Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233302e302f32332d3233203d3e203533323137.roa
File:                     3138362e3233372e3233302e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          6Zx168/RCTj4783f6tJZmVBfNw4erCClWCTVV3fhMBY=
Subject key identifier:   18:F3:E7:BC:93:E0:47:7E:44:1C:27:53:35:AC:25:C0:09:C6:2E:1A
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       36CE3128BA005899B1A7ADE1DEA261C3C7B01426
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233302e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:43 +0000
ROA not before:           Sun 28 Jul 2024 18:48:43 +0000
ROA not after:            Sun 27 Jul 2025 18:53:43 +0000
asID:                     53217
IP address blocks:        186.237.230.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ce:31:28:ba:00:58:99:b1:a7:ad:e1:de:a2:61:c3:c7:b0:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:43 2024 GMT
            Not After : Jul 27 18:53:43 2025 GMT
        Subject: CN=18F3E7BC93E0477E441C275335AC25C009C62E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:65:f9:a0:1d:ba:e3:85:b5:6e:f2:6a:1f:
                    38:38:2a:27:bc:ee:98:28:23:b9:8f:18:af:a4:87:
                    b4:ec:c3:13:fd:65:42:2e:9c:98:6b:df:79:47:04:
                    b4:9e:fd:a1:fb:d4:2c:7f:c1:d4:62:c8:fc:ab:b9:
                    16:76:96:06:0e:ed:f2:4b:4d:df:52:07:1a:ff:cb:
                    fc:13:19:e0:1c:e3:80:15:f0:a7:e4:36:83:71:29:
                    75:94:d4:35:67:ac:ae:dc:e1:2d:d0:a4:88:c1:af:
                    34:56:a1:6c:2f:4d:19:0e:e9:d5:c4:2d:19:2d:75:
                    aa:8c:79:85:d1:98:41:5c:ba:f7:73:b8:32:d2:4c:
                    69:9b:99:86:c2:ba:43:79:bd:52:2d:f8:d3:9f:b6:
                    1e:b8:e7:e9:cb:85:bf:f3:7b:01:73:01:cc:e5:7d:
                    be:c2:1c:3b:23:08:ca:66:9d:3a:f3:b2:70:6e:4c:
                    93:b5:ea:76:e7:71:69:5e:f5:01:f6:d8:fe:d5:53:
                    87:c3:e9:96:d5:68:a4:00:e6:28:44:8f:f1:ca:da:
                    9f:4b:82:c8:bc:da:7d:33:1c:6c:4a:65:52:30:e1:
                    b8:46:ca:fb:4a:85:75:f6:9d:e7:03:13:1a:55:37:
                    c5:ba:45:f5:dd:22:fe:32:06:e1:ec:24:c5:05:26:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:E7:BC:93:E0:47:7E:44:1C:27:53:35:AC:25:C0:09:C6:2E:1A
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233302e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:8e:a5:de:4a:dc:80:9e:bc:73:c6:47:bd:fb:7a:ca:90:
         5f:f7:f0:0b:29:7a:a7:16:e2:5d:2e:6f:d8:bf:50:8e:db:6d:
         93:fc:9d:a1:3f:d9:a2:53:cc:fb:9a:36:28:6e:c5:c8:18:ad:
         53:0a:9d:71:44:e3:af:55:02:ad:58:7e:02:0d:92:b8:d9:e0:
         9e:e7:7b:31:a0:19:13:bc:ea:1b:dd:4c:ef:b3:19:83:f5:82:
         ef:9b:84:08:e1:43:2f:14:d2:20:35:e5:12:76:64:9c:3a:a0:
         49:b4:53:ef:f3:63:29:54:f0:cb:1f:a5:23:3d:08:02:d6:69:
         0b:3c:b8:67:c4:6d:47:97:ef:06:5e:18:00:66:e5:c7:17:be:
         c5:e6:a1:5a:e2:dc:4c:7b:ed:17:a0:48:4d:d5:aa:30:a3:aa:
         c8:73:ad:cb:4f:65:ab:cd:74:95:2a:ae:8e:38:56:02:e8:7e:
         d9:b6:c4:c9:58:68:e2:8c:2b:70:3b:ca:dc:77:48:39:51:ca:
         02:0b:62:05:6e:08:e3:dd:44:48:a3:21:c3:88:ae:7b:f8:26:
         40:83:b3:67:63:53:45:be:d0:55:17:ae:6b:9b:38:dd:06:86:
         ff:a5:8c:20:f0:c9:39:af:16:65:7b:8a:5d:9d:cf:1e:99:dc:
         35:78:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:48:05 2025 by rpki-client