Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32312d3231203d3e203533323137.roa
File:                     3138362e3233372e3232342e302f32312d3231203d3e203533323137.roa (raw, json)
Hash identifier:          gQP4r8NhJbXgAUe2zki9i/Nw/KhIg9cybaPevd0AoX0=
Subject key identifier:   E5:09:9B:F1:88:A5:19:1F:E2:43:5B:1E:84:18:72:2B:D8:BF:F2:27
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       0A3BED8043A7D1F3DCA2145FCBBB88233D833D02
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32312d3231203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:47 +0000
ROA not before:           Sun 28 Jul 2024 18:48:47 +0000
ROA not after:            Sun 27 Jul 2025 18:53:47 +0000
asID:                     53217
IP address blocks:        186.237.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3b:ed:80:43:a7:d1:f3:dc:a2:14:5f:cb:bb:88:23:3d:83:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:47 2024 GMT
            Not After : Jul 27 18:53:47 2025 GMT
        Subject: CN=E5099BF188A5191FE2435B1E8418722BD8BFF227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:26:61:14:ef:93:95:fe:b9:ea:7c:a9:b3:
                    66:06:62:1a:c6:20:a5:cc:5f:df:95:f1:12:84:3d:
                    55:aa:58:87:9b:34:6a:41:aa:fc:c5:dc:07:dc:34:
                    d9:b2:88:fa:12:39:e1:d2:a5:fe:38:86:17:25:d2:
                    4b:dd:7c:ec:c0:ce:d5:15:b3:b8:49:d2:17:98:f1:
                    95:8d:a3:da:8e:8f:9d:a6:f9:7b:4e:45:2e:1c:5c:
                    a8:be:de:ba:d6:b0:84:f3:00:70:92:1c:63:03:da:
                    f6:bc:b1:da:bd:04:67:83:0c:07:1e:9b:05:9f:7a:
                    53:02:cf:6c:6a:ae:92:93:34:c7:91:c7:c0:8f:fe:
                    e3:26:73:29:d1:ee:e4:2f:8f:ea:67:67:81:d9:3c:
                    b9:fd:ea:dd:ef:49:fc:b2:ea:9b:75:1a:44:31:17:
                    63:d5:de:a2:41:cd:b5:6e:80:e5:32:65:81:50:6a:
                    b4:f1:38:ee:1e:47:78:b5:e9:c3:44:af:89:16:7c:
                    77:50:3f:77:0b:33:02:54:5b:cd:39:3f:4a:ed:5c:
                    85:2f:4d:ff:cc:37:51:31:9f:23:e9:66:bc:40:10:
                    ed:67:f1:84:28:ca:2f:99:cc:1c:fe:b2:b4:7e:af:
                    85:1a:cf:b9:4f:50:62:b1:85:4c:dc:c9:a9:90:43:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:9B:F1:88:A5:19:1F:E2:43:5B:1E:84:18:72:2B:D8:BF:F2:27
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32312d3231203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:bd:25:58:69:e6:10:84:30:64:b1:42:49:e3:9d:ec:44:38:
         25:a5:e8:86:03:00:b9:7f:18:03:6d:41:cf:4c:93:ef:fb:6f:
         fb:61:da:d5:f8:8d:67:3c:38:57:57:a8:f0:c2:cf:9a:0c:96:
         fd:f1:fb:86:61:8f:93:93:aa:8b:8e:69:59:bb:37:f2:20:b3:
         f4:b1:26:46:af:0e:0c:17:ec:b8:2d:40:50:56:ef:ff:3b:7e:
         ea:47:0f:18:34:a0:1e:5c:7d:08:84:51:aa:bf:67:25:b1:63:
         3a:ff:c7:5a:d7:97:9e:b8:2a:db:61:a1:56:e1:de:56:07:8f:
         76:ee:0e:9a:83:2f:ed:63:f3:46:54:cd:d8:8e:90:d3:ac:3f:
         d6:47:4b:b4:e7:e3:b4:5c:1f:66:ce:27:68:04:3e:0c:5e:46:
         ff:b6:b0:74:22:53:43:8e:19:11:3e:0c:d7:3f:e4:71:27:aa:
         04:75:04:a0:6a:d6:2d:17:6f:d2:d7:f6:f5:10:71:aa:d2:f0:
         7f:ce:6c:80:1d:5c:f9:0b:c0:2c:3a:56:38:7d:40:66:9b:79:
         51:4b:ed:21:5a:84:c8:bb:d0:f6:24:a1:23:5b:a5:e2:ae:6e:
         68:f4:43:35:88:22:c6:f4:ce:ee:03:f4:4f:e2:55:d6:c4:ab:
         60:be:d7:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCjvtgEOn0fPcohRfy7uIIz2DPQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIwQkQwNkZCMkQwNkY3NDdDNUIyNkZGRkI5RDdCQzgy
QUI4Nzc0NDAeFw0yNDA3MjgxODQ4NDdaFw0yNTA3MjcxODUzNDdaMDMxMTAvBgNV
BAMTKEU1MDk5QkYxODhBNTE5MUZFMjQzNUIxRTg0MTg3MjJCRDhCRkYyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDHyZhFO+Tlf656nyps2YGYhrG
IKXMX9+V8RKEPVWqWIebNGpBqvzF3AfcNNmyiPoSOeHSpf44hhcl0kvdfOzAztUV
s7hJ0heY8ZWNo9qOj52m+XtORS4cXKi+3rrWsITzAHCSHGMD2va8sdq9BGeDDAce
mwWfelMCz2xqrpKTNMeRx8CP/uMmcynR7uQvj+pnZ4HZPLn96t3vSfyy6pt1GkQx
F2PV3qJBzbVugOUyZYFQarTxOO4eR3i16cNEr4kWfHdQP3cLMwJUW805P0rtXIUv
Tf/MN1ExnyPpZrxAEO1n8YQoyi+ZzBz+srR+r4Uaz7lPUGKxhUzcyamQQ9mrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Qmb8YilGR/iQ1sehBhyK9i/8icwHwYDVR0j
BBgwFoAUUgvQb7LQb3R8Wyb/+517yCq4d0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEFHY2ZyUXlvWm5iaHJKZ1h1TE1QeGJxQnJ3S3RSOWVNVjRYdWVidmFN
NjUvMC81MjBCRDA2RkIyRDA2Rjc0N0M1QjI2RkZGQjlEN0JDODJBQjg3NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMEJEMDZGQjJEMDZGNzQ3
QzVCMjZGRkZCOUQ3QkM4MkFCODc3NDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hBR2NmclF5b1puYmhySmdYdUxNUHhicUJyd0t0UjllTVY0WHVlYnZhTTY1LzAv
MzEzODM2MmUzMjMzMzcyZTMyMzIzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1
MzMzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO67eAwDQYJKoZIhvcNAQELBQADggEBAHG9JVhp
5hCEMGSxQknjnexEOCWl6IYDALl/GANtQc9Mk+/7b/th2tX4jWc8OFdXqPDCz5oM
lv3x+4Zhj5OTqouOaVm7N/Igs/SxJkavDgwX7LgtQFBW7/87fupHDxg0oB5cfQiE
Uaq/ZyWxYzr/x1rXl564KtthoVbh3lYHj3buDpqDL+1j80ZUzdiOkNOsP9ZHS7Tn
47RcH2bOJ2gEPgxeRv+2sHQiU0OOGRE+DNc/5HEnqgR1BKBq1i0Xb9LX9vUQcarS
8H/ObIAdXPkLwCw6Vjh9QGabeVFL7SFahMi70PYkoSNbpeKubmj0QzWIIsb0zu4D
9E/iVdbEq2C+1zk=
-----END CERTIFICATE-----
Generated at Fri May 2 00:23:15 2025 by rpki-client