Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137332e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          bqfU2YfbL86/46Ikjah3ubhbvCJdE+2bTSOsWfA3fYo=
Subject key identifier:   CD:C5:01:80:4B:A8:17:11:4E:33:C3:D1:58:C8:24:26:1E:29:06:8A
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       40B0A4067251031EB624AC857161AA043B33CED4
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 08 Jul 2023 16:50:01 +0000
ROA not before:           Sat 08 Jul 2023 16:45:01 +0000
ROA not after:            Sat 06 Jul 2024 16:50:01 +0000
asID:                     52580
IP address blocks:        179.191.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:a4:06:72:51:03:1e:b6:24:ac:85:71:61:aa:04:3b:33:ce:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jul  8 16:45:01 2023 GMT
            Not After : Jul  6 16:50:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:ee:d2:23:3d:5b:2b:1f:2d:4f:dd:2d:b6:
                    bc:4f:ca:e6:d7:ff:ee:2c:78:3b:97:57:0b:7b:16:
                    f2:e3:9a:af:67:7b:c6:44:d8:e5:c9:24:3c:5c:ff:
                    e8:2a:70:85:ef:c7:e5:08:ce:66:63:8e:36:5c:6e:
                    2b:29:b4:f4:16:8a:34:1c:81:57:4a:89:32:21:c5:
                    f6:f9:14:57:d4:ed:88:d8:5c:eb:7b:df:9d:89:ae:
                    12:c4:53:01:7b:44:8a:52:e0:98:82:d0:14:7d:f9:
                    80:83:27:cb:81:c1:52:2a:d1:3b:32:5e:d4:67:fa:
                    5c:e5:ec:f5:e8:c4:2a:31:34:40:6f:fc:01:cf:d0:
                    1f:c8:e9:75:d6:04:f5:e6:2b:c0:75:c5:01:d3:d1:
                    11:92:4a:1c:78:85:8c:a0:61:aa:34:fc:bb:b7:cb:
                    05:ab:70:f5:7d:8b:0a:49:d4:73:27:29:7a:f0:d9:
                    37:d3:28:98:ca:c7:6a:e0:ca:ce:a7:b5:41:e8:62:
                    a8:f4:69:0d:92:c7:84:b2:bf:37:8b:8c:67:b4:95:
                    f3:23:23:02:49:51:4a:43:9a:ce:fe:f3:9a:fb:44:
                    a3:32:1d:8c:92:f0:1e:73:5d:ba:c3:35:0c:04:e6:
                    0f:09:04:d7:12:11:8e:06:c4:a9:a7:ff:fb:f1:74:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C5:01:80:4B:A8:17:11:4E:33:C3:D1:58:C8:24:26:1E:29:06:8A
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:fa:10:59:1b:0d:38:d4:a2:b2:aa:76:e2:5d:ec:aa:fc:
         ff:15:e5:23:88:e5:21:b5:f5:dc:f3:64:65:e2:a3:b3:82:30:
         15:18:6e:c5:88:af:a0:c6:b3:16:3e:02:d1:18:fd:06:80:7e:
         71:1e:88:23:25:1c:85:4b:35:bd:88:20:5e:76:41:31:0a:e9:
         43:e8:66:39:f2:2a:59:9b:c5:0a:0d:a3:62:64:1b:1e:44:a7:
         fd:14:e5:69:a2:58:2a:18:ed:33:c5:9e:28:cd:df:ab:8f:84:
         78:0c:41:96:c5:b4:25:f4:57:79:f4:4f:e1:86:2a:76:f0:ec:
         f6:fe:e3:a6:5d:17:53:ca:d2:24:41:3c:4d:3f:4a:30:2f:65:
         98:54:25:27:56:d0:61:42:7a:d0:50:2f:7e:53:1f:7f:0c:09:
         11:7f:48:b9:11:ac:28:77:0e:27:77:2e:32:b3:11:de:91:f4:
         f0:80:7d:e8:e4:e8:c3:76:26:4b:dc:85:78:33:e2:15:25:92:
         1d:c8:66:e9:c9:8b:1a:3a:4e:f5:39:a4:0f:86:d9:80:0b:81:
         98:6b:5a:55:b8:c5:2d:31:b5:b5:9d:3f:62:6a:ef:83:3c:c5:
         f5:17:4c:2c:11:d7:97:12:1e:1b:98:51:d1:4f:d4:cd:f9:4f:
         6c:26:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:35 2025 by rpki-client