Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233342e302f32332d3233203d3e203533323137.roa
File:                     3138362e3233372e3233342e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          DKDRvXejxdskJN9njorwy52zKl6rpN01tVfpHf3pGNo=
Subject key identifier:   C0:FC:9A:61:CA:A9:E0:45:FA:27:24:0A:B9:29:C1:E0:96:E2:11:B9
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       24AC3C7CA5F8D7FECF253ECA6E0AB882B63F25BD
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233342e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:49 +0000
ROA not before:           Sun 28 Jul 2024 18:48:49 +0000
ROA not after:            Sun 27 Jul 2025 18:53:49 +0000
asID:                     53217
IP address blocks:        186.237.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ac:3c:7c:a5:f8:d7:fe:cf:25:3e:ca:6e:0a:b8:82:b6:3f:25:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:49 2024 GMT
            Not After : Jul 27 18:53:49 2025 GMT
        Subject: CN=C0FC9A61CAA9E045FA27240AB929C1E096E211B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:fb:f5:84:55:5c:c9:76:3b:49:f0:87:0c:
                    6d:8e:d6:33:5b:01:ca:09:4f:71:d4:83:18:3a:72:
                    2e:7e:14:01:b4:6c:10:2a:2d:9f:09:c4:c0:9d:d7:
                    fd:97:71:aa:fe:84:45:1c:a5:84:d2:62:a2:69:71:
                    4c:de:6b:2b:f9:90:a7:c8:d9:71:dd:81:21:7c:d5:
                    ca:5e:2d:68:ef:ab:2f:09:9c:32:63:ff:f8:cd:ef:
                    a0:6a:07:bd:29:ca:97:d0:94:7b:47:71:52:1b:f1:
                    a8:de:25:74:98:b4:a1:46:91:0a:5e:9e:2a:b5:1e:
                    55:b7:df:a5:59:d7:c7:d5:e1:c0:8f:f8:92:84:39:
                    42:16:16:ab:4c:55:4c:8b:85:71:32:c3:a8:94:32:
                    96:28:3e:24:d7:b7:80:03:1a:c0:3a:92:f6:75:86:
                    3c:32:fe:41:b6:63:42:ef:23:40:5b:fd:9b:ad:96:
                    9f:14:68:71:0a:69:1f:9c:85:04:21:cc:5e:0f:0e:
                    16:28:af:92:d2:aa:01:0e:1e:7d:b3:e9:d8:99:01:
                    49:a1:11:a4:80:60:47:c0:06:d5:ed:42:48:88:7f:
                    0d:81:5b:11:d4:74:c1:40:73:fb:56:6c:ed:f8:2e:
                    9e:23:d8:38:bb:1b:47:d3:62:df:05:f1:ad:32:2c:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:9A:61:CA:A9:E0:45:FA:27:24:0A:B9:29:C1:E0:96:E2:11:B9
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233342e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:ab:c9:9a:40:df:c3:fa:2b:fb:b7:bb:51:49:be:81:b5:
         7a:af:dc:c8:a2:56:a2:90:4c:84:3b:df:d0:99:5b:ff:25:60:
         2e:81:f9:73:05:35:5b:2d:cd:79:fe:5a:e4:39:9f:30:2e:75:
         50:63:54:69:41:43:f4:40:88:2b:7d:22:0e:86:87:88:e7:17:
         4a:64:7b:ac:a5:b9:d2:fd:02:04:1a:e2:7a:bd:c2:09:97:99:
         74:bd:92:7c:0a:3c:77:a4:6f:5a:80:fb:96:ab:78:e1:e2:8b:
         a9:b3:3d:96:93:6c:fd:38:9e:7b:20:f2:22:6f:99:8d:97:c1:
         d6:a9:46:aa:18:90:a6:15:d6:b7:2c:08:f4:28:5a:f1:a8:fb:
         2e:68:77:75:70:82:4b:c9:33:e2:23:17:12:e0:e0:6d:2e:40:
         12:4c:a5:87:77:37:da:dd:65:da:53:1b:b0:31:c9:55:d6:59:
         d4:01:c8:bb:1f:0e:7e:eb:80:a3:76:7e:9d:f7:b9:48:f4:59:
         86:28:7c:90:56:9e:06:20:91:8d:5d:06:6f:53:60:90:3b:be:
         60:7d:d9:52:30:00:e9:2c:18:c9:71:da:6b:77:82:3e:9d:57:
         64:2f:67:ac:bf:f8:a9:12:5a:ef:9e:fb:e6:89:80:f1:fd:fb:
         51:71:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:21:29 2025 by rpki-client