Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          rONQljxjs/dwioOQP6r7JXh2CnSlNSIgbSEnqOlRgIc=
Subject key identifier:   C1:04:3E:66:FF:C1:79:C6:B0:CF:BC:75:CE:D7:AA:4E:A0:C7:41:3C
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       7B78E6C406174A2151587F4DC003EFED8FDF2C55
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:15:10 +0000
ROA not before:           Fri 14 Feb 2025 19:10:10 +0000
ROA not after:            Fri 13 Feb 2026 19:15:10 +0000
asID:                     52580
IP address blocks:        179.191.171.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:78:e6:c4:06:17:4a:21:51:58:7f:4d:c0:03:ef:ed:8f:df:2c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:10:10 2025 GMT
            Not After : Feb 13 19:15:10 2026 GMT
        Subject: CN=C1043E66FFC179C6B0CFBC75CED7AA4EA0C7413C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:a6:d7:33:eb:c5:b3:76:ed:01:2e:ab:96:
                    30:22:58:8b:35:a2:ac:1b:20:ef:c4:98:e5:93:06:
                    95:05:fe:9d:27:e5:77:23:85:71:2c:3c:92:37:a8:
                    c0:68:59:b5:96:6e:00:ca:8d:ff:b0:9b:03:77:e6:
                    54:d5:e0:42:e2:27:1c:ed:26:d0:01:b5:95:42:f9:
                    62:ce:d2:c9:a9:41:f2:89:90:d6:5b:e1:43:ec:6b:
                    78:01:1d:26:27:1d:d4:3f:1f:ee:b8:0f:84:b0:fc:
                    0e:28:1c:f1:97:84:63:a2:fb:38:88:31:fc:05:a1:
                    db:c5:5f:e6:35:af:01:49:d6:6a:89:fb:a7:e4:fc:
                    52:ad:aa:a1:0d:75:0e:dd:ef:b6:a1:aa:a3:96:54:
                    e7:5b:b0:25:4b:6e:49:10:b3:34:57:bb:84:35:3c:
                    8f:41:b5:55:3c:84:48:13:64:25:3d:0e:40:c8:3f:
                    1b:0b:6b:a4:72:71:4d:ec:a5:68:56:a0:de:eb:87:
                    63:60:b4:40:1a:a1:45:53:61:6a:e1:ab:6f:2d:99:
                    9e:af:ae:46:b7:4c:ef:41:8a:4f:4a:10:38:24:ac:
                    27:a4:d4:0e:25:0e:23:7b:ec:ea:4d:58:5b:f5:be:
                    ba:f6:43:19:9f:9d:68:a7:78:c2:fb:a7:b3:8c:ad:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:3E:66:FF:C1:79:C6:B0:CF:BC:75:CE:D7:AA:4E:A0:C7:41:3C
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:a8:b6:c4:77:c5:e0:7e:5e:d9:22:ac:4a:4b:4c:b4:a2:
         27:89:d7:ca:d3:a7:bf:bc:a9:70:f3:91:c3:dd:d7:56:79:23:
         17:65:1b:d3:2a:4d:53:94:53:18:da:42:34:0b:f5:00:ef:f1:
         38:60:d7:95:a8:67:c3:c1:9f:ee:56:63:55:ba:b7:4f:88:52:
         e9:f9:00:9d:41:b5:ed:1f:4e:48:39:9d:dc:4b:c0:bf:ff:1f:
         ec:85:92:e2:49:de:53:82:8e:0f:ea:1a:61:f9:af:e6:89:89:
         2a:cd:67:3a:f9:06:03:85:14:39:60:e5:be:7e:e4:2f:00:7c:
         a7:0b:a9:68:fb:22:0f:90:fc:6f:93:8b:2a:4d:c2:54:d4:8a:
         33:0a:60:0b:70:d6:22:34:c8:c1:cf:ac:45:6a:7c:6e:86:6a:
         e7:9c:b8:cf:3e:6d:ea:d3:13:b1:64:5a:ce:d9:61:6a:82:e3:
         9d:11:eb:a3:22:3b:66:52:70:04:17:a3:1c:11:04:42:97:ea:
         d7:bf:53:43:0f:3e:a2:d0:e1:3e:bd:36:df:1e:b4:5b:f1:0d:
         2b:0c:2e:d1:77:79:03:7a:49:c8:88:4c:e3:a2:61:03:42:64:
         39:f8:45:06:55:6a:6f:18:84:9c:6a:29:72:d8:2a:e7:75:c1:
         15:d5:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:21:34 2025 by rpki-client