Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32322d3232203d3e203533323137.roa
File:                     3138362e3233372e3233322e302f32322d3232203d3e203533323137.roa (raw, json)
Hash identifier:          pwh+DXfnUprlnPYzYhqGVMNn25HsJiLCEByOi6qUC7I=
Subject key identifier:   90:F3:A6:43:72:34:3D:46:59:BF:85:D0:9B:54:A1:E5:43:0A:2E:7D
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       0B1A055309D555F0C89D0D6AFCD5916BFA939A06
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32322d3232203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:48 +0000
ROA not before:           Sun 28 Jul 2024 18:48:48 +0000
ROA not after:            Sun 27 Jul 2025 18:53:48 +0000
asID:                     53217
IP address blocks:        186.237.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:05:53:09:d5:55:f0:c8:9d:0d:6a:fc:d5:91:6b:fa:93:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:48 2024 GMT
            Not After : Jul 27 18:53:48 2025 GMT
        Subject: CN=90F3A64372343D4659BF85D09B54A1E5430A2E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:11:68:3d:e1:b3:77:5c:d2:fd:6f:dc:ef:
                    53:1a:b0:57:57:e5:af:ce:33:98:55:91:2d:93:f6:
                    52:3d:8e:80:cb:48:b6:4d:40:8b:55:93:10:d1:be:
                    b2:f5:46:de:47:37:1b:f6:6a:68:75:5c:12:63:1c:
                    c9:e1:a4:7b:52:03:d4:2e:dd:50:80:f4:85:c8:7d:
                    4c:d1:0d:39:f7:27:b8:90:6e:0f:86:9e:74:25:2e:
                    91:25:15:43:f6:44:44:ae:a6:86:dc:b8:0d:0a:69:
                    53:c5:cc:1b:9a:b1:8a:1a:e2:ca:08:aa:b1:33:e7:
                    4d:44:6e:c4:10:71:4a:e9:05:19:64:70:74:de:bd:
                    dd:d8:00:3b:49:f8:7c:dd:28:e3:7a:89:f4:f1:ce:
                    c7:7e:b0:4c:ad:7c:52:98:66:b3:41:d4:64:2d:1a:
                    79:13:d6:dd:f4:fa:50:95:fe:dd:bd:b2:2d:d4:0b:
                    3c:a4:3d:58:80:2a:41:02:80:3d:28:42:ee:c1:b5:
                    d6:ab:0e:89:92:4f:63:b9:0f:10:f7:67:b0:65:46:
                    46:ad:f9:33:35:4e:36:26:61:cd:e0:f4:2b:af:66:
                    44:70:e1:63:f2:68:63:e7:f4:b2:d0:dc:38:41:40:
                    2a:57:df:75:c0:e8:00:b2:05:77:06:b8:2a:83:da:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:A6:43:72:34:3D:46:59:BF:85:D0:9B:54:A1:E5:43:0A:2E:7D
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32322d3232203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:e8:27:d6:5d:89:88:42:cd:dc:4c:e5:a6:90:e0:4b:ef:
         df:54:96:67:c6:29:39:c4:f3:21:fe:44:8f:72:0c:29:0f:d9:
         16:c7:7e:bc:48:45:4f:f0:82:d4:a7:ff:9a:e9:29:aa:15:96:
         ac:4d:ff:25:8c:c2:ea:33:54:4c:75:cf:98:03:9b:09:7b:65:
         83:fa:0a:80:bd:3e:6e:d4:2c:ea:ad:d8:de:58:d8:5f:a4:99:
         f6:7e:cd:14:70:92:9c:7d:89:88:f4:56:d9:66:08:ea:7b:35:
         af:ba:c0:ab:65:69:74:57:05:9e:b4:ff:df:3c:0f:d2:8d:e8:
         f6:bc:83:bc:48:ea:da:1c:8a:d4:eb:56:74:39:3e:d3:73:79:
         bd:fe:53:de:14:1e:30:3f:7b:64:e3:ed:48:f1:e9:a5:bf:a9:
         62:06:fe:45:84:18:69:16:57:33:fc:1b:dd:86:d0:e9:87:d2:
         92:36:99:9c:46:71:52:cc:2e:6c:3d:a6:02:26:7a:8c:78:bf:
         fc:6d:55:b5:1a:41:16:43:0c:dc:70:e8:7d:0d:b1:8f:bb:00:
         df:95:51:69:20:14:48:53:49:97:92:70:bd:15:52:ba:48:8e:
         02:f2:ab:20:24:af:ac:7c:c5:5e:8e:e6:a1:a7:49:b6:be:4e:
         e7:9d:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:27:37 2025 by rpki-client