Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233362e302f32322d3232203d3e203533323137.roa
File:                     3138362e3233372e3233362e302f32322d3232203d3e203533323137.roa (raw, json)
Hash identifier:          DTXCmLSl6JDQNBUm7x5PyTerSJ+SZcDGjSp+fYYmMbk=
Subject key identifier:   6A:62:01:EF:3B:DB:52:BD:3F:1D:48:6F:5E:32:4A:68:A6:D4:62:C0
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       3B71577A33EFDB59B127EA03F51F97AED4173064
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233362e302f32322d3232203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:44 +0000
ROA not before:           Sun 28 Jul 2024 18:48:44 +0000
ROA not after:            Sun 27 Jul 2025 18:53:44 +0000
asID:                     53217
IP address blocks:        186.237.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:71:57:7a:33:ef:db:59:b1:27:ea:03:f5:1f:97:ae:d4:17:30:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:44 2024 GMT
            Not After : Jul 27 18:53:44 2025 GMT
        Subject: CN=6A6201EF3BDB52BD3F1D486F5E324A68A6D462C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:9e:bb:62:98:63:c1:5e:33:39:f1:00:28:
                    4e:55:af:82:ed:a0:71:62:44:59:4c:f8:13:dc:65:
                    4d:73:2a:8e:fb:81:e2:bf:5b:80:88:44:07:6b:18:
                    9e:23:74:86:ef:d8:14:ab:6a:98:df:00:59:39:50:
                    16:79:f9:01:19:52:a9:90:d5:88:82:8e:1a:53:0f:
                    00:4d:5f:c4:6f:81:d7:55:30:4d:c0:ab:74:bf:a0:
                    e3:3d:2d:a2:d2:8c:1e:bf:ca:b5:e9:34:11:21:95:
                    55:02:a0:18:fb:df:1b:28:2d:14:aa:79:2e:d6:6b:
                    56:ef:42:ec:71:df:a8:ee:c9:5c:15:22:c9:c1:3d:
                    98:70:db:94:9c:f8:0b:a9:89:0b:29:06:0f:85:b3:
                    9f:50:11:bc:72:86:9c:85:e4:1e:0b:18:4d:1c:2e:
                    eb:57:13:9f:e1:d8:7e:c0:f2:3c:11:25:03:9b:ad:
                    0b:cf:fc:8b:c8:0d:f6:3f:0d:65:fe:7e:7f:40:7d:
                    b5:ba:21:55:c3:bc:72:81:20:2c:e5:d9:5e:6d:07:
                    30:a3:9b:16:b1:71:8c:a3:37:61:8f:4b:94:38:87:
                    66:1e:ce:b2:09:e7:86:c9:bb:2f:96:b0:9d:5c:13:
                    1d:2b:99:53:c2:f2:62:3b:a7:15:78:6a:06:32:9b:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:01:EF:3B:DB:52:BD:3F:1D:48:6F:5E:32:4A:68:A6:D4:62:C0
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233362e302f32322d3232203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:92:ba:de:0b:27:b2:33:d5:76:d3:9b:7f:77:55:c5:70:b3:
         0c:26:f9:22:7b:6b:8b:15:81:97:a5:47:4b:9b:52:4f:71:08:
         4a:e8:29:b1:d2:11:7e:ec:de:55:ac:b6:3f:0a:9c:e6:58:63:
         52:7d:65:8b:78:ab:e1:b1:94:ba:f3:75:42:fe:3f:dc:8d:64:
         b6:f6:42:11:c8:c9:43:cc:11:a0:46:7a:d4:90:ec:73:cb:f9:
         40:db:ab:8f:a5:87:c4:a1:ea:f2:77:b4:3c:da:00:ba:be:c2:
         6a:ae:0f:4b:1d:3d:78:b7:85:53:b1:e2:02:0f:a0:0e:ac:fc:
         82:99:b7:03:5e:d0:e4:05:a1:1f:15:7b:98:31:7c:db:46:1b:
         b5:11:1f:40:94:5a:68:9d:cb:d9:a7:c0:b8:f9:43:a5:e6:5e:
         7b:d0:d3:ee:3f:f3:1e:18:8a:dc:a3:5d:97:e1:25:ca:ab:83:
         67:35:7e:48:4e:27:e5:cc:f0:1f:39:03:67:17:d8:56:b9:14:
         29:71:af:ba:91:4b:ff:4b:d9:c3:2f:62:df:cc:91:a9:33:ab:
         83:b3:d3:6d:45:d9:ba:bb:4e:0f:f0:65:8c:64:d7:c8:39:74:
         05:23:24:0a:a4:29:26:b2:9c:29:63:39:08:b4:9c:96:0d:05:
         84:f0:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:36:44 2025 by rpki-client