Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136372e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136372e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          jimeSTkAKfWpVrDmbYui6D1LJ5H5myrgRoobX2xZM6c=
Subject key identifier:   60:A8:2E:E3:15:F3:0E:0D:0A:06:53:69:38:44:F8:F3:F6:46:EF:4C
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7826EDDD9C814C4EDDB3E58108BA8357DFE967AD
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136372e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:01 +0000
ROA not before:           Sat 06 Jan 2024 17:59:01 +0000
ROA not after:            Sat 04 Jan 2025 18:04:01 +0000
asID:                     52580
IP address blocks:        179.191.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:26:ed:dd:9c:81:4c:4e:dd:b3:e5:81:08:ba:83:57:df:e9:67:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:01 2024 GMT
            Not After : Jan  4 18:04:01 2025 GMT
        Subject: CN=3082010A0282010100CDEB90B4BF3364A0ECACFECE4C7385E2E96F05F45050493C4C1019D1804978EDFEB22E5F70B03E21888BF9A6A628018F4E49EC49CCCF8C9BAE170BBA275605A404C2E59A2004FBCA7C8FC576540815BE5468FA69FA8E7CD27A7E9D4E9ABB7B76DD985A8C8B5AC758A8751A2A6D064772621433F25AC890A105139B3AF724E41AB3D6E5AE9D7FE9F5DE7711D617A57B9ED399700AD8EC3114D64AAE00C7EA8D46922C7C7608A41B756B7569FF1FE54F79DB6BA760D704EA503721736295B6BD0B64847963915208451FABBB6319886901B95087E88659BBF475880C168D4E5DAA699B74A46F506F07B44DEECD85AD1E108E24C43677546254B7D887928431DFE10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:90:b4:bf:33:64:a0:ec:ac:fe:ce:4c:73:
                    85:e2:e9:6f:05:f4:50:50:49:3c:4c:10:19:d1:80:
                    49:78:ed:fe:b2:2e:5f:70:b0:3e:21:88:8b:f9:a6:
                    a6:28:01:8f:4e:49:ec:49:cc:cf:8c:9b:ae:17:0b:
                    ba:27:56:05:a4:04:c2:e5:9a:20:04:fb:ca:7c:8f:
                    c5:76:54:08:15:be:54:68:fa:69:fa:8e:7c:d2:7a:
                    7e:9d:4e:9a:bb:7b:76:dd:98:5a:8c:8b:5a:c7:58:
                    a8:75:1a:2a:6d:06:47:72:62:14:33:f2:5a:c8:90:
                    a1:05:13:9b:3a:f7:24:e4:1a:b3:d6:e5:ae:9d:7f:
                    e9:f5:de:77:11:d6:17:a5:7b:9e:d3:99:70:0a:d8:
                    ec:31:14:d6:4a:ae:00:c7:ea:8d:46:92:2c:7c:76:
                    08:a4:1b:75:6b:75:69:ff:1f:e5:4f:79:db:6b:a7:
                    60:d7:04:ea:50:37:21:73:62:95:b6:bd:0b:64:84:
                    79:63:91:52:08:45:1f:ab:bb:63:19:88:69:01:b9:
                    50:87:e8:86:59:bb:f4:75:88:0c:16:8d:4e:5d:aa:
                    69:9b:74:a4:6f:50:6f:07:b4:4d:ee:cd:85:ad:1e:
                    10:8e:24:c4:36:77:54:62:54:b7:d8:87:92:84:31:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A8:2E:E3:15:F3:0E:0D:0A:06:53:69:38:44:F8:F3:F6:46:EF:4C
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136372e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:29:f4:82:4a:8b:7b:05:26:78:d4:af:ce:14:78:f9:cf:cc:
         c7:f7:d1:43:5d:21:f5:59:31:b4:e5:c9:ad:b6:24:1c:ee:5e:
         8a:2d:f5:eb:3b:39:17:36:ff:a4:bc:07:47:61:4f:3c:88:1b:
         fe:95:36:f4:d1:6d:51:e5:31:cb:98:08:0d:8f:f4:52:aa:76:
         a7:4f:2c:23:de:57:24:63:71:29:22:d2:a8:a5:0b:77:b6:53:
         d7:a4:4a:99:84:28:fe:79:2d:c5:83:a7:54:df:d8:fd:88:10:
         8c:60:2b:31:9c:d0:af:70:93:63:f5:01:65:4b:40:43:ec:ca:
         16:31:d3:e8:d5:63:89:7c:2b:d9:29:73:5f:24:e7:78:94:12:
         99:a2:97:27:8e:34:2b:94:c8:89:20:33:b0:c2:06:61:11:7b:
         59:30:77:b2:91:0d:21:d3:7f:65:6e:39:e6:09:0b:a0:36:0c:
         cc:a9:53:73:db:89:f4:59:ec:1c:5b:e0:66:70:55:85:2c:81:
         d0:0a:68:92:14:ee:2a:79:55:de:5d:0d:64:f6:57:4a:3b:28:
         c1:25:b9:99:33:34:10:a4:1e:4d:de:dd:ce:1f:df:f7:c9:13:
         84:e1:f3:a4:be:62:3d:2e:c5:8a:cb:93:84:25:d1:2f:d7:78:
         fe:58:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org