Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32332d3233203d3e203533323137.roa
File:                     3137372e37302e3232302e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          Lsc6trUq4R9yhhNDfkkLio1CSiW+y1wv/vw4ZQDKM9U=
Subject key identifier:   04:C0:53:D8:99:A0:63:C1:7A:25:87:40:DB:EA:E2:71:F4:B9:4A:14
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       04841B5AA354C306B2CCD71E321E6ECF3F0D8006
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:42 +0000
ROA not before:           Sun 28 Jul 2024 18:48:42 +0000
ROA not after:            Sun 27 Jul 2025 18:53:42 +0000
asID:                     53217
IP address blocks:        177.70.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:1b:5a:a3:54:c3:06:b2:cc:d7:1e:32:1e:6e:cf:3f:0d:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:42 2024 GMT
            Not After : Jul 27 18:53:42 2025 GMT
        Subject: CN=04C053D899A063C17A258740DBEAE271F4B94A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:d0:1c:7d:80:40:0c:ee:80:f3:da:e2:49:
                    ea:4f:40:d1:a7:03:e8:84:9d:88:71:10:c5:71:2c:
                    cd:77:9d:84:e5:8d:e8:86:75:b8:f2:66:f4:72:eb:
                    51:bc:9f:47:fe:8e:9f:f7:10:6d:d9:ca:45:3e:91:
                    9d:9d:0a:21:7b:3c:28:4f:ed:55:c7:1b:77:97:a0:
                    67:28:a0:6d:5f:c4:8e:0a:8d:11:d4:f7:44:f2:40:
                    a5:82:29:78:c8:45:da:8b:dc:99:b7:c4:86:70:77:
                    75:15:fb:03:14:aa:a7:2e:75:35:84:fb:b4:b1:65:
                    91:ef:8d:f1:8d:ee:1c:7d:02:4c:55:e5:e5:b9:39:
                    c3:e2:a7:b7:be:f9:39:60:98:b1:89:53:51:cf:03:
                    65:a7:35:f2:6a:72:ff:75:c6:eb:03:bb:99:56:00:
                    af:68:14:97:88:eb:55:57:77:ab:c4:84:21:7e:03:
                    de:3e:c5:c0:3e:89:b0:ee:06:97:13:be:b3:a9:bc:
                    92:dc:9e:18:43:ba:f1:59:b2:11:96:2f:d6:cb:e0:
                    98:21:fd:0c:e9:90:dc:79:a4:d6:17:59:87:3c:20:
                    3c:b8:b5:c5:d4:d0:89:ec:d2:bb:20:b9:4a:fd:0c:
                    1a:f8:fb:8c:78:af:ed:8c:af:15:1c:c6:da:bb:c4:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:53:D8:99:A0:63:C1:7A:25:87:40:DB:EA:E2:71:F4:B9:4A:14
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:c5:0c:59:c7:98:da:59:c4:cf:40:c7:68:58:65:7a:ef:
         d7:e7:a6:f0:84:6f:46:bc:53:db:5b:f1:31:0d:06:db:1d:98:
         46:0e:af:51:3a:df:7c:f5:28:a6:2d:31:01:69:49:05:dd:2e:
         46:05:a9:6a:7f:87:ab:3f:a4:a4:af:73:72:0e:cb:20:b7:26:
         f6:9a:e8:1d:66:77:34:54:a9:25:a8:80:f2:9f:22:d0:e5:a8:
         49:fb:4b:4b:69:0e:55:c0:b0:2a:71:8b:71:08:04:57:9c:da:
         d7:65:1d:43:86:10:dc:05:46:80:c0:c8:8c:eb:a2:8e:ce:8f:
         b6:e3:d3:7d:52:f6:5c:ac:d0:30:8b:7f:f2:df:d9:c1:32:76:
         1b:b0:39:6e:8e:7c:25:22:0f:a8:09:8d:16:56:49:02:2e:dd:
         e8:50:96:d7:95:77:60:5c:3c:c5:4c:26:7a:13:6d:66:83:81:
         78:35:dd:ca:a1:5d:54:e6:93:f1:78:5c:3e:83:3c:16:d9:e9:
         47:65:93:2a:fd:70:81:97:19:00:5a:61:d4:10:21:65:c6:bd:
         dc:16:c2:0e:65:a8:8c:fe:b5:dc:23:2d:5c:ea:8c:76:e2:1d:
         6f:85:37:08:84:4c:fb:29:ca:4b:09:44:b2:18:c6:e3:c6:5c:
         d3:14:68:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBIQbWqNUwwayzNceMh5uzz8NgAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIwQkQwNkZCMkQwNkY3NDdDNUIyNkZGRkI5RDdCQzgy
QUI4Nzc0NDAeFw0yNDA3MjgxODQ4NDJaFw0yNTA3MjcxODUzNDJaMDMxMTAvBgNV
BAMTKDA0QzA1M0Q4OTlBMDYzQzE3QTI1ODc0MERCRUFFMjcxRjRCOTRBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRwdAcfYBADO6A89riSepPQNGn
A+iEnYhxEMVxLM13nYTljeiGdbjyZvRy61G8n0f+jp/3EG3ZykU+kZ2dCiF7PChP
7VXHG3eXoGcooG1fxI4KjRHU90TyQKWCKXjIRdqL3Jm3xIZwd3UV+wMUqqcudTWE
+7SxZZHvjfGN7hx9AkxV5eW5OcPip7e++TlgmLGJU1HPA2WnNfJqcv91xusDu5lW
AK9oFJeI61VXd6vEhCF+A94+xcA+ibDuBpcTvrOpvJLcnhhDuvFZshGWL9bL4Jgh
/QzpkNx5pNYXWYc8IDy4tcXU0Ins0rsguUr9DBr4+4x4r+2MrxUcxtq7xEYTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBMBT2JmgY8F6JYdA2+ricfS5ShQwHwYDVR0j
BBgwFoAUUgvQb7LQb3R8Wyb/+517yCq4d0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEFHY2ZyUXlvWm5iaHJKZ1h1TE1QeGJxQnJ3S3RSOWVNVjRYdWVidmFN
NjUvMC81MjBCRDA2RkIyRDA2Rjc0N0M1QjI2RkZGQjlEN0JDODJBQjg3NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMEJEMDZGQjJEMDZGNzQ3
QzVCMjZGRkZCOUQ3QkM4MkFCODc3NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hBR2NmclF5b1puYmhySmdYdUxNUHhicUJyd0t0UjllTVY0WHVlYnZhTTY1LzAv
MzEzNzM3MmUzNzMwMmUzMjMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzIzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUbcMA0GCSqGSIb3DQEBCwUAA4IBAQCnAcUMWceY
2lnEz0DHaFhleu/X56bwhG9GvFPbW/ExDQbbHZhGDq9ROt989SimLTEBaUkF3S5G
Balqf4erP6Skr3NyDssgtyb2mugdZnc0VKklqIDynyLQ5ahJ+0tLaQ5VwLAqcYtx
CARXnNrXZR1DhhDcBUaAwMiM66KOzo+249N9UvZcrNAwi3/y39nBMnYbsDlujnwl
Ig+oCY0WVkkCLt3oUJbXlXdgXDzFTCZ6E21mg4F4Nd3KoV1U5pPxeFw+gzwW2elH
ZZMq/XCBlxkAWmHUECFlxr3cFsIOZaiM/rXcIy1c6ox24h1vhTcIhEz7KcpLCUSy
GMbjxlzTFGi/
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:20:48 2025 by rpki-client