Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3230382e302f32312d3231203d3e203533323137.roa
File:                     3137372e37302e3230382e302f32312d3231203d3e203533323137.roa (raw, json)
Hash identifier:          z2IsPuodnv5JlIBPk74300qco1hzIrqxSPoCtlBstR8=
Subject key identifier:   E1:3E:43:D5:48:E3:59:99:48:17:D3:53:9E:E0:79:30:30:A5:BE:4C
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       264B2A95FC9ADB20CA4C7D89253775F15390186D
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3230382e302f32312d3231203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:51 +0000
ROA not before:           Sun 28 Jul 2024 18:48:51 +0000
ROA not after:            Sun 27 Jul 2025 18:53:51 +0000
asID:                     53217
IP address blocks:        177.70.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:2a:95:fc:9a:db:20:ca:4c:7d:89:25:37:75:f1:53:90:18:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:51 2024 GMT
            Not After : Jul 27 18:53:51 2025 GMT
        Subject: CN=E13E43D548E359994817D3539EE0793030A5BE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:99:ee:72:9e:75:31:0f:32:2c:f4:29:b6:
                    01:2f:1b:83:8e:f4:3f:5b:cd:9a:83:11:6d:38:3e:
                    d8:a7:4a:51:13:c5:d7:ee:de:e6:48:9d:9a:9d:af:
                    5b:c1:ab:35:e2:1e:5b:d2:81:ff:06:ce:ba:c7:5f:
                    96:49:f7:66:ee:63:00:80:a4:ab:ee:2c:9f:40:fd:
                    34:af:c8:e7:ff:75:f0:da:b3:96:f2:f8:5e:24:5e:
                    27:1c:c8:be:e6:0c:f5:58:18:23:25:d9:36:dd:95:
                    b8:fa:3b:e0:6b:41:93:8d:19:bc:8c:9d:97:7b:8a:
                    71:d5:65:16:92:13:49:53:c9:24:6b:ef:1f:3d:70:
                    d6:c4:63:3b:94:70:b8:1f:fc:e0:85:a3:86:e0:6a:
                    4a:ed:bb:70:6a:5b:36:1d:1c:e2:50:6c:10:3c:c1:
                    81:6b:8e:0e:70:5e:8b:15:60:6d:62:65:85:86:4b:
                    0e:fc:8e:2a:b0:36:68:60:e3:d4:7d:af:2e:88:7f:
                    eb:1a:c7:59:0b:c6:cd:d0:e4:db:a6:e3:8b:9c:9e:
                    75:7b:41:61:12:3e:a0:ef:08:51:51:6a:76:c5:82:
                    5b:d7:6e:ba:f4:49:cf:56:2f:fb:c8:c8:02:a4:f9:
                    03:dc:5c:84:7b:1e:da:a9:27:8e:70:d0:e9:a1:04:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:43:D5:48:E3:59:99:48:17:D3:53:9E:E0:79:30:30:A5:BE:4C
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3230382e302f32312d3231203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:82:ad:28:4e:b7:42:f1:a6:21:c9:b1:9a:50:13:b3:b5:
         7a:2b:e9:64:f2:79:d6:d6:4e:02:b2:18:f6:65:e8:50:76:ab:
         d0:7b:24:62:47:1f:6d:20:02:7e:5b:d8:de:95:d5:b8:e2:0e:
         18:01:0a:f9:21:b6:02:e3:28:2b:36:2e:2b:43:bb:64:d6:ea:
         22:37:0d:77:64:2b:60:70:57:1a:7d:1c:ac:c0:9d:ea:21:1d:
         71:4d:47:f7:d8:2a:aa:aa:14:9f:1a:c1:96:93:f7:3f:3f:5d:
         c0:ac:db:8e:79:26:4b:72:c8:e3:73:1f:ec:63:a1:5a:e5:10:
         2f:75:7a:08:6d:a2:97:90:70:d6:7d:d1:7f:ff:26:2d:7d:72:
         89:8b:ae:f7:ab:ee:21:28:36:54:9e:84:e5:d3:47:b5:b7:ac:
         13:50:aa:20:c2:40:8f:4a:06:79:52:a1:5d:8c:bc:6b:75:f4:
         a2:5e:b9:23:ad:0c:16:40:61:86:6f:84:f1:20:db:10:24:f1:
         9a:9d:6c:45:82:4a:86:19:a1:68:81:76:a6:17:e8:8b:bf:56:
         88:29:0a:66:ad:b6:5d:c5:5e:63:fc:45:1c:5e:c5:8b:d8:50:
         1e:d9:ac:a6:90:00:a9:dd:44:c5:e3:98:00:b2:1a:70:27:c9:
         ec:33:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:35:18 2025 by rpki-client