Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136352e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          AOozrB1OvR2LzRwV9ei6q0ltlbOQCpb+wcMeGdww+H0=
Subject key identifier:   09:BD:8D:46:CC:C5:6A:50:36:CD:41:CC:80:1E:47:72:20:E6:B8:79
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       2E4E59DD209CC9F282C6D0D5FB3370ED3B5B5C67
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3234203d3e203532353830.roa
Signing time:             Thu 04 Jan 2024 23:22:00 +0000
ROA not before:           Thu 04 Jan 2024 23:17:00 +0000
ROA not after:            Thu 02 Jan 2025 23:22:00 +0000
asID:                     52580
IP address blocks:        179.191.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4e:59:dd:20:9c:c9:f2:82:c6:d0:d5:fb:33:70:ed:3b:5b:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  4 23:17:00 2024 GMT
            Not After : Jan  2 23:22:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:54:12:71:74:67:f4:05:71:e4:ad:fb:cb:
                    5b:12:ce:eb:d6:b4:45:6a:6a:8f:91:7d:f2:0c:27:
                    21:07:f2:98:ef:3f:47:df:dd:17:8d:1f:08:b3:b1:
                    2c:ed:2e:70:96:b6:83:6e:cb:39:51:ec:3e:ec:b2:
                    44:03:f4:2c:2e:a5:cb:93:b5:14:14:70:c8:b8:2b:
                    de:84:ee:2f:49:6d:1f:3c:63:32:6c:02:53:8a:ab:
                    18:86:be:dd:b2:ae:ff:da:53:ff:e7:ec:22:52:2f:
                    8c:f9:da:2a:f2:e6:99:6e:60:06:88:36:6a:5c:2c:
                    54:50:f0:cc:14:0b:f3:7f:43:ca:45:0e:2c:30:e0:
                    fe:fe:f8:93:e9:05:fd:14:4f:26:70:4d:db:0b:6c:
                    37:2c:77:d6:76:05:53:11:b9:f2:58:c2:14:3b:b6:
                    c3:54:79:8f:ea:26:4f:03:d7:04:b8:05:a2:34:c2:
                    84:ca:95:e5:be:f0:de:6e:84:42:a6:09:da:d5:be:
                    4c:2c:81:f5:e5:26:b2:e5:b0:dd:ac:4b:54:fa:11:
                    b9:38:c1:87:5c:57:fb:e2:37:75:6c:0c:8d:7f:31:
                    d8:d5:65:72:14:96:5b:f4:fb:c2:2a:85:52:36:61:
                    8b:94:24:45:4c:6e:7e:99:ed:4a:5b:55:ed:f9:a2:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:8D:46:CC:C5:6A:50:36:CD:41:CC:80:1E:47:72:20:E6:B8:79
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:79:23:c3:a0:93:f3:4b:06:4e:1a:c8:49:ff:9e:5c:83:
         ad:e5:79:39:f1:59:01:34:16:08:82:ec:d5:de:35:f1:55:98:
         83:f1:30:8d:fe:70:1f:c3:15:e7:d4:38:03:74:b7:c6:2b:11:
         90:9c:ed:4e:37:59:5a:f9:09:e7:1b:31:dd:9e:b1:3f:97:5a:
         0e:74:b1:43:0e:d7:ef:de:ba:51:5b:a2:91:4b:df:ab:49:71:
         ef:d4:b8:65:eb:8a:ef:0c:95:17:9e:aa:04:38:ae:76:42:14:
         24:6a:f4:43:32:d0:fe:60:7d:ba:b9:3a:be:86:89:55:94:79:
         ee:1b:29:0e:dd:86:fa:d6:85:db:4e:72:1f:42:7c:c3:f6:70:
         52:7c:a6:ea:50:bf:e3:3f:00:73:12:e0:c8:93:43:c1:f1:63:
         a7:ae:69:0d:1d:ee:8f:00:eb:43:5d:49:62:7e:6c:b0:db:40:
         48:86:ac:9c:6b:d7:fc:b2:00:58:3d:12:23:e3:a3:5c:0d:f2:
         af:73:14:61:26:f0:a0:18:bd:07:8e:49:74:0e:56:6d:ec:47:
         50:2e:9b:95:70:70:97:6d:07:97:25:2c:3c:56:ae:22:38:47:
         a4:d5:a2:57:31:20:e8:50:e3:6c:55:3a:1f:44:e8:cc:ec:fe:
         80:58:0e:8a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULk5Z3SCcyfKCxtDV+zNw7TtbXGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDAxMDQyMzE3MDBaFw0yNTAxMDIyMzIyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NFRDU0MTI3MTc0NjdGNDA1
NzFFNEFERkJDQjVCMTJDRUVCRDZCNDQ1NkE2QThGOTE3REYyMEMyNzIxMDdGMjk4
RUYzRjQ3REZERDE3OEQxRjA4QjNCMTJDRUQyRTcwOTZCNjgzNkVDQjM5NTFFQzNF
RUNCMjQ0MDNGNDJDMkVBNUNCOTNCNTE0MTQ3MEM4QjgyQkRFODRFRTJGNDk2RDFG
M0M2MzMyNkMwMjUzOEFBQjE4ODZCRUREQjJBRUZGREE1M0ZGRTdFQzIyNTIyRjhD
RjlEQTJBRjJFNjk5NkU2MDA2ODgzNjZBNUMyQzU0NTBGMENDMTQwQkYzN0Y0M0NB
NDUwRTJDMzBFMEZFRkVGODkzRTkwNUZEMTQ0RjI2NzA0RERCMEI2QzM3MkM3N0Q2
NzYwNTUzMTFCOUYyNThDMjE0M0JCNkMzNTQ3OThGRUEyNjRGMDNENzA0QjgwNUEy
MzRDMjg0Q0E5NUU1QkVGMERFNkU4NDQyQTYwOURBRDVCRTRDMkM4MUY1RTUyNkIy
RTVCMEREQUM0QjU0RkExMUI5MzhDMTg3NUM1N0ZCRTIzNzc1NkMwQzhEN0YzMUQ4
RDU2NTcyMTQ5NjVCRjRGQkMyMkE4NTUyMzY2MThCOTQyNDQ1NEM2RTdFOTlFRDRB
NUI1NUVERjlBMjg5RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzO1UEnF0Z/QFceSt+8tbEs7r1rRFamqPkX3yDCchB/KY7z9H390X
jR8Is7Es7S5wlraDbss5Uew+7LJEA/QsLqXLk7UUFHDIuCvehO4vSW0fPGMybAJT
iqsYhr7dsq7/2lP/5+wiUi+M+doq8uaZbmAGiDZqXCxUUPDMFAvzf0PKRQ4sMOD+
/viT6QX9FE8mcE3bC2w3LHfWdgVTEbnyWMIUO7bDVHmP6iZPA9cEuAWiNMKEypXl
vvDeboRCpgna1b5MLIH15Say5bDdrEtU+hG5OMGHXFf74jd1bAyNfzHY1WVyFJZb
9PvCKoVSNmGLlCRFTG5+me1KW1Xt+aKJ0QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAm9jUbMxWpQNs1BzIAeR3Ig5rh5MB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzczOTJlMzEzOTMxMmUzMTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s7+lMA0GCSqGSIb3DQEBCwUAA4IBAQABHXkjw6CT80sGThrISf+eXIOt5Xk58VkB
NBYIguzV3jXxVZiD8TCN/nAfwxXn1DgDdLfGKxGQnO1ON1la+QnnGzHdnrE/l1oO
dLFDDtfv3rpRW6KRS9+rSXHv1Lhl64rvDJUXnqoEOK52QhQkavRDMtD+YH26uTq+
holVlHnuGykO3Yb61oXbTnIfQnzD9nBSfKbqUL/jPwBzEuDIk0PB8WOnrmkNHe6P
AOtDXUlifmyw20BIhqyca9f8sgBYPRIj46NcDfKvcxRhJvCgGL0Hjkl0DlZt7EdQ
LpuVcHCXbQeXJSw8Vq4iOEek1aJXMSDoUONsVTofROjM7P6AWA6K
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org