Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232382e302f32332d3233203d3e203533323137.roa
File:                     3138362e3233372e3232382e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          lnZoOZPqMkjJfkN4vO2oGvQGkzXuXJpCNB607QzHKI8=
Subject key identifier:   17:36:CE:7B:96:0A:51:EF:9C:0C:B6:5F:1D:B9:5C:AD:CB:DD:5C:8A
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       0E65D1E4024575A6D69AB902FAABCB59A1A859C1
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232382e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:46 +0000
ROA not before:           Sun 28 Jul 2024 18:48:46 +0000
ROA not after:            Sun 27 Jul 2025 18:53:46 +0000
asID:                     53217
IP address blocks:        186.237.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:65:d1:e4:02:45:75:a6:d6:9a:b9:02:fa:ab:cb:59:a1:a8:59:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:46 2024 GMT
            Not After : Jul 27 18:53:46 2025 GMT
        Subject: CN=1736CE7B960A51EF9C0CB65F1DB95CADCBDD5C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:0a:cd:c2:d2:dc:ac:6e:26:b9:4a:dc:6c:
                    2c:95:67:50:3d:78:f2:0f:45:5d:7f:51:a6:54:5c:
                    7a:17:8d:f7:d0:2b:2e:8b:fb:f2:d0:76:df:11:55:
                    30:27:7a:0a:f0:ce:4c:86:74:86:03:23:ab:9a:f2:
                    53:91:49:11:7a:b7:c9:84:6c:b2:67:33:38:97:ee:
                    bf:a8:65:07:78:00:0a:7f:23:cd:44:d1:20:9e:9b:
                    05:c9:cb:86:6a:14:ee:84:7f:76:ec:98:6e:df:5a:
                    a6:87:50:f5:24:74:cc:14:fb:c0:c7:b6:e5:47:8b:
                    9f:96:78:7b:d1:8a:e0:98:b3:fd:7d:5a:fa:05:d4:
                    e5:a3:ec:d7:53:b3:ca:76:ec:4b:8a:4d:f5:b5:21:
                    6d:96:e4:71:1c:b2:b4:ce:d4:91:40:b1:ff:33:d5:
                    09:97:63:50:2c:fc:1f:40:52:16:ba:19:fe:14:ea:
                    3a:0f:4c:04:fc:a8:fb:de:44:e0:5c:ff:0d:67:58:
                    08:06:d4:5c:f2:b9:b3:55:e2:6c:47:f9:01:ef:0a:
                    d1:6e:f1:c6:f5:77:b8:51:1b:c0:38:8a:0a:ff:fc:
                    b4:8a:69:d9:66:b2:2a:26:c0:c9:86:6d:f3:2b:b1:
                    0a:8f:4c:f7:54:5d:07:47:d9:5c:36:6c:b1:59:ca:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:CE:7B:96:0A:51:EF:9C:0C:B6:5F:1D:B9:5C:AD:CB:DD:5C:8A
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232382e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:40:f0:6e:c8:b5:44:61:d6:04:3b:39:93:09:2e:d1:1d:fe:
         5c:b6:ea:ea:59:4b:9d:33:6d:a0:d7:4a:1a:c3:ad:d6:d7:01:
         05:9d:9d:e9:25:1b:ab:22:5b:5f:24:92:37:00:f7:59:14:e5:
         31:e7:b5:0d:7b:5f:31:be:ad:33:59:0d:33:86:05:86:4a:f4:
         a8:12:19:2c:b1:58:f0:4f:75:04:14:4b:58:b0:b6:f4:c1:c2:
         30:ef:cb:e4:9a:89:a1:3e:6a:fd:a7:02:7f:a3:c0:7f:4a:9d:
         f9:07:6d:a8:02:ad:58:bf:f8:8d:5b:58:95:6c:69:d8:00:93:
         45:b6:e2:3c:a1:76:f3:8b:19:ec:22:e6:0d:5a:29:3c:eb:0e:
         b4:f0:33:19:61:3e:45:d2:0f:09:50:cd:f8:d7:26:97:b8:e9:
         c1:5f:b1:23:ee:82:7c:43:4c:71:c9:a5:b7:04:38:c7:23:24:
         84:c6:00:8b:16:71:ab:89:d9:dd:fa:3e:37:99:41:dc:60:3e:
         a3:d6:ce:45:5b:97:6d:e3:6a:96:98:0a:94:f0:08:4e:48:f1:
         a1:e6:ae:53:4a:2f:8c:f6:c1:48:d1:46:bc:cb:ee:2c:12:36:
         dd:55:a8:3f:b3:d4:13:05:cf:4a:92:55:95:86:f0:07:71:90:
         f0:bd:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:48:40 2025 by rpki-client