Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32322d3232203d3e203533323137.roa
File:                     3137372e37302e3231362e302f32322d3232203d3e203533323137.roa (raw, json)
Hash identifier:          Lm3VeBAgDW9c+A/nZ5btMzzr5DQg3fnDjwZ7qxICkxM=
Subject key identifier:   5E:21:F0:3F:7F:75:61:1D:2D:51:84:43:3F:AB:00:5D:F6:46:2E:F3
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       03DC745C44A09C5CE58CE4E455402A4D144099A5
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32322d3232203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:54 +0000
ROA not before:           Sun 28 Jul 2024 18:48:54 +0000
ROA not after:            Sun 27 Jul 2025 18:53:54 +0000
asID:                     53217
IP address blocks:        177.70.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dc:74:5c:44:a0:9c:5c:e5:8c:e4:e4:55:40:2a:4d:14:40:99:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:54 2024 GMT
            Not After : Jul 27 18:53:54 2025 GMT
        Subject: CN=5E21F03F7F75611D2D5184433FAB005DF6462EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:54:e3:e5:86:7d:f9:9b:e4:0a:67:2a:e3:
                    50:39:a8:a5:31:5e:a4:8a:bd:ab:14:31:d1:06:6d:
                    5d:18:f3:4f:33:63:ab:ff:91:35:13:e3:01:4b:82:
                    16:9a:32:65:c5:6d:ff:31:6a:12:94:f8:57:17:30:
                    88:61:a9:7b:47:a4:fe:25:d5:b9:28:55:3c:45:d8:
                    95:07:53:77:2c:02:2f:9f:d0:d6:04:fa:16:f6:ff:
                    2a:95:d6:ad:a1:3e:32:39:44:f8:8e:b4:c2:3c:c7:
                    6f:8e:dd:85:72:01:3a:20:97:95:c7:01:ab:8c:02:
                    1e:cc:c8:4d:40:c0:47:08:56:66:f5:a5:7d:44:67:
                    89:10:c8:31:44:75:1b:17:ea:c4:e6:67:55:11:58:
                    d9:14:17:b8:e0:7f:8b:f4:e3:2f:d5:37:97:51:2d:
                    57:8d:99:34:5e:83:ba:ab:28:88:ae:26:90:72:3a:
                    ae:7e:b2:4e:94:42:b2:57:7f:e3:97:25:53:5a:8f:
                    d5:67:5b:00:0b:05:75:88:36:d1:5e:45:c3:d4:e0:
                    4f:aa:97:b0:ca:bb:29:3c:39:70:7a:0f:cc:af:c4:
                    e9:b0:bf:f3:64:d5:33:53:c9:65:f6:ce:25:30:b0:
                    c0:29:80:24:e5:22:1b:ce:06:4b:bc:41:b4:a9:65:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:F0:3F:7F:75:61:1D:2D:51:84:43:3F:AB:00:5D:F6:46:2E:F3
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3231362e302f32322d3232203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:94:4a:17:fa:03:ca:2a:9f:52:5e:66:9b:6f:5f:c5:a4:
         e7:1a:0d:3e:0f:00:3a:d9:24:f9:8f:88:fa:e1:2b:06:4c:79:
         a8:73:c7:7e:4a:cf:f6:ff:63:bf:11:56:af:43:66:65:6d:39:
         92:b6:c3:00:92:31:00:3a:8f:c6:75:f6:3c:7a:20:e8:62:69:
         33:61:cd:16:5a:f4:33:02:b1:25:89:88:39:48:8b:02:3f:7a:
         2e:54:c2:6a:ae:ff:70:07:24:e7:4f:97:d5:ea:64:a4:da:dc:
         c0:3a:fa:9a:17:e3:19:2e:05:c8:89:0f:9e:80:52:29:a1:3b:
         53:a5:5f:e9:a5:31:bd:c1:7b:c9:fc:c1:8b:0f:15:1c:5f:1b:
         fd:6b:af:0b:20:f7:aa:32:83:b2:f9:39:3f:6e:67:13:3e:84:
         1e:ef:15:a3:6f:e8:84:84:62:e4:7d:d5:34:7f:fe:05:30:e9:
         3d:e1:04:7e:97:97:55:c2:e4:28:99:3d:30:71:ca:4e:6c:0d:
         d4:a3:76:86:41:fa:c7:35:86:25:60:cc:64:b3:3c:4c:cb:35:
         76:4f:d1:d9:08:81:de:66:98:c8:e5:1b:9f:2e:bb:37:d0:fb:
         e1:48:78:13:0c:8b:a7:95:22:70:36:76:70:bb:44:ae:0d:e7:
         f3:4d:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:27:57 2025 by rpki-client