Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3136392e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          +Cjgar1hMkljBY19v7WkYSXf2n+kl1gHRP069JW1gjM=
Subject key identifier:   90:8C:BE:5A:23:6E:C5:BA:D5:26:8E:AA:DB:BC:8C:05:C7:49:7F:EE
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       45177B6FEB46E03E21AD28B5BF250DF17DAD3932
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:00 +0000
ROA not before:           Sat 06 Jan 2024 17:59:00 +0000
ROA not after:            Sat 04 Jan 2025 18:04:00 +0000
asID:                     52580
IP address blocks:        179.191.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:17:7b:6f:eb:46:e0:3e:21:ad:28:b5:bf:25:0d:f1:7d:ad:39:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:00 2024 GMT
            Not After : Jan  4 18:04:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:f7:32:e4:66:7d:49:2f:b9:fa:24:b4:38:
                    b6:92:50:54:39:2f:3a:d8:55:d9:1b:ac:8e:d8:38:
                    f8:a5:a0:eb:1c:29:2c:54:24:22:5f:2b:6a:63:71:
                    fe:d0:71:c0:c3:df:b2:59:9f:db:12:eb:78:a6:84:
                    7c:9d:24:88:cd:e4:b4:14:e5:e1:a3:c4:a9:88:f8:
                    e3:c0:dd:d9:f2:42:7f:77:b2:2b:8e:bf:64:7c:c5:
                    4a:6b:c2:45:bf:7b:9d:04:3e:b5:71:0b:16:ee:89:
                    d9:ac:f0:31:7e:e2:2d:95:07:0f:2c:43:9c:df:a3:
                    e1:b7:63:2d:d7:3b:c5:44:fa:e3:39:21:4b:25:97:
                    81:63:3c:80:37:4f:f0:a5:c1:d5:59:1a:9d:66:53:
                    fa:23:0e:6d:f5:c4:c4:84:41:f7:ac:b1:41:ee:41:
                    4d:c9:3c:bf:9f:9b:7b:cc:6e:a6:54:96:91:48:5f:
                    a4:5b:84:3a:e2:24:3c:86:ad:6a:7f:92:c8:37:f2:
                    51:dd:ff:5d:cf:be:11:9d:76:34:2c:38:ed:1c:50:
                    18:3f:7c:64:bf:97:e4:d6:9b:45:e6:76:dc:5d:b9:
                    40:cb:20:d8:ed:f0:b0:60:5d:4a:36:48:c0:58:8d:
                    11:24:3f:e0:bb:98:f8:82:c6:fd:72:ff:32:89:32:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:BE:5A:23:6E:C5:BA:D5:26:8E:AA:DB:BC:8C:05:C7:49:7F:EE
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136392e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:b4:6e:79:b2:27:ce:87:e4:57:89:c3:af:f9:b5:d8:56:
         3e:6d:59:9f:b9:4a:1d:22:34:9c:e9:db:dd:a5:2a:31:79:0b:
         d7:6c:a8:76:e7:71:ce:4a:94:e0:61:bb:25:05:9e:0e:58:b5:
         68:4d:52:41:42:5c:e1:9e:f7:2c:6c:dc:e0:1c:8f:12:27:5c:
         8e:42:57:99:cc:7f:c6:10:b9:a1:ea:a2:99:ea:3c:78:9b:58:
         f7:ef:ab:b4:4e:d4:87:94:7f:ee:d1:9e:be:13:21:b0:34:66:
         f0:05:2f:bc:85:39:16:a1:59:1e:9f:85:79:ea:01:b6:f2:a3:
         24:7e:9b:68:16:90:ad:e1:ad:58:24:92:51:eb:3a:69:d7:1b:
         60:91:79:38:c3:b1:98:fa:59:1a:56:c2:be:22:8b:12:0f:06:
         6b:e0:d9:0d:8c:78:a3:a6:a8:07:40:d0:f3:ed:4a:ad:23:0b:
         b2:d0:6f:a1:3f:f5:cf:b6:47:07:d6:e8:1c:4e:30:fe:f2:ae:
         25:8c:6d:e2:05:4d:ca:e1:ea:c3:c4:25:62:53:57:c7:e3:56:
         1b:98:ce:ad:0c:14:5b:ee:0d:c7:d6:3a:d4:79:e3:b0:0a:83:
         69:33:9f:d4:f3:1d:bc:e2:03:6e:de:34:75:76:17:63:c3:bb:
         47:78:cd:07
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURRd7b+tG4D4hrSi1vyUN8X2tOTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDAxMDYxNzU5MDBaFw0yNTAxMDQxODA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNFOEY3MzJFNDY2N0Q0OTJG
QjlGQTI0QjQzOEI2OTI1MDU0MzkyRjNBRDg1NUQ5MUJBQzhFRDgzOEY4QTVBMEVC
MUMyOTJDNTQyNDIyNUYyQjZBNjM3MUZFRDA3MUMwQzNERkIyNTk5RkRCMTJFQjc4
QTY4NDdDOUQyNDg4Q0RFNEI0MTRFNUUxQTNDNEE5ODhGOEUzQzBEREQ5RjI0MjdG
NzdCMjJCOEVCRjY0N0NDNTRBNkJDMjQ1QkY3QjlEMDQzRUI1NzEwQjE2RUU4OUQ5
QUNGMDMxN0VFMjJEOTUwNzBGMkM0MzlDREZBM0UxQjc2MzJERDczQkM1NDRGQUUz
MzkyMTRCMjU5NzgxNjMzQzgwMzc0RkYwQTVDMUQ1NTkxQTlENjY1M0ZBMjMwRTZE
RjVDNEM0ODQ0MUY3QUNCMTQxRUU0MTREQzkzQ0JGOUY5QjdCQ0M2RUE2NTQ5Njkx
NDg1RkE0NUI4NDNBRTIyNDNDODZBRDZBN0Y5MkM4MzdGMjUxRERGRjVEQ0ZCRTEx
OUQ3NjM0MkMzOEVEMUM1MDE4M0Y3QzY0QkY5N0U0RDY5QjQ1RTY3NkRDNURCOTQw
Q0IyMEQ4RURGMEIwNjA1RDRBMzY0OEMwNTg4RDExMjQzRkUwQkI5OEY4ODJDNkZE
NzJGRjMyODkzMkMwRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvOj3MuRmfUkvufoktDi2klBUOS862FXZG6yO2Dj4paDrHCksVCQi
XytqY3H+0HHAw9+yWZ/bEut4poR8nSSIzeS0FOXho8SpiPjjwN3Z8kJ/d7Irjr9k
fMVKa8JFv3udBD61cQsW7onZrPAxfuItlQcPLEOc36Pht2Mt1zvFRPrjOSFLJZeB
YzyAN0/wpcHVWRqdZlP6Iw5t9cTEhEH3rLFB7kFNyTy/n5t7zG6mVJaRSF+kW4Q6
4iQ8hq1qf5LIN/JR3f9dz74RnXY0LDjtHFAYP3xkv5fk1ptF5nbcXblAyyDY7fCw
YF1KNkjAWI0RJD/gu5j4gsb9cv8yiTLA+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJCMvlojbsW61SaOqtu8jAXHSX/uMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzczOTJlMzEzOTMxMmUzMTM2
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s7+pMA0GCSqGSIb3DQEBCwUAA4IBAQAqtbRuebInzofkV4nDr/m12FY+bVmfuUod
IjSc6dvdpSoxeQvXbKh253HOSpTgYbslBZ4OWLVoTVJBQlzhnvcsbNzgHI8SJ1yO
QleZzH/GELmh6qKZ6jx4m1j376u0TtSHlH/u0Z6+EyGwNGbwBS+8hTkWoVken4V5
6gG28qMkfptoFpCt4a1YJJJR6zpp1xtgkXk4w7GY+lkaVsK+IosSDwZr4NkNjHij
pqgHQNDz7UqtIwuy0G+hP/XPtkcH1ugcTjD+8q4ljG3iBU3K4erDxCViU1fH41Yb
mM6tDBRb7g3H1jrUeeOwCoNpM5/U8x284gNu3jR1dhdjw7tHeM0H
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:33 2025 by rpki-client