Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35322e302f32332d3233203d3e203532393533.roa
File:                     3137372e32322e35322e302f32332d3233203d3e203532393533.roa (raw, json)
Hash identifier:          auRXhnbpDeQjLDrP8cVIjaWO1cGXeYTYU7f/UHT5FLI=
Subject key identifier:   F3:00:0B:C8:84:89:4C:9D:00:38:7E:17:B1:79:28:10:D9:AC:91:19
Certificate issuer:       /CN=52A6D195524E5D77063F4811A6C89136CC740F16
Certificate serial:       06DFBF2FA2BDF318868D158FBA08F899A29A70C0
Authority key identifier: 52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35322e302f32332d3233203d3e203532393533.roa
Signing time:             Wed 16 Aug 2023 13:15:59 +0000
ROA not before:           Wed 16 Aug 2023 13:10:59 +0000
ROA not after:            Wed 14 Aug 2024 13:15:59 +0000
asID:                     52953
IP address blocks:        177.22.52.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:bf:2f:a2:bd:f3:18:86:8d:15:8f:ba:08:f8:99:a2:9a:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A6D195524E5D77063F4811A6C89136CC740F16
        Validity
            Not Before: Aug 16 13:10:59 2023 GMT
            Not After : Aug 14 13:15:59 2024 GMT
        Subject: CN=F3000BC884894C9D00387E17B1792810D9AC9119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:84:e4:12:b4:b0:3b:de:f4:fd:a9:d3:6e:
                    07:94:44:78:59:21:94:b6:f5:8c:52:c4:03:0f:0e:
                    e7:c8:b6:60:4d:b0:48:7f:b6:7b:16:03:12:61:18:
                    c9:26:0e:98:3a:b8:ad:1f:ec:65:16:ba:e8:47:8e:
                    86:9d:fb:d1:df:99:96:06:d0:a4:91:dd:c5:c3:24:
                    12:bf:15:53:26:8f:e8:5a:ae:6b:1a:2c:88:d7:bf:
                    7d:88:70:8b:0a:7b:99:7e:d2:0a:7d:e1:48:77:6c:
                    9f:01:c3:66:f8:62:16:bd:65:72:48:0f:85:b8:a9:
                    a8:57:14:14:57:3f:08:77:03:23:53:74:91:3b:9e:
                    a6:97:f7:8c:7a:89:0b:96:f4:14:db:5e:e1:29:83:
                    97:60:a4:c8:44:00:0b:92:06:51:33:28:b5:90:23:
                    e0:e0:dc:72:80:74:e6:6e:ad:c2:ce:34:2e:2b:33:
                    b2:6a:a6:b1:b1:6c:b3:c0:8f:c1:6c:d0:0c:ce:d2:
                    b5:1d:f3:d3:82:a8:c8:b4:7c:f8:f6:8d:06:35:ed:
                    73:44:87:37:fc:e6:1c:df:95:f5:c6:4f:66:b0:f0:
                    14:c8:4f:e8:6b:ac:b2:e5:7e:9b:f6:76:59:91:c3:
                    3a:8a:22:dc:b1:4d:df:85:f0:61:60:9d:3b:47:c4:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:0B:C8:84:89:4C:9D:00:38:7E:17:B1:79:28:10:D9:AC:91:19
            X509v3 Authority Key Identifier:
                keyid:52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35322e302f32332d3233203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:39:75:ff:1f:16:0d:53:20:87:54:65:28:f9:c8:c6:37:04:
         12:10:85:e4:24:bd:92:c0:0f:fa:92:87:43:20:56:c0:c8:30:
         7d:63:a3:7e:1c:17:75:1a:34:f8:59:7f:43:d6:2d:a8:dc:e3:
         43:84:88:ae:a0:2b:3e:63:6a:b7:6b:e3:66:de:0f:ba:f3:8d:
         62:a6:90:1e:b7:65:3d:33:a0:a8:24:ae:8b:7f:6d:f7:0f:8c:
         bd:42:bf:ee:2b:de:ab:7e:8e:7e:f4:36:69:d1:d8:0a:46:f8:
         2e:f9:43:1a:e1:46:47:45:6e:df:f1:84:5f:8d:f0:3a:89:24:
         fd:11:06:06:31:de:95:3b:28:b9:73:73:92:e9:4f:7c:21:b0:
         32:ed:f7:a0:c9:5c:4a:7f:be:67:56:76:2d:35:04:07:52:ee:
         1e:3a:50:f6:c7:2f:9b:20:df:16:38:df:e5:ec:b8:15:70:04:
         1f:63:da:7c:97:90:42:3d:fb:df:52:1b:52:30:df:64:ee:f3:
         f2:62:be:92:45:3b:e2:7e:51:9f:4a:45:79:be:f6:73:d5:b7:
         c5:fd:38:4e:c2:bf:97:e4:80:4a:87:72:3c:a1:53:fd:98:7d:
         0e:ba:b9:c2:7d:b6:f0:80:ef:9f:c6:e7:cf:16:ed:c9:82:7d:
         6d:4a:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:35 2025 by rpki-client