Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136322e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          lTG+34wcy/mB0WiFxGYL1kvALGn4gb7duTRwPrO+NOk=
Subject key identifier:   3A:C6:2F:68:C0:B0:CF:E7:E6:10:4F:E5:23:05:87:09:A6:F4:CA:1B
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       0CCA4CB608FDB2F78C06D4404C15B17C70F99135
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 08 Jul 2023 16:48:00 +0000
ROA not before:           Sat 08 Jul 2023 16:43:00 +0000
ROA not after:            Sat 06 Jul 2024 16:48:00 +0000
asID:                     52580
IP address blocks:        179.191.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:4c:b6:08:fd:b2:f7:8c:06:d4:40:4c:15:b1:7c:70:f9:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul  8 16:43:00 2023 GMT
            Not After : Jul  6 16:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:14:1d:44:f8:34:b5:8d:85:fd:2e:88:ab:
                    64:46:c9:3e:20:72:fa:01:09:81:1b:c3:2e:05:ad:
                    b2:4d:64:c1:45:0e:be:6e:e8:49:06:03:4c:b4:1e:
                    b1:9c:cf:3d:3f:08:86:50:06:c5:bf:f7:d6:28:21:
                    2f:13:72:e3:bb:81:51:d2:39:a5:a1:5a:5d:0d:b8:
                    d7:15:fe:cb:a1:96:64:be:42:c9:e1:6c:43:2d:88:
                    23:3a:a1:80:b1:50:79:9f:3a:53:4b:62:82:d6:38:
                    60:3c:c0:ca:6a:1c:03:23:03:30:a3:c4:60:a5:35:
                    34:0e:df:fa:f7:3b:46:73:cf:eb:7f:6d:c0:8d:1b:
                    b7:84:eb:a6:17:bd:5d:85:16:9f:ef:b0:b7:b2:2d:
                    c1:c5:1f:42:c2:01:dd:e3:07:3b:05:34:8d:e1:b6:
                    6f:3c:32:5d:ee:c7:5b:ce:7d:a6:19:f7:df:87:06:
                    3d:97:c4:46:f0:6e:82:7f:a4:ab:e4:33:bb:f8:e0:
                    cc:46:41:a3:b8:93:f9:54:49:4a:e2:2a:9b:60:1a:
                    4b:db:c2:72:ef:dc:72:5b:52:95:11:5c:13:f1:74:
                    8a:f7:62:ff:a5:47:39:3a:0e:a7:c5:cb:4e:fb:3d:
                    ad:c6:02:ac:23:a0:fc:bb:60:a7:a1:62:6b:df:7a:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:2F:68:C0:B0:CF:E7:E6:10:4F:E5:23:05:87:09:A6:F4:CA:1B
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:30:19:75:bf:84:23:b0:04:63:1d:9d:6d:6b:23:8e:c4:d3:
         20:f4:b0:be:c5:31:93:d5:e1:4a:03:ae:1c:90:b0:06:7e:ac:
         bc:7b:85:53:55:82:54:d6:ba:b9:0c:fa:6d:51:81:98:2d:48:
         0e:ad:f4:5f:fa:3c:b5:61:8c:fb:15:1b:d2:62:75:92:77:fe:
         ab:7e:c4:43:c4:99:69:1a:56:38:d6:e9:77:03:91:ab:3d:d1:
         f9:5f:03:98:0c:46:85:0e:9c:20:c8:03:ee:0d:65:f4:62:65:
         44:53:10:25:68:b8:f0:c6:19:aa:8b:38:d1:76:4d:e7:c7:f6:
         e0:65:7d:65:69:88:24:31:ec:13:43:43:8f:c8:05:61:ff:24:
         a0:7e:5b:37:d7:aa:91:89:4f:9a:e8:d3:6d:85:9e:6f:9f:ae:
         19:31:5d:f8:3b:7c:6e:a1:ea:c6:92:32:eb:f6:c5:89:93:6d:
         70:ba:78:ab:bc:e1:82:a0:e4:f0:8b:13:d1:26:00:3e:f9:99:
         96:29:6a:e4:ee:b8:49:16:be:92:4c:b8:44:97:de:29:89:b8:
         8b:01:51:c3:32:7c:3d:f7:e6:a6:7a:f3:fe:42:28:1d:04:ab:
         e0:66:11:c8:8e:a7:f1:67:00:49:6d:e2:3a:48:e0:5b:e1:f7:
         c3:d6:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org