dc:e0:d8:
         c2:ad:a6:3f:8e:19:ed:2c:94:14:7a:fe:ba:aa:81:fe:e1:fe:
         de:7a:bc:ee:11:a9:fa:7d:46:51:c4:4c:1f:b7:83:4c:49:86:
         18:89:e4:4a:24:38:85:e6:7a:b6:71:2b:37:25:b9:74:1c:38:
         a4:f4:fb:27:69:61:28:cd:8c:00:69:99:1d:ea:0f:df:a3:89:
         b0:84:f5:2c:80:3a:85:0e:8f:dc:ad:09:f2:af:30:e8:81:d9:
         4e:b8:12:54:f1:72:83:ff:02:43:c3:8f:67:76:fa:b1:be:68:
         b6:19:97:ff:44:b5:ee:a4:67:98:ce:2d:18:42:cf:ae:e2:5d:
         a5:a9:e0:3a:fd:76:09:bd:1b:e1:33:66:ff:a3:ff:a0:79:d4:
         3d:f7:b6:0c:5c:18:00:35:eb:71:d5:28:5d:32:f1:e9:3c:d9:
         87:93:28:ee:61:5f:3c:12:04:1c:34:43:1c:cd:b1:39:1f:c1:
         77:4a:d3:7e:dd:3a:f7:e7:b4:30:08:09:1c:cc:2f:d1:09:99:
         39:da:3b:7f:25:f5:e1:49:29:a8:ba:1c:96:79:33:5b:7e:64:
         6d:96:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:27:57 2025 by rpki-client