Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32332d3233203d3e203533323137.roa
File:                     3138362e3233372e3233322e302f32332d3233203d3e203533323137.roa (raw, json)
Hash identifier:          aqOsLC15qHZub2HwksPqPyqh0A0L868MEwn3n1zkDy0=
Subject key identifier:   B3:31:F8:95:87:7D:5F:BE:01:23:CB:D9:6A:C6:44:82:34:B9:64:E5
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       7424DCF806EC5AD11F9CFCC449F257084EBA277D
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32332d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 18:53:54 +0000
ROA not before:           Sun 28 Jul 2024 18:48:54 +0000
ROA not after:            Sun 27 Jul 2025 18:53:54 +0000
asID:                     53217
IP address blocks:        186.237.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:24:dc:f8:06:ec:5a:d1:1f:9c:fc:c4:49:f2:57:08:4e:ba:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 18:48:54 2024 GMT
            Not After : Jul 27 18:53:54 2025 GMT
        Subject: CN=B331F895877D5FBE0123CBD96AC6448234B964E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:a0:9c:ab:7e:db:32:ab:72:e4:b3:68:c1:
                    fb:f7:66:a8:66:8e:df:a1:1f:6f:71:62:98:97:89:
                    82:c2:2e:62:99:3d:48:15:ae:a6:33:15:2a:a8:16:
                    e0:2e:d8:ff:b7:af:35:69:07:da:10:8c:98:d3:9a:
                    a6:15:01:57:d5:34:21:9b:34:5e:b6:2d:12:c1:34:
                    ee:65:8a:4a:a3:35:ea:be:34:0a:cf:48:82:fb:c3:
                    b0:12:49:d5:57:53:e7:62:21:1c:19:09:c5:23:25:
                    4d:c5:d2:18:7b:74:d3:a9:27:c4:92:a7:97:ad:25:
                    52:7e:0e:a1:30:f1:eb:fb:f7:80:9e:4c:54:d4:85:
                    82:2b:a5:d1:21:5e:e3:1a:99:28:40:34:db:64:80:
                    d9:5a:c9:e6:0b:c2:f5:9d:dd:36:ef:87:5e:56:e7:
                    5a:3b:11:98:6f:81:e5:57:04:f3:98:bf:82:22:6c:
                    ef:7e:15:7e:94:dd:15:5a:18:51:42:38:ec:47:b6:
                    1e:be:fe:bd:f9:82:69:0d:6f:a3:06:f6:db:68:c8:
                    a6:b9:24:1b:8e:45:46:72:31:1e:8d:7f:b0:a8:9e:
                    0e:68:b3:78:e6:ab:61:8e:aa:11:f3:7c:a5:58:c9:
                    c3:cc:93:ea:f3:3d:d0:1e:cf:b9:72:7e:7a:3b:7d:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:31:F8:95:87:7D:5F:BE:01:23:CB:D9:6A:C6:44:82:34:B9:64:E5
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3233322e302f32332d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:e3:54:aa:59:80:fc:39:9d:da:f0:d3:fe:98:9b:19:cc:
         7a:fe:82:f7:4f:30:50:62:7d:0b:7d:f8:7b:61:41:5f:88:83:
         c3:93:4b:cc:70:61:eb:02:5b:b6:19:af:29:1c:c0:b6:e3:34:
         09:27:4c:ff:5e:1d:28:dd:b9:3a:05:d2:09:27:d0:2b:27:8c:
         d9:d7:cb:df:20:da:b0:54:21:9a:dc:ed:c6:e1:ca:41:ea:ac:
         0b:82:f9:47:82:34:1e:5d:27:0d:44:d5:5f:db:36:65:f6:d4:
         ae:ce:3c:fd:4a:a8:06:fb:b8:cb:a5:e7:38:8a:5a:b7:32:b1:
         8e:f3:fc:0f:43:0a:69:ae:83:fc:99:53:2b:3a:25:ef:55:7d:
         5f:e9:bc:43:0a:56:23:f9:3f:a4:ec:09:a0:e5:fe:5f:d6:a1:
         de:f0:6d:6b:26:70:8d:02:48:12:fe:6c:41:74:93:fe:66:e3:
         20:60:8f:e0:6a:96:df:80:be:15:33:b3:1b:39:1b:62:cf:cf:
         a0:5e:68:c8:a6:fb:47:d7:92:5c:1e:a8:12:61:ca:9e:6f:c7:
         c4:14:7a:88:49:19:94:92:2d:46:f5:3d:c2:cf:0b:28:cd:f9:
         f7:36:39:b6:4b:bd:8f:ce:21:38:07:93:77:7f:ef:ed:ae:6c:
         7a:79:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:30:35 2025 by rpki-client