Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137302e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          b2VEMSxExQqnAHloYwJZAhkP2hCnXdzx8Q3hz9dL7OE=
Subject key identifier:   1D:34:8D:5E:BA:6A:0A:37:CC:BF:23:9D:0C:9B:A8:22:19:40:68:C5
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       2958A0BDFFFFBA04D908AE410F8925160350C535
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:15:04 +0000
ROA not before:           Fri 14 Feb 2025 19:10:04 +0000
ROA not after:            Fri 13 Feb 2026 19:15:04 +0000
asID:                     52580
IP address blocks:        179.191.170.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:58:a0:bd:ff:ff:ba:04:d9:08:ae:41:0f:89:25:16:03:50:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:10:04 2025 GMT
            Not After : Feb 13 19:15:04 2026 GMT
        Subject: CN=1D348D5EBA6A0A37CCBF239D0C9BA822194068C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:a1:80:84:f5:cc:2e:aa:05:cc:27:c3:e7:
                    e1:12:39:d3:a7:d7:6b:31:fa:3b:4d:ba:f8:7c:39:
                    b1:36:78:31:1c:fc:ae:10:2e:5c:9a:9e:9d:ef:70:
                    87:a5:81:99:09:73:e3:83:bc:ee:29:1a:80:b6:b5:
                    23:30:6a:30:f9:75:a3:06:93:ec:08:b5:c3:92:a0:
                    55:3a:74:cf:03:05:d7:5b:81:5e:df:a0:8e:f3:8f:
                    4b:37:45:6d:16:d7:ae:39:b9:ca:dd:6f:c8:85:ed:
                    b4:45:80:cf:a3:6e:8b:ac:a8:6c:ba:1d:5a:de:82:
                    68:79:4d:f2:6a:1c:c3:d4:2f:35:4f:96:53:87:84:
                    c3:53:e6:e4:8a:f6:2c:1d:9f:fa:22:a5:49:2c:44:
                    59:1d:e4:ae:fe:ff:03:94:27:6f:be:b1:e5:de:d2:
                    9c:58:5f:2d:82:f7:1c:16:7d:2e:4c:67:1e:f6:d6:
                    6f:57:91:22:94:77:b2:92:44:d1:0a:71:cd:c4:0a:
                    cd:66:29:77:dd:31:56:2e:be:a5:2b:8f:9a:e8:2b:
                    4f:d3:80:a4:34:91:07:42:3e:8e:1a:a7:18:6b:8d:
                    de:0b:5e:0f:4b:fe:8f:99:78:87:41:c2:12:81:3b:
                    df:55:de:cd:6d:0c:c2:1c:5c:dd:60:f1:5f:27:f5:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:8D:5E:BA:6A:0A:37:CC:BF:23:9D:0C:9B:A8:22:19:40:68:C5
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137302e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:97:fb:e6:b3:b8:75:64:ec:af:2a:62:b8:01:31:ad:21:
         a5:1c:f1:31:6b:d2:cc:fb:98:eb:a9:25:e1:9c:9f:12:be:83:
         ad:93:5f:ed:95:3b:cf:e0:2f:72:d8:79:0e:2d:2e:67:fa:b9:
         19:a5:01:31:92:22:11:5f:50:88:50:9c:0d:f5:e7:42:df:1d:
         70:39:6e:7f:d6:ec:b4:4f:6e:ef:c3:97:44:ce:d7:1d:34:c1:
         1f:67:73:b4:5c:77:bc:45:90:d9:74:3d:53:62:4c:15:f7:9e:
         09:77:af:78:ad:d9:d0:ef:02:70:d7:b7:a1:6f:dd:9b:b0:fc:
         be:88:f9:b2:53:36:dd:45:bb:2f:1d:35:ed:8b:83:31:80:77:
         9d:a9:07:05:3d:43:3c:3c:99:c5:58:d6:80:44:f5:fb:7b:c5:
         86:6e:c4:3a:21:8b:23:a6:1b:c2:0f:ad:c1:4b:6b:7f:83:9c:
         f1:eb:76:6b:02:68:c8:3a:50:48:7e:4a:b0:80:25:c9:0c:d0:
         9e:f1:6e:8b:c6:2a:c5:82:60:d2:7b:30:14:3a:ed:a7:46:f1:
         19:2c:3f:19:23:82:23:2e:bf:58:0c:73:44:83:01:a2:e3:86:
         c4:e6:d3:d2:ea:df:24:22:50:1e:eb:73:59:48:a9:41:60:66:
         50:4e:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:24:11 2025 by rpki-client