Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231342e302f32332d3233203d3e203533323137.roa
File:                     3137372e37302e3231342e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          e2E+pyT1heJ19K70yl3x56HDADaQ9REsmbRLddI1aTM=
Subject key identifier:   98:2F:80:D3:A3:D1:28:C7:B5:34:49:8C:7F:FA:95:B8:F3:CE:1A:D3
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       7CB99C4779E3DDA0309729778318A0ACB9686059
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231342e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:50 +0000
ROA not before:           Sun 28 Jul 2024 18:48:50 +0000
ROA not after:            Sun 27 Jul 2025 18:53:50 +0000
asID:                     53217
IP address blocks:        177.70.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b9:9c:47:79:e3:dd:a0:30:97:29:77:83:18:a0:ac:b9:68:60:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:50 2024 GMT
            Not After : Jul 27 18:53:50 2025 GMT
        Subject: CN=982F80D3A3D128C7B534498C7FFA95B8F3CE1AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:83:50:ea:8c:fb:fa:39:24:ec:eb:46:e9:
                    90:ec:b4:a1:33:ef:23:fe:b4:b5:ff:35:03:16:16:
                    22:a5:c0:f7:0a:2a:ad:f3:4e:71:6e:70:84:f8:36:
                    d3:3c:6e:f1:80:1e:7a:f9:74:06:c1:7f:6d:e7:b2:
                    a8:db:cc:f5:86:0a:f2:e2:0a:1e:f2:ce:a6:b5:16:
                    84:12:04:d6:7d:5f:30:b9:b1:62:42:d7:ca:c0:32:
                    4d:64:69:c5:c6:65:7d:f6:bb:14:3a:69:b2:ad:80:
                    a6:94:56:fa:14:53:37:7c:47:39:c7:bf:e1:c6:07:
                    8c:70:c7:c1:83:96:b9:23:c1:f7:8c:b8:e6:ea:e6:
                    6a:80:02:ed:b3:23:21:5a:55:47:fe:0b:0f:68:3a:
                    01:cf:7a:8c:f3:32:83:02:bc:12:7d:b2:c0:db:0d:
                    a3:21:94:7c:c7:12:a1:5f:68:48:a7:6c:46:b7:d2:
                    1b:fb:4c:1d:3a:36:69:68:47:05:fc:84:9e:7a:7b:
                    37:73:3b:29:00:cc:02:f7:67:b9:7e:6e:6e:18:55:
                    39:1a:81:a1:32:42:df:0e:96:f5:6f:c0:04:e4:bb:
                    be:14:cc:9d:7b:2c:da:0d:0f:b5:d6:23:29:9d:00:
                    e6:de:4a:b7:46:e5:e0:a5:3e:a3:37:4a:df:a5:50:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:80:D3:A3:D1:28:C7:B5:34:49:8C:7F:FA:95:B8:F3:CE:1A:D3
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231342e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:96:de:49:2a:2c:66:51:a1:d7:0c:f2:2e:59:73:54:04:
         1a:ad:c8:61:2a:36:27:fb:ca:ed:4b:07:ab:cc:11:90:a6:86:
         3b:92:2d:3f:ee:b2:53:cb:59:2b:ee:51:3e:cf:53:75:45:6a:
         cb:28:bf:d0:ea:2e:ac:d8:d2:5d:4e:c2:c5:5f:46:9b:d4:3f:
         d4:01:e0:4d:6a:df:46:02:7f:36:70:d4:32:2f:09:b4:7a:6e:
         43:be:b0:93:45:0c:30:62:dc:f7:74:ed:5c:e1:4d:8c:3a:f3:
         c2:34:fe:0f:9f:7b:76:eb:7e:0f:b3:b4:b7:3a:7a:c1:54:cd:
         48:9e:05:a6:aa:e0:21:0e:a9:e8:71:7d:1c:aa:ae:37:6c:06:
         5f:8b:b3:31:42:2d:3f:9f:17:43:53:a7:1b:cb:43:46:92:9e:
         87:b7:f7:2e:fe:39:f3:cb:45:55:d7:78:64:e2:d3:3e:ea:a3:
         ce:9d:38:a6:bc:41:1b:c3:43:f5:8a:14:5e:e8:05:52:39:50:
         a8:3c:70:0e:0e:1d:da:8f:6b:7b:a5:18:29:21:be:1e:71:ad:
         06:11:97:01:e5:b3:5c:b0:b5:05:54:11:f8:da:94:b6:f9:f4:
         ce:b8:29:15:f1:20:91:ac:d4:b5:8f:84:58:d1:c2:89:64:ea:
         f3:7b:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:30:09 2025 by rpki-client