Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          THMSZli6bcTasu0BgjMVNlYroz9Bzpmrr+lvh2i8ajM=
Subject key identifier:   45:07:9A:17:45:5A:B5:DA:34:47:0C:A8:0D:C7:2A:7F:42:7B:93:D4
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       3C080EDB635CA84C2314C1392AB85E2817C95860
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:15:24 +0000
ROA not before:           Fri 14 Feb 2025 19:10:24 +0000
ROA not after:            Fri 13 Feb 2026 19:15:24 +0000
asID:                     52580
IP address blocks:        179.191.173.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:0e:db:63:5c:a8:4c:23:14:c1:39:2a:b8:5e:28:17:c9:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:10:24 2025 GMT
            Not After : Feb 13 19:15:24 2026 GMT
        Subject: CN=45079A17455AB5DA34470CA80DC72A7F427B93D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:4f:a4:e4:28:66:08:84:54:cf:a5:1c:01:
                    3c:93:12:88:c9:bf:75:df:2a:97:d1:97:c9:7b:67:
                    e8:83:93:51:f4:7f:15:6e:a7:18:b0:72:69:3c:69:
                    aa:97:af:b7:8b:18:c3:b8:b9:ea:d1:eb:42:c2:6c:
                    8c:c3:ee:0b:f5:8f:f5:c7:27:b2:d3:f7:b8:aa:e7:
                    10:e4:eb:c5:03:48:49:24:7f:61:8e:40:b6:73:b7:
                    62:06:50:ca:e1:61:75:18:87:0e:bf:d7:af:68:2d:
                    d8:05:7b:a5:f9:a6:a4:89:64:37:ae:7a:09:64:a7:
                    3c:55:9e:95:37:20:27:e6:b2:21:6f:c2:e3:cd:68:
                    05:ee:45:5e:2d:a3:17:55:4c:00:f6:ba:b0:cb:44:
                    e9:58:d3:02:da:d3:5a:61:0f:56:c7:8d:d1:d6:96:
                    d2:2d:77:fb:a7:f2:1c:54:b4:a8:5e:c7:69:d6:15:
                    63:51:86:19:28:a4:24:68:71:8b:09:ee:92:fe:d2:
                    b6:04:d4:a3:08:c8:2a:6b:da:d4:38:78:db:e8:56:
                    13:6b:00:80:53:2f:63:ab:20:f3:ce:62:79:c3:f0:
                    2d:a5:62:f6:2e:a0:84:32:e7:e6:f0:4c:ea:9b:2c:
                    80:f7:49:68:d3:69:4b:50:2d:69:09:c9:3e:e5:bb:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:07:9A:17:45:5A:B5:DA:34:47:0C:A8:0D:C7:2A:7F:42:7B:93:D4
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:3f:6e:79:4e:c2:65:06:46:c3:8a:a9:33:6f:60:a2:75:
         a0:30:5c:f6:80:ed:13:e0:33:e3:1f:c7:56:ef:3c:25:6b:95:
         8c:7a:b3:98:a3:a2:db:51:0c:5a:43:39:a3:b4:9d:2c:c2:c8:
         92:e8:73:d7:a8:92:40:6f:2b:ba:c6:3c:f5:b7:1b:2f:64:a0:
         61:dc:21:2c:3b:b9:97:50:32:98:3b:8f:5e:b5:7b:bc:11:37:
         aa:a9:c6:8a:05:fc:b6:5f:82:a1:b9:df:2c:5a:d5:24:2d:55:
         61:05:ac:c6:5c:e5:dc:66:1d:df:d4:dc:2e:30:a0:38:cf:70:
         4c:62:02:6c:d2:2a:37:65:4e:3e:67:71:06:a7:90:24:bf:45:
         7c:fe:db:f3:5c:a3:b9:a6:51:df:e9:5a:e2:cb:c6:8b:c3:97:
         a8:18:c4:3a:fe:03:39:5d:68:c1:d0:49:ba:ff:79:8d:08:72:
         c0:31:0b:ca:e4:33:b4:0d:53:5f:7b:d2:63:64:5c:6d:7c:de:
         47:f2:70:f8:dd:13:45:a0:5a:fb:c2:a7:86:a5:d6:90:1e:28:
         9c:51:52:d0:bb:17:8e:25:61:10:fd:a1:39:68:e6:c1:ca:9d:
         46:5b:3f:07:70:fd:b6:b6:7b:e2:ab:ee:6d:e8:9f:b6:19:b9:
         72:5a:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:50:18 2025 by rpki-client