Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136322e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ZEUfhNFtoK4X+1qptHevRc6A7K272ks6D52Dhng6YL0=
Subject key identifier:   D1:F8:03:24:6D:E1:49:5B:28:BE:97:96:E7:9B:2D:46:D5:9B:2B:34
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       57193DA370AE2E10A6FF8AB3F9FFE27ED187F0D4
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:14:04 +0000
ROA not before:           Fri 14 Feb 2025 19:09:04 +0000
ROA not after:            Fri 13 Feb 2026 19:14:04 +0000
asID:                     52580
IP address blocks:        179.191.162.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:19:3d:a3:70:ae:2e:10:a6:ff:8a:b3:f9:ff:e2:7e:d1:87:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:09:04 2025 GMT
            Not After : Feb 13 19:14:04 2026 GMT
        Subject: CN=D1F803246DE1495B28BE9796E79B2D46D59B2B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:3f:85:7c:9e:04:69:67:03:e7:ff:fd:99:
                    e1:b3:00:af:b5:67:86:5b:16:25:33:c1:ed:13:4d:
                    d6:ff:6a:f4:76:8f:c5:7b:7c:c1:ef:bd:68:0d:73:
                    7d:e4:98:b1:4b:f4:ca:d2:82:21:36:30:9d:8f:a7:
                    d9:1f:f7:34:e4:eb:8b:a2:37:0c:8e:4b:cd:7c:cc:
                    7e:87:e1:1b:00:1a:98:b9:b1:48:92:8f:87:2b:a2:
                    7c:c8:ec:40:ab:8c:4f:d9:1a:7d:81:a7:a2:4b:7c:
                    09:9f:91:c9:ee:8e:9c:0e:3d:6c:f8:e5:c6:c0:1a:
                    ef:8a:e6:33:ba:44:c1:13:67:f6:a4:b5:c1:e8:07:
                    25:4f:fb:04:59:d8:d5:6f:0c:b3:4a:d4:a0:3a:92:
                    35:0c:c7:62:2f:a2:0c:be:d4:35:97:e4:71:71:84:
                    2f:04:8a:22:e0:88:f3:28:77:3b:18:c5:0d:4e:34:
                    fc:29:7e:e0:59:3e:c6:04:af:cf:30:88:58:7a:db:
                    39:8c:26:1e:44:23:ff:c4:0e:07:79:e3:d1:65:7d:
                    28:b3:4f:17:2a:d2:a0:bd:1e:b9:26:32:32:9c:62:
                    bc:5f:2a:f6:0b:81:a6:f3:30:4a:e1:c5:9b:7e:94:
                    09:6f:80:24:73:09:61:a3:10:d3:ab:b3:90:a9:a4:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:03:24:6D:E1:49:5B:28:BE:97:96:E7:9B:2D:46:D5:9B:2B:34
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136322e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:a3:46:dc:78:fd:a5:45:3f:f2:54:88:5d:d6:ad:84:e7:
         85:8c:c6:d1:e0:f3:8e:18:3a:ff:14:d1:d9:c4:e8:56:82:75:
         e7:34:cd:ae:95:c5:b4:d0:f0:68:9d:02:b5:87:a3:36:8c:7d:
         05:34:57:4b:59:66:69:92:1f:15:c3:a4:3b:be:3d:79:75:a8:
         0e:38:3e:7b:68:d8:84:f2:ef:46:13:79:bb:1d:ac:a0:b2:f9:
         45:8e:eb:bc:f5:12:a8:be:3d:0e:6c:f0:06:6b:8d:80:90:d2:
         74:0b:35:66:12:8f:b1:9d:db:50:92:30:27:2c:ab:1d:16:ae:
         8a:88:5a:54:34:64:0d:cf:03:eb:bd:8d:8a:88:bb:cd:b1:db:
         48:0e:44:49:31:5a:be:fb:35:c9:f8:34:1a:e4:49:67:74:21:
         30:ff:58:52:da:93:de:df:b4:52:d0:5d:be:34:c5:07:30:6a:
         a3:03:9a:0e:9f:fb:9e:ec:7a:3c:58:df:ab:4d:37:23:dd:d0:
         3e:69:07:c1:6d:0c:19:5f:7a:b4:35:16:97:a1:c2:63:a1:2a:
         28:88:ac:57:03:50:ab:77:9c:a8:0f:dc:77:e9:e8:0a:9b:ca:
         88:2d:2a:c4:cf:b3:75:3d:f9:66:8e:a1:7b:21:c8:fd:f8:7a:
         70:9a:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:49:40 2025 by rpki-client