Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137302e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          lWzO0aiHWuOK8LCfzURradPh203TZIMe4OtwbmdZ+6Q=
Subject key identifier:   AC:4D:01:76:22:99:AA:04:59:49:A5:98:45:89:AB:B6:85:B7:AC:A4
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       363E4059D06EB40CA476D9F2C352178D70C6E621
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:00 +0000
ROA not before:           Sat 06 Jan 2024 17:59:00 +0000
ROA not after:            Sat 04 Jan 2025 18:04:00 +0000
asID:                     52580
IP address blocks:        179.191.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3e:40:59:d0:6e:b4:0c:a4:76:d9:f2:c3:52:17:8d:70:c6:e6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:00 2024 GMT
            Not After : Jan  4 18:04:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:88:f0:b5:af:6d:cc:6e:6b:85:e2:54:d8:04:
                    86:b8:a5:de:7b:6c:8c:b1:4d:35:97:ce:4d:5c:0d:
                    42:5c:9c:df:f7:17:35:64:dc:98:e9:98:c1:d1:c9:
                    dc:de:51:88:b3:73:bc:06:bd:d2:ca:6a:d4:09:3d:
                    71:9f:aa:bb:70:8d:70:9f:0d:93:e5:1e:d8:7b:47:
                    a1:7f:7c:50:91:54:70:ec:1a:fd:ec:a0:6d:74:8b:
                    ae:26:11:2e:23:03:25:ef:20:64:aa:50:0d:a0:30:
                    fb:f4:56:f5:4e:22:14:bd:c9:3b:30:e9:0d:1e:2a:
                    5b:ef:ae:23:cf:b0:7b:b7:13:5c:c4:25:e8:cf:d5:
                    64:e6:db:00:31:3e:c8:a0:68:5b:ad:4b:da:09:d1:
                    93:e5:ef:79:4b:ce:b7:ad:c8:67:17:94:bf:4b:3e:
                    4d:70:24:ea:54:f7:f6:62:24:c0:2b:97:52:7d:a7:
                    6a:e1:2d:63:a5:0d:17:4e:0a:6b:0a:6a:40:10:c1:
                    59:07:07:c4:d6:90:89:03:27:30:4d:71:a7:a4:69:
                    1c:1f:4e:87:cd:6f:90:55:b5:4e:f9:ee:cc:98:72:
                    41:7d:a6:1a:6a:4d:33:1c:16:9c:03:fb:07:fe:d2:
                    7b:af:1e:a4:6f:9d:c0:08:87:92:92:5d:18:0b:c5:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:01:76:22:99:AA:04:59:49:A5:98:45:89:AB:B6:85:B7:AC:A4
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:5b:d3:f9:3a:f2:34:42:9d:25:52:4e:d2:63:2f:e9:d8:
         be:f4:15:eb:65:47:78:e8:df:e1:d1:42:da:a1:24:03:d7:21:
         34:0e:c9:74:e1:43:69:c7:b2:82:b6:6b:3b:4e:3b:cd:48:b8:
         6b:f6:6b:a0:40:65:d9:96:17:db:c6:ad:ab:fa:90:ac:15:3c:
         88:e5:af:bf:65:1b:71:da:6f:37:74:d7:a9:29:06:ed:c7:b3:
         91:cd:65:65:68:7a:6d:89:cf:9c:13:ac:9d:4a:9f:53:24:1e:
         eb:6e:33:80:f9:14:cf:76:74:27:02:15:bd:93:39:62:2a:4e:
         29:80:99:3c:ad:5a:3e:d4:c3:8f:e4:3a:1a:87:1b:56:1e:00:
         55:b1:09:99:d2:39:50:5a:fc:11:55:16:ef:26:83:05:4c:94:
         b6:07:0e:30:4f:72:7e:81:d0:78:a8:e3:7e:72:6f:ed:6c:d2:
         97:0c:ff:f9:40:2c:78:61:34:67:b9:b1:46:0c:1f:86:10:37:
         82:d1:5a:a0:fb:15:53:11:4a:53:9a:a0:66:f9:62:b6:91:70:
         54:0f:1e:64:21:5e:95:f8:b4:7f:49:1b:a8:78:5c:18:ed:bc:
         d7:7a:ca:ed:a8:52:e0:b3:d3:ad:1f:5f:1b:63:70:e5:28:8f:
         9c:43:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org