Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136362e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136362e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          CIKduRnfKxMQgFf0iY5ubrraVrvfR+wsA9KfT+QHDB0=
Subject key identifier:   65:C2:1A:64:DA:94:7F:9D:38:01:B1:EA:0D:C0:23:BF:9A:4E:C7:89
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7D97FAE18AFD3C491A9AA943510B2FFE37CCFCB4
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136362e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 30 Dec 2023 16:02:01 +0000
ROA not before:           Sat 30 Dec 2023 15:57:01 +0000
ROA not after:            Sat 28 Dec 2024 16:02:01 +0000
asID:                     52580
IP address blocks:        179.191.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:97:fa:e1:8a:fd:3c:49:1a:9a:a9:43:51:0b:2f:fe:37:cc:fc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Dec 30 15:57:01 2023 GMT
            Not After : Dec 28 16:02:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3d:f7:d9:32:84:fb:2a:c1:09:a1:8c:04:23:
                    b4:da:87:57:eb:02:18:b6:d0:a2:b8:12:54:3b:7a:
                    68:0d:a7:3d:30:d6:02:17:09:29:9d:c7:ee:09:78:
                    f4:53:65:17:77:b2:53:0f:85:ba:82:e7:61:a0:61:
                    9c:34:67:9a:f0:1c:27:df:e4:aa:66:80:24:d7:7f:
                    4e:48:4c:ae:0b:80:5b:9b:34:77:cc:b8:58:e0:01:
                    91:27:98:c8:83:d4:0d:01:d2:7a:80:e9:86:ae:b3:
                    a9:ca:ce:34:7d:1f:c3:e2:42:b7:9f:10:69:91:3b:
                    05:63:4c:3e:da:c9:44:ee:b0:42:61:64:c2:e1:2d:
                    da:e8:44:cb:e4:ad:17:de:d0:e7:1c:63:d3:ed:9e:
                    88:7a:26:9c:0f:88:5e:59:9a:6c:5c:37:ca:fb:7d:
                    cd:1a:69:5d:9d:0e:fd:2a:20:8d:d7:f3:a4:6b:7a:
                    f7:31:62:e0:a0:06:9f:fc:df:db:1a:77:26:9c:94:
                    ea:80:13:29:3c:48:e4:47:17:b0:07:cd:2d:6d:70:
                    64:26:04:15:a2:a3:65:86:17:38:55:8f:48:9d:4a:
                    8e:43:f5:fd:2b:12:d8:7f:ff:9d:88:0f:87:05:b5:
                    7c:4f:d2:0a:5d:12:85:98:1b:7c:15:af:4d:a4:e1:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:1A:64:DA:94:7F:9D:38:01:B1:EA:0D:C0:23:BF:9A:4E:C7:89
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136362e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:1f:65:1b:da:74:ac:ff:97:02:1b:32:9a:c5:4d:fc:28:
         bb:ca:aa:79:25:19:d8:7c:78:04:4b:56:ad:dd:22:79:5a:d6:
         7a:49:7e:93:3b:9c:c7:4c:b9:4f:eb:68:6b:1f:ae:fe:97:c7:
         13:21:f6:99:ff:e2:82:6a:1b:45:3b:f7:1c:a4:e0:56:4d:a9:
         d2:93:2f:1a:36:29:0f:b8:20:2e:55:6e:ac:4f:33:9f:56:c1:
         c6:10:a1:bd:52:2e:c6:0e:52:36:49:a3:99:02:3c:74:88:4c:
         52:e5:cb:28:b7:ee:30:88:8c:2e:0b:2f:6a:38:b6:0a:4a:e1:
         e8:b0:24:b2:25:b5:d0:e2:ae:f1:fc:46:08:f2:4f:81:be:8e:
         df:32:0d:2b:d9:de:1c:84:7a:fe:b4:cc:84:9c:1d:df:63:00:
         2b:56:92:3b:ba:0d:9c:06:2a:aa:ee:37:94:17:73:4d:e6:a2:
         ce:22:d0:8b:63:5a:55:1f:91:74:8a:75:4e:62:c3:9e:00:50:
         44:69:b8:6b:33:62:3b:6e:0d:34:59:2c:70:61:da:ee:5e:dd:
         3b:60:9b:0a:83:56:f8:7b:d3:9d:f3:35:f9:d9:c6:e4:e9:e0:
         26:d6:42:2b:e2:37:38:87:65:f1:ea:4a:5e:7b:55:21:a6:0a:
         1b:f5:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:51:29 2025 by rpki-client