Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137352e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          1UgKduP9u5xnjJU1nePBH9XYcptN2JO+JGEEbLGR1AY=
Subject key identifier:   70:2E:AF:D1:62:C5:F6:B3:03:5F:EE:E5:AF:03:24:41:05:62:91:26
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       2B3B23F542445AB484EFFAF22C24902F7F18F812
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:01 +0000
ROA not before:           Sat 06 Jan 2024 17:59:01 +0000
ROA not after:            Sat 04 Jan 2025 18:04:01 +0000
asID:                     52580
IP address blocks:        179.191.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3b:23:f5:42:44:5a:b4:84:ef:fa:f2:2c:24:90:2f:7f:18:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:01 2024 GMT
            Not After : Jan  4 18:04:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:0d:32:16:09:ac:40:ae:85:01:b5:5d:46:
                    ee:b4:fe:8b:cf:ca:c5:8e:1e:6c:21:45:d8:80:a2:
                    ef:fa:ee:a2:17:f4:7b:bf:64:6c:18:61:50:53:db:
                    e6:69:48:ed:91:8d:13:67:ce:c8:45:49:14:0a:1b:
                    91:e0:60:98:72:0a:a1:98:ef:d0:0c:fa:d4:92:23:
                    34:db:01:02:2f:fd:6c:f1:54:a3:24:ca:82:71:f3:
                    b8:e0:4e:e1:6f:4b:64:f7:95:60:26:35:b1:b6:90:
                    ce:a7:2f:83:5a:37:a1:7a:b8:54:45:88:c1:2c:e1:
                    ce:e1:7e:ed:6b:7e:44:5c:60:12:c2:24:00:d7:c5:
                    62:b2:5c:de:07:f4:f8:25:e4:61:52:5b:6e:91:41:
                    06:d7:55:35:e2:53:e6:bd:ca:d5:f6:60:1b:1c:fb:
                    ff:45:e4:55:41:8a:ac:16:86:7f:8f:fd:56:29:7a:
                    f2:24:ed:fe:5b:0b:02:b1:db:5a:5b:67:58:91:cc:
                    7d:a8:6a:b4:c4:cf:ba:95:fd:51:b1:a2:05:ad:1a:
                    e5:d2:c1:f9:9e:ea:72:be:3b:86:5e:4b:3f:14:54:
                    df:2d:3b:fa:43:95:31:51:1f:29:ef:96:e9:2c:7b:
                    a7:21:9b:05:c4:66:a2:7e:1d:55:95:7a:06:61:98:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:AF:D1:62:C5:F6:B3:03:5F:EE:E5:AF:03:24:41:05:62:91:26
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:a9:3c:d5:2c:ec:78:f3:6c:29:a1:c1:95:d8:7c:24:fe:
         7d:9f:53:80:85:12:36:ec:ef:c3:64:92:db:8d:2d:7c:1d:70:
         8c:c5:36:01:1e:9e:14:73:af:c4:28:97:fe:26:e0:1c:10:e1:
         82:67:a8:75:7f:30:c6:cb:4d:1f:27:70:d0:9c:34:7e:45:ba:
         92:d9:31:04:78:ed:30:46:10:8f:db:b6:b0:63:80:ef:a7:35:
         dc:96:0a:e8:25:5a:f2:1a:91:0e:d8:00:68:d0:2a:53:99:af:
         ac:43:38:5b:19:51:df:82:25:96:a9:b3:86:47:46:73:ac:12:
         25:ab:72:31:8a:56:2c:d1:87:c1:14:e8:0d:63:0f:fc:f4:df:
         07:2c:6a:c1:04:40:88:75:cd:6f:bb:6f:85:c6:2e:69:33:51:
         c8:cf:9e:9a:10:00:af:2a:f1:63:56:a7:13:c1:4f:2a:c7:3a:
         23:60:2c:c8:00:e0:cd:f0:2f:e7:f4:2a:72:d5:ec:67:af:b3:
         7f:59:a5:49:09:c8:f2:cf:65:84:6d:74:a9:27:cd:79:22:c6:
         bb:22:0c:a8:d6:3c:ca:51:5e:57:ed:27:f5:b3:eb:d1:43:ac:
         6e:48:2b:9b:da:92:b9:29:99:54:00:2d:04:62:e1:74:ad:24:
         14:a8:96:88
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUKzsj9UJEWrSE7/ryLCSQL38Y+BIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDAxMDYxNzU5MDFaFw0yNTAxMDQxODA0MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VGQzBEMzIxNjA5QUM0MEFF
ODUwMUI1NUQ0NkVFQjRGRThCQ0ZDQUM1OEUxRTZDMjE0NUQ4ODBBMkVGRkFFRUEy
MTdGNDdCQkY2NDZDMTg2MTUwNTNEQkU2Njk0OEVEOTE4RDEzNjdDRUM4NDU0OTE0
MEExQjkxRTA2MDk4NzIwQUExOThFRkQwMENGQUQ0OTIyMzM0REIwMTAyMkZGRDZD
RjE1NEEzMjRDQTgyNzFGM0I4RTA0RUUxNkY0QjY0Rjc5NTYwMjYzNUIxQjY5MENF
QTcyRjgzNUEzN0ExN0FCODU0NDU4OEMxMkNFMUNFRTE3RUVENkI3RTQ0NUM2MDEy
QzIyNDAwRDdDNTYyQjI1Q0RFMDdGNEY4MjVFNDYxNTI1QjZFOTE0MTA2RDc1NTM1
RTI1M0U2QkRDQUQ1RjY2MDFCMUNGQkZGNDVFNDU1NDE4QUFDMTY4NjdGOEZGRDU2
Mjk3QUYyMjRFREZFNUIwQjAyQjFEQjVBNUI2NzU4OTFDQzdEQTg2QUI0QzRDRkJB
OTVGRDUxQjFBMjA1QUQxQUU1RDJDMUY5OUVFQTcyQkUzQjg2NUU0QjNGMTQ1NERG
MkQzQkZBNDM5NTMxNTExRjI5RUY5NkU5MkM3QkE3MjE5QjA1QzQ2NkEyN0UxRDU1
OTU3QTA2NjE5OEIzQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzvwNMhYJrECuhQG1XUbutP6Lz8rFjh5sIUXYgKLv+u6iF/R7v2Rs
GGFQU9vmaUjtkY0TZ87IRUkUChuR4GCYcgqhmO/QDPrUkiM02wECL/1s8VSjJMqC
cfO44E7hb0tk95VgJjWxtpDOpy+DWjeherhURYjBLOHO4X7ta35EXGASwiQA18Vi
slzeB/T4JeRhUltukUEG11U14lPmvcrV9mAbHPv/ReRVQYqsFoZ/j/1WKXryJO3+
WwsCsdtaW2dYkcx9qGq0xM+6lf1RsaIFrRrl0sH5nupyvjuGXks/FFTfLTv6Q5Ux
UR8p75bpLHunIZsFxGaifh1VlXoGYZizuQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHAur9FixfazA1/u5a8DJEEFYpEmMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzczOTJlMzEzOTMxMmUzMTM3
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s7+vMA0GCSqGSIb3DQEBCwUAA4IBAQCKXKk81SzsePNsKaHBldh8JP59n1OAhRI2
7O/DZJLbjS18HXCMxTYBHp4Uc6/EKJf+JuAcEOGCZ6h1fzDGy00fJ3DQnDR+RbqS
2TEEeO0wRhCP27awY4DvpzXclgroJVryGpEO2ABo0CpTma+sQzhbGVHfgiWWqbOG
R0ZzrBIlq3IxilYs0YfBFOgNYw/89N8HLGrBBECIdc1vu2+Fxi5pM1HIz56aEACv
KvFjVqcTwU8qxzojYCzIAODN8C/n9Cpy1exnr7N/WaVJCcjyz2WEbXSpJ815Isa7
Igyo1jzKUV5X7Sf1s+vRQ6xuSCub2pK5KZlUAC0EYuF0rSQUqJaI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org