Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          v8NrPIhvNMETV36zpYwBGlnShbX20FCBVDIwHvQHY0M=
Subject key identifier:   F8:0F:E9:31:7E:0F:0E:EC:B4:D1:2C:55:64:AC:A7:C5:A8:31:4F:94
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       2FEFBFF7B2E76215A44B5AB2B35CBF2442FD3B74
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:14:14 +0000
ROA not before:           Fri 14 Feb 2025 19:09:14 +0000
ROA not after:            Fri 13 Feb 2026 19:14:14 +0000
asID:                     52580
IP address blocks:        179.191.163.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ef:bf:f7:b2:e7:62:15:a4:4b:5a:b2:b3:5c:bf:24:42:fd:3b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:09:14 2025 GMT
            Not After : Feb 13 19:14:14 2026 GMT
        Subject: CN=F80FE9317E0F0EECB4D12C5564ACA7C5A8314F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:42:2c:39:28:81:6b:91:31:15:41:35:13:
                    f5:2b:c8:ec:e2:04:33:ca:a9:a2:3d:02:69:4b:cd:
                    5e:93:c2:9a:30:d7:6e:86:43:80:62:90:8d:78:75:
                    50:4f:ea:e3:9c:bb:fc:20:ff:5b:4b:95:95:bc:b6:
                    bd:0f:06:4d:24:cb:e8:3e:c2:7e:09:22:01:45:4d:
                    3b:7a:8d:8b:e7:c6:64:5c:d8:5c:18:0c:6f:02:7d:
                    45:3e:79:67:2c:67:28:8e:8b:52:07:e5:73:91:06:
                    44:32:51:bb:35:58:9f:c2:dd:06:94:a9:b8:8f:30:
                    99:df:43:82:9e:ab:6f:64:3b:16:20:9c:9f:4e:83:
                    89:c5:7e:21:45:60:e0:51:e4:0f:7d:5b:bf:b2:5e:
                    4d:24:9c:5e:cc:56:61:cc:0b:74:51:8e:f2:f8:5f:
                    1f:3d:7d:43:0d:8b:69:88:59:f5:fc:4d:0b:bf:f7:
                    12:bd:34:90:a3:2c:4e:92:24:f1:2d:d9:fd:1a:7d:
                    d9:f5:82:af:3e:63:0b:ad:7f:96:b1:59:46:29:8f:
                    1e:58:b3:94:aa:16:03:89:ec:45:50:5a:b3:46:53:
                    44:5b:f2:fd:8f:84:c5:95:70:36:f2:98:ea:c4:64:
                    ee:4e:20:c0:1d:75:d6:0a:98:01:2d:53:88:3f:df:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:E9:31:7E:0F:0E:EC:B4:D1:2C:55:64:AC:A7:C5:A8:31:4F:94
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:f3:b8:71:f5:6d:a2:ef:ea:70:5e:49:d4:f4:3b:c4:b8:
         26:6d:29:6c:02:75:c0:77:2d:7a:b1:a6:cf:38:67:cf:2c:56:
         5c:bf:cb:ae:5f:5b:b9:30:c3:0c:6e:03:86:ca:6c:7c:66:13:
         89:d9:07:cc:5d:0e:7c:e9:7b:bd:ed:7a:e0:46:24:56:51:60:
         5c:22:12:66:dd:61:e6:f8:9e:59:49:d2:9a:ed:13:be:ab:eb:
         ef:86:42:a2:c2:7e:32:3e:c1:68:f8:4a:62:51:48:56:20:5c:
         69:6e:96:26:43:f3:c5:3e:4d:68:66:9f:a9:44:46:dc:ea:fb:
         5a:1d:7c:a2:02:50:06:14:40:a7:13:ce:0c:e3:4a:af:a4:b5:
         73:c6:8a:8a:b7:4b:b1:61:ab:6a:9c:09:12:09:7e:b7:54:37:
         3a:0b:96:e3:89:eb:e7:47:1d:a7:59:f9:85:31:b4:9b:84:9b:
         7d:00:c6:6d:0b:7b:73:9a:c4:54:4f:22:38:0a:b5:ee:d0:09:
         49:35:86:61:df:e5:cf:8b:34:d4:8d:29:98:9e:79:9b:9c:02:
         8c:0e:1f:99:9b:be:64:a1:1d:95:e4:81:67:88:ef:bc:80:16:
         25:32:e6:1c:3f:07:d1:8f:18:bb:06:2f:d1:d9:56:f2:63:5d:
         1c:55:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:16:57 2025 by rpki-client