Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136382e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          aGnnNYvVcjBaZQnrTNQloYrzz07GAX4kB6Pu+korCuU=
Subject key identifier:   70:C1:A4:16:9E:D4:C9:7B:DB:40:67:AC:D9:D1:79:77:B2:2C:3A:4E
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       53BCB52EB477251EA8DADC7D07EB8BF0C6DF3E53
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3234203d3e203532353830.roa
Signing time:             Thu 04 Jan 2024 23:22:00 +0000
ROA not before:           Thu 04 Jan 2024 23:17:00 +0000
ROA not after:            Thu 02 Jan 2025 23:22:00 +0000
asID:                     52580
IP address blocks:        179.191.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bc:b5:2e:b4:77:25:1e:a8:da:dc:7d:07:eb:8b:f0:c6:df:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  4 23:17:00 2024 GMT
            Not After : Jan  2 23:22:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:f5:93:30:7a:3f:12:55:4b:f3:ac:76:d2:
                    99:43:03:01:a5:2c:03:cb:bd:8c:55:83:0c:b0:1f:
                    08:7b:df:c8:fb:49:15:5b:7e:4a:f2:76:55:0e:87:
                    63:83:95:61:6d:0a:35:49:01:e4:14:b3:75:06:f7:
                    12:07:c3:5a:07:55:31:5a:46:85:bf:9d:b6:92:63:
                    d6:3a:d9:bf:39:bd:a3:ed:45:99:b4:d7:ce:be:20:
                    7b:53:d0:03:71:b1:cf:65:c7:7f:bf:d1:39:e5:95:
                    7b:89:f4:68:21:6f:92:6b:da:a7:dd:f7:b8:b0:fa:
                    89:9f:a8:96:5b:b0:d3:04:48:9e:4a:85:38:47:eb:
                    82:10:84:8b:05:6c:a3:db:d1:b6:1c:04:25:88:1a:
                    bb:08:d5:fb:78:3d:43:f9:24:56:12:a1:20:8b:c9:
                    59:00:9f:87:39:b0:52:c3:e9:fa:a5:35:f3:af:27:
                    bb:7c:87:ba:10:24:6a:62:75:f4:58:38:9f:ed:61:
                    ac:1c:32:ad:4e:5b:bd:a3:7a:11:f8:d1:21:49:af:
                    38:36:f8:8c:46:61:39:64:df:0e:a4:a0:23:59:9f:
                    fa:bc:19:e5:6d:a8:d8:64:27:b2:66:9f:50:bc:55:
                    76:42:4f:75:c1:ff:bf:4c:5c:86:0e:dd:31:a1:60:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:A4:16:9E:D4:C9:7B:DB:40:67:AC:D9:D1:79:77:B2:2C:3A:4E
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136382e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:b6:31:07:64:7a:13:ca:51:91:13:bd:f2:43:1e:c0:32:
         82:f2:4f:78:47:75:1d:1c:48:c9:60:97:d9:a0:a0:28:0d:4b:
         34:71:4d:6f:79:d8:69:8c:37:d4:8b:a3:8a:df:78:84:c3:24:
         a9:47:96:4e:75:4a:14:3e:95:cf:2d:ab:ed:f0:8a:63:42:48:
         7e:e9:65:33:f6:ec:4c:3a:30:aa:63:9a:4e:dc:f4:73:61:f2:
         41:32:fa:13:88:29:8d:8e:12:1a:62:6d:55:c4:ac:42:fc:f9:
         66:70:ad:d3:bf:21:65:b9:20:96:39:5e:8c:81:33:a8:ec:ce:
         48:35:18:38:71:76:07:c9:03:da:80:8e:6a:d9:79:d6:be:ca:
         10:48:10:e6:dc:a5:4a:2b:e4:0b:2b:c3:1d:47:2d:ba:63:f0:
         cb:5d:41:e0:72:53:d1:52:11:41:cf:63:2c:97:22:b8:43:ee:
         b3:01:e5:d5:6a:3c:10:0f:28:e4:04:71:07:c4:5f:e2:ce:09:
         3b:f5:91:67:6b:51:2e:93:1e:4f:9c:85:15:d3:03:6e:83:6b:
         17:98:05:dd:11:9b:e6:4d:ea:bc:7c:a9:c0:d0:a8:8b:87:5f:
         f7:66:08:b1:4e:12:3a:27:1c:a0:db:d3:eb:e9:2b:a2:7d:62:
         37:07:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:33 2025 by rpki-client