Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136302e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          skxHWM/y+tQ6yigW/dGpafLA5Q+RVrgdHBJfEW612pk=
Subject key identifier:   F7:64:4B:CF:BE:34:DD:B1:B7:18:7A:E6:E6:48:C1:F0:35:3E:A7:AA
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       44C10C2D59E7B498FCB4D9F3F66ADFAE5DF57725
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:02:00 +0000
ROA not before:           Sat 06 Jan 2024 17:57:00 +0000
ROA not after:            Sat 04 Jan 2025 18:02:00 +0000
asID:                     52580
IP address blocks:        179.191.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c1:0c:2d:59:e7:b4:98:fc:b4:d9:f3:f6:6a:df:ae:5d:f5:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:57:00 2024 GMT
            Not After : Jan  4 18:02:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:3b:3b:f1:51:d3:0c:4d:1a:a2:3d:6c:6a:
                    02:34:6f:9b:cc:14:7b:2d:44:c5:9c:a6:62:47:f4:
                    86:2c:b9:82:03:ef:bd:53:ff:fa:4d:2d:0c:46:54:
                    66:2e:07:e3:40:ce:8e:5f:a8:59:aa:c7:fd:68:39:
                    eb:1b:c6:9e:e0:59:dc:a3:0c:c7:c4:50:37:69:17:
                    51:12:61:08:a2:df:75:4b:bb:e3:e1:bc:57:4b:e8:
                    a7:e7:07:e4:92:ec:6b:00:fe:a3:b5:71:c5:11:85:
                    e8:f6:3d:d1:ab:77:09:5a:84:d4:e2:be:8c:9d:c4:
                    98:e0:41:cc:29:2c:21:6a:07:a0:d8:00:b5:d8:88:
                    80:df:56:db:95:03:ae:ba:ff:27:93:ce:c7:f1:8e:
                    34:0a:71:2d:74:6e:d0:eb:a2:0e:fd:c5:8d:ad:6c:
                    05:86:d4:e0:ca:fc:66:d4:87:49:20:c1:86:c4:31:
                    08:bd:74:c8:51:66:a4:59:5c:b0:66:72:47:7a:c7:
                    67:71:7a:d6:67:5a:09:4a:b0:c1:f1:9b:f4:79:23:
                    e7:04:5d:ff:c9:cb:36:ec:fa:2d:7f:22:cd:37:e8:
                    58:c8:96:7e:e2:34:e1:92:ea:e8:b9:a0:2c:ee:65:
                    f4:ca:41:71:0e:4e:19:6f:55:87:ad:28:38:fd:f8:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:4B:CF:BE:34:DD:B1:B7:18:7A:E6:E6:48:C1:F0:35:3E:A7:AA
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:88:8f:c8:12:85:4f:76:c1:5d:96:38:aa:1b:7d:1f:05:
         3d:4f:1e:60:d3:fa:5c:c8:69:aa:8e:b4:f1:e9:9d:aa:d9:db:
         18:c5:7c:81:bd:12:b5:11:bd:0d:f1:aa:f0:f4:2a:be:88:34:
         53:72:cb:1c:84:e1:78:67:05:01:c2:0f:9d:b4:b3:73:15:26:
         e3:d7:f8:ea:f5:1f:3a:d6:4f:03:a4:ef:f2:9b:c6:c1:47:42:
         d4:87:07:ff:b4:ff:34:78:b5:36:9b:d0:9d:8f:ff:b4:01:e2:
         52:ee:4a:22:43:f9:73:48:e8:33:a5:86:e5:83:12:a9:68:16:
         ee:84:46:14:62:16:3c:58:c9:51:e9:c1:93:96:b8:f9:e1:b0:
         e3:93:9e:13:f8:93:71:5f:05:2b:31:08:17:8f:03:1c:33:40:
         e7:45:26:4f:0c:7e:c0:96:da:bf:ff:fc:f2:fc:40:57:c5:a3:
         04:18:dd:c5:e4:f0:84:f6:1e:40:22:a6:a3:e9:7d:ff:50:82:
         df:a9:bf:80:7d:1a:73:81:e5:0e:88:03:31:46:23:24:1f:7c:
         0b:00:8f:f2:c3:8e:43:31:24:2e:e6:36:01:ec:c5:82:c9:60:
         62:b4:17:e5:80:da:3a:62:71:a6:67:ae:79:31:40:5f:3e:db:
         cf:1e:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:54 2025 by rpki-client