Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136342e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136342e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          GsuRzbnT3LNf7CpSAh0XyBiBUqY3usaS+tsDr6Xg4vY=
Subject key identifier:   A1:12:7E:BE:C9:28:CC:6C:97:60:5E:AD:D2:CE:63:68:A3:2D:24:00
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       48CAEC2356D609588D5AFF3BEA5997D45689E76F
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136342e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:14:22 +0000
ROA not before:           Fri 14 Feb 2025 19:09:22 +0000
ROA not after:            Fri 13 Feb 2026 19:14:22 +0000
asID:                     52580
IP address blocks:        179.191.164.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:ec:23:56:d6:09:58:8d:5a:ff:3b:ea:59:97:d4:56:89:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:09:22 2025 GMT
            Not After : Feb 13 19:14:22 2026 GMT
        Subject: CN=A1127EBEC928CC6C97605EADD2CE6368A32D2400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:bb:11:b4:ed:7a:c6:90:98:92:89:cb:1f:
                    34:08:0a:7a:74:4b:59:2c:21:65:6e:5a:6b:9e:7a:
                    03:07:93:2b:92:14:81:1d:2e:5a:c4:84:dc:4a:22:
                    43:1d:ef:08:c2:26:49:1d:08:a9:3c:77:bb:31:aa:
                    27:1d:55:09:5a:4c:55:e7:f0:41:5a:b5:bd:54:18:
                    08:8f:c9:54:86:78:ab:d4:0f:e7:1f:04:d4:07:36:
                    2f:72:da:31:83:10:12:5c:f5:3f:30:ff:9b:6c:50:
                    7f:4b:db:70:46:bf:5c:60:30:13:b2:d1:20:82:1a:
                    e1:0d:8b:b2:f6:be:17:e2:74:3a:60:f2:8e:70:3f:
                    e4:87:b4:bd:a9:01:d9:93:cc:7a:29:2e:b6:94:6b:
                    09:21:31:b8:e6:15:e0:7c:9f:bb:8e:3f:62:29:a1:
                    2f:92:53:cb:4d:ae:1b:45:db:8a:80:4c:1a:c1:aa:
                    d5:e2:73:42:62:38:7f:7b:16:38:59:12:03:c5:76:
                    b6:6c:d0:ab:89:84:4d:22:a8:ff:a8:36:87:d6:f2:
                    06:8d:ea:3e:05:7a:fa:06:68:cb:c7:28:cb:0a:f8:
                    92:48:9f:c1:a5:96:e6:d4:f2:cc:7a:97:05:03:e7:
                    29:8e:04:5c:79:84:da:46:b5:5b:f5:22:d4:a4:9a:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:7E:BE:C9:28:CC:6C:97:60:5E:AD:D2:CE:63:68:A3:2D:24:00
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136342e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:82:6a:00:35:ad:4b:42:27:74:66:e6:84:56:ff:d8:80:
         4e:d6:2c:0f:9a:8c:f3:ad:43:13:e6:05:57:9c:d3:eb:7d:58:
         e8:b1:ef:37:ee:e6:39:9c:f4:17:2b:9c:d2:ab:91:3d:b8:db:
         1e:29:c5:34:87:ed:cb:f0:83:63:da:d7:5e:e9:5d:8c:85:76:
         bf:37:ca:ef:77:e3:75:91:31:c0:f1:f9:30:df:15:e4:e6:ad:
         65:7b:2e:e0:16:27:4f:7a:9b:51:07:a9:76:7c:aa:9d:58:f3:
         59:d9:0e:50:33:5a:c0:5c:94:34:e3:d3:38:37:e8:f5:0d:c7:
         f4:66:aa:0e:f0:fd:c6:74:ad:58:8b:78:e6:cd:dd:42:60:76:
         b1:67:89:7d:41:eb:ba:a3:ae:d0:ef:77:b8:f7:a3:28:c4:35:
         93:08:36:1a:8b:15:7a:5b:33:6a:7c:9d:ca:a4:8e:6f:2a:6f:
         01:2e:08:e8:bd:35:93:bc:95:32:31:59:42:76:70:b5:d6:4c:
         e5:17:0a:7a:e4:d7:ea:4d:28:db:f3:ba:75:85:77:3f:13:df:
         61:2b:e8:84:48:f5:22:6c:6c:a3:93:94:40:f4:96:dc:f3:59:
         55:0b:ad:a4:57:23:94:44:57:a5:10:69:63:45:76:2d:ed:f7:
         06:9e:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:06 2025 by rpki-client