Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232322e302f32332d3233203d3e203533323137.roa
File:                     3137372e37302e3232322e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          oOE3kI0SslYzJ+4mNNhLHJ596Zv0NkzITzq3yzngQoE=
Subject key identifier:   5E:15:F1:0B:7F:0E:9E:58:2F:C2:B0:55:DC:59:56:E4:B7:FC:1F:EC
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       32B19BC5670CB9B51868EBF9111E31278A1905B2
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232322e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:47 +0000
ROA not before:           Sun 28 Jul 2024 18:48:47 +0000
ROA not after:            Sun 27 Jul 2025 18:53:47 +0000
asID:                     53217
IP address blocks:        177.70.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b1:9b:c5:67:0c:b9:b5:18:68:eb:f9:11:1e:31:27:8a:19:05:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:47 2024 GMT
            Not After : Jul 27 18:53:47 2025 GMT
        Subject: CN=5E15F10B7F0E9E582FC2B055DC5956E4B7FC1FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:5f:bb:f4:53:d5:53:84:2e:34:6b:ab:4d:
                    9a:53:e1:58:ae:0a:d6:96:16:2b:36:16:e9:62:b5:
                    16:4e:64:a3:6f:31:ed:61:5e:a8:54:c9:2b:da:0e:
                    07:d4:03:50:5c:29:b5:fd:a5:d2:ff:09:ed:88:7c:
                    08:9d:a2:01:d5:a5:03:e0:a0:b6:b3:df:4d:b8:0e:
                    5b:73:3e:e6:b4:36:e1:e9:0d:1e:5a:4c:59:2d:ef:
                    89:28:2f:5a:68:d5:6b:6b:6f:e6:b3:b5:d9:8d:cf:
                    95:aa:63:5a:0a:22:07:f4:3b:6c:4e:f8:14:18:da:
                    73:2f:44:6a:25:75:d8:b2:7a:c3:48:2a:47:38:92:
                    a7:e0:f3:78:98:52:3e:fd:ba:8e:d1:45:40:4d:02:
                    6a:88:13:ee:7b:6e:1d:7a:0c:35:d1:c4:ee:23:ad:
                    9c:63:91:e1:da:8b:26:56:64:71:1d:12:64:e3:a8:
                    ab:e2:b9:c4:76:61:29:45:ff:1f:7d:37:45:58:18:
                    a7:50:c1:20:38:21:ee:64:66:8f:a6:8d:21:1f:9d:
                    eb:e7:6a:d7:86:6c:0b:2f:4a:19:a4:d8:89:6d:e6:
                    bf:4f:72:9c:3e:90:f1:2a:f3:7f:85:7e:72:0d:bc:
                    7d:d1:5d:f6:2e:1b:5e:e3:56:18:18:ac:1e:60:17:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:F1:0B:7F:0E:9E:58:2F:C2:B0:55:DC:59:56:E4:B7:FC:1F:EC
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232322e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:76:2c:e0:11:a9:bc:ba:38:b0:5f:fd:64:db:07:a3:dd:07:
         51:59:1f:fa:b6:9c:76:8e:79:3a:76:f8:1b:9c:f1:7e:8c:89:
         9c:d6:e7:11:fa:53:cb:38:1b:6e:19:65:32:f4:21:2a:96:31:
         9a:3e:69:5f:b5:39:a5:48:fd:76:f4:d5:f7:24:4c:36:09:8d:
         28:af:a8:af:9f:ec:44:ee:5b:96:a5:d7:ce:12:ca:b0:fa:b5:
         84:bd:76:4f:c0:5a:4b:58:e0:5e:41:9d:30:98:1f:3c:25:68:
         9f:ff:bc:b9:dd:93:63:50:70:7f:f7:f4:ca:c8:fa:92:97:1e:
         a5:c8:3e:35:60:e1:e8:9c:aa:e3:ec:f4:76:dd:44:ad:01:7c:
         4f:97:05:cb:cd:4d:fd:69:19:40:d1:29:79:90:c0:e3:ff:ae:
         16:9d:b1:1b:7b:c2:98:50:9c:74:00:4b:42:d1:18:29:3d:58:
         20:0f:bf:88:4e:99:15:4c:3d:53:af:e6:3b:fb:4d:65:48:33:
         70:a3:5e:3c:a9:f5:b2:aa:be:00:5f:b5:84:ff:1f:03:11:45:
         cd:9f:12:92:a1:af:5b:3e:b9:0a:b2:be:54:2a:41:eb:e1:08:
         49:f0:79:8a:d9:d2:a8:6c:5d:17:f7:66:66:e6:ed:8e:d2:68:
         25:38:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:49:26 2025 by rpki-client