Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137322e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          sXxfnADmpgs1XKsFXKcQhTB2YWw27YF/j53IQ8+tOUM=
Subject key identifier:   23:17:17:A9:77:84:A4:2B:0F:C6:17:4F:5D:2E:B7:8A:33:B6:92:62
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       620A4E7D05EE924F4BD2726FA10E6C4D3270339F
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:06:00 +0000
ROA not before:           Sat 06 Jan 2024 18:01:00 +0000
ROA not after:            Sat 04 Jan 2025 18:06:00 +0000
asID:                     52580
IP address blocks:        179.191.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0a:4e:7d:05:ee:92:4f:4b:d2:72:6f:a1:0e:6c:4d:32:70:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 18:01:00 2024 GMT
            Not After : Jan  4 18:06:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:71:7e:6b:4d:81:75:f0:c8:50:2e:f7:45:
                    39:a4:fb:aa:7c:c0:40:d7:d1:87:2d:04:6d:4e:09:
                    e6:75:80:8d:a7:7b:d9:37:a2:9f:6d:0f:88:1b:d6:
                    8a:1b:d6:9c:3a:df:35:44:38:b0:37:7e:14:20:08:
                    40:68:2a:ce:a0:51:ea:f2:7b:12:64:66:e7:49:59:
                    ff:7c:8e:4c:53:05:df:f0:23:6d:b3:1b:3c:29:9b:
                    b1:94:08:52:57:81:5d:22:7b:6f:37:d4:d7:5d:e3:
                    bc:0b:3a:15:26:68:59:12:a8:39:4c:01:c8:82:3a:
                    c5:9a:d9:e1:aa:69:6a:7a:97:5d:1c:84:69:e3:2e:
                    88:78:b5:a2:b5:de:a1:d2:5f:62:f2:c6:4e:0f:14:
                    c2:07:a8:e4:d1:12:3a:24:d8:9b:ed:e2:8b:05:07:
                    b1:06:74:10:78:76:c2:b4:87:c6:ce:e9:87:98:bc:
                    90:50:91:b0:34:4c:99:e8:98:a4:06:e9:66:7a:ae:
                    fa:fc:c0:8e:dc:7e:8c:bf:b1:88:c7:f0:d8:e5:6a:
                    38:bb:28:51:9d:11:67:5f:89:98:eb:7b:7d:07:85:
                    aa:61:10:dd:db:6a:c2:bd:9f:4d:bd:d7:23:81:cd:
                    3c:2e:46:8d:9e:67:5e:7a:bd:69:f2:cf:8c:6e:09:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:17:A9:77:84:A4:2B:0F:C6:17:4F:5D:2E:B7:8A:33:B6:92:62
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137322e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:79:ab:e0:24:db:42:f5:25:60:1d:5b:50:46:34:5e:7e:7c:
         1d:52:2c:5d:00:24:2f:dd:63:e6:02:e2:c0:05:ab:cd:e1:85:
         3b:c0:38:3f:3f:b7:5e:ec:47:4f:92:a6:3b:09:be:82:4d:89:
         1d:e4:33:f0:59:b0:f7:29:29:66:e1:dc:ea:d1:62:0c:e4:0e:
         05:79:21:08:96:cc:33:03:a8:9e:92:e7:1c:13:11:93:90:14:
         85:57:72:68:ff:bb:ae:e1:e5:26:ee:46:45:02:b0:a6:65:9e:
         ea:b4:07:68:0c:1b:9d:31:2b:59:8e:0d:3e:4a:ee:20:46:f0:
         c8:89:71:17:14:57:96:73:da:1d:32:33:5d:dd:22:f4:e9:69:
         64:ec:3e:3d:11:29:f5:0e:7a:ca:76:44:e9:3c:b1:73:c6:24:
         19:2b:45:8b:16:54:5c:0c:61:1f:85:4b:e9:be:fd:30:1a:36:
         48:1d:e7:a0:f5:15:29:8c:9b:fd:73:8f:73:43:73:b6:e0:81:
         66:2c:c2:21:cc:5b:30:41:c4:f7:19:2e:16:e8:9e:08:64:89:
         bb:87:88:ca:ea:9b:11:8a:9c:2f:99:c6:ff:0c:e7:1d:a8:0e:
         a3:e0:35:67:00:37:e5:31:06:93:64:25:84:fb:fd:11:22:3b:
         3b:19:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org