Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          rbSis19uhhjXXNTPLKTTI4YypUssWS02fjUIG5WFuuY=
Subject key identifier:   3E:50:95:53:35:51:68:40:AE:1E:EB:9C:3B:E0:05:03:3F:D5:6D:A7
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       5F383008734C1AA9E400DA22B435EB31315CAF23
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:14:28 +0000
ROA not before:           Fri 14 Feb 2025 19:09:28 +0000
ROA not after:            Fri 13 Feb 2026 19:14:28 +0000
asID:                     52580
IP address blocks:        179.191.165.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:38:30:08:73:4c:1a:a9:e4:00:da:22:b4:35:eb:31:31:5c:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:09:28 2025 GMT
            Not After : Feb 13 19:14:28 2026 GMT
        Subject: CN=3E50955335516840AE1EEB9C3BE005033FD56DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:0c:b2:ea:96:bb:cd:be:79:f1:37:68:16:
                    a3:18:29:43:e9:91:f6:3e:93:88:22:98:3c:ff:f1:
                    f4:72:78:ae:a2:fe:26:9c:a2:f4:ed:19:61:41:68:
                    80:7b:d5:1f:88:4a:6f:ca:ac:20:51:e2:3b:68:45:
                    56:99:c0:69:63:c0:1b:5b:73:64:57:69:89:92:fd:
                    e8:da:ee:24:72:78:5d:8d:89:6e:49:2c:85:95:7b:
                    05:61:25:52:a1:6a:ca:56:43:45:b6:b0:79:f7:24:
                    29:af:37:95:1b:ae:b1:4b:bc:78:f5:e5:10:c9:1d:
                    c6:d9:68:e8:c3:b3:0f:03:4d:73:cd:dc:f7:4d:82:
                    8e:5e:5b:db:33:e9:5b:9b:62:62:f5:3b:bc:2b:9b:
                    77:dc:8a:79:a8:d0:5e:bb:6a:cc:41:82:88:c4:e4:
                    25:22:03:b4:fd:69:63:b5:9e:93:56:33:c0:82:1d:
                    2a:79:ad:b6:91:c2:25:9e:30:79:62:3b:35:eb:9b:
                    6d:dd:d6:d5:11:60:58:29:78:a5:a9:34:a6:d1:44:
                    35:bd:f7:b8:2d:0a:b3:e1:a8:81:9a:56:a2:fe:3f:
                    66:67:23:25:c2:a8:bb:e5:2a:e8:75:6d:91:d6:3d:
                    4b:52:ce:0a:6b:60:14:8c:fd:d5:6f:09:73:e6:7f:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:95:53:35:51:68:40:AE:1E:EB:9C:3B:E0:05:03:3F:D5:6D:A7
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:0e:b0:c3:d2:1a:e9:bd:48:d0:30:e9:93:0c:5c:8f:72:
         79:3a:a6:da:e5:b5:65:0a:e0:90:16:59:3b:07:1e:6f:94:30:
         13:26:2f:46:1e:3a:d2:fc:48:e9:62:17:18:11:df:fe:86:33:
         1e:63:ca:41:a8:88:5d:9e:35:67:ca:b8:da:fa:fe:b8:15:4b:
         c9:b9:da:79:97:8c:dd:a7:0c:69:8d:3c:4c:fb:4b:be:fb:4b:
         9e:53:4b:6c:fe:d9:8e:fb:74:81:9b:8d:a9:56:f0:72:f5:8d:
         19:d0:1b:75:88:b6:dc:2d:7c:ac:54:57:b3:4e:1b:f3:b1:f0:
         8c:5d:77:ab:06:9f:60:13:59:f0:74:57:fc:8f:1d:99:64:d9:
         dd:8f:70:88:08:82:32:15:17:e6:31:d1:22:03:1f:20:1c:e3:
         b2:86:bc:e5:2d:62:d3:1a:c5:78:ae:01:c2:60:3c:eb:a5:1f:
         4a:d1:99:7c:1f:d9:ba:e3:b3:d5:46:7d:86:8b:1a:2f:39:92:
         7a:e1:98:35:bc:b2:ab:66:fa:be:eb:6e:ee:3f:c3:bb:20:0b:
         a7:28:0d:1b:ae:37:71:bb:4c:83:ba:e6:07:51:11:b2:88:a8:
         b1:ca:a0:7b:82:b0:0b:43:13:e7:06:ce:3d:f7:88:5f:1f:6c:
         35:86:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:19:38 2025 by rpki-client