Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          VB5XfCoC/oBG/JzWL65xyupZqKn6ZUISRsjejfvdw1g=
Subject key identifier:   30:B3:8C:FA:B5:4B:A4:83:33:6E:87:EA:32:0F:D7:F3:A8:CF:65:09
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       2F6364FBA910368C5005984D75F2C2EBA247619E
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:15:36 +0000
ROA not before:           Fri 14 Feb 2025 19:10:36 +0000
ROA not after:            Fri 13 Feb 2026 19:15:36 +0000
asID:                     52580
IP address blocks:        179.191.175.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:64:fb:a9:10:36:8c:50:05:98:4d:75:f2:c2:eb:a2:47:61:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:10:36 2025 GMT
            Not After : Feb 13 19:15:36 2026 GMT
        Subject: CN=30B38CFAB54BA483336E87EA320FD7F3A8CF6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:b1:d4:9b:e5:db:c0:ff:ab:3e:b8:0e:5d:
                    83:f1:79:ab:d4:8d:64:f5:5a:40:71:bd:21:4d:9a:
                    9a:86:78:a6:0d:b2:b9:9f:67:75:de:cb:18:43:bf:
                    6f:b8:b5:6d:af:6a:b7:22:64:eb:eb:9e:f2:c4:9c:
                    d9:c7:01:18:16:e6:2e:9b:43:27:ec:de:b3:02:cc:
                    16:ed:24:65:a0:e4:a6:8b:2f:f0:ac:7c:46:28:3e:
                    18:72:69:c7:7d:4c:b5:7a:8d:e6:0e:f1:b1:d5:63:
                    98:77:75:c4:e3:fe:45:80:8f:92:4e:b0:b8:32:4b:
                    18:4a:97:ff:c9:a2:bd:8a:af:fc:65:09:36:f4:d3:
                    ea:e4:d8:23:54:e4:77:4c:8b:a9:6a:37:04:61:4c:
                    46:8e:01:6c:2e:3f:bd:44:fc:27:20:fc:a5:e5:64:
                    be:59:f9:cf:51:e5:d1:35:ec:9b:c6:f8:cd:d6:4c:
                    61:52:06:a5:af:9b:c5:34:b3:be:9d:1c:04:aa:17:
                    6d:9d:99:1e:c7:f1:84:27:ca:fc:5c:ce:fc:85:cd:
                    5a:68:17:fe:04:ff:70:2f:3e:50:c2:ea:12:83:3e:
                    5f:c5:5f:24:c7:87:98:9c:fd:da:37:49:70:77:dd:
                    27:fe:46:d4:ce:b4:a7:a1:5f:09:1a:73:fd:b8:a8:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B3:8C:FA:B5:4B:A4:83:33:6E:87:EA:32:0F:D7:F3:A8:CF:65:09
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:1f:70:6b:2a:bd:13:31:0b:84:6a:dd:90:a1:ad:4a:bc:
         c7:d8:b7:6b:51:f8:56:50:d4:09:8c:64:95:0b:fd:f2:f5:a2:
         c7:47:d4:81:6a:dc:91:cb:21:5e:64:b2:e5:31:8c:fb:64:27:
         e1:90:c7:f3:6f:19:d5:f5:bb:5e:8e:4f:33:05:03:ff:0e:06:
         b8:2a:8e:bb:11:45:d1:b8:88:b7:b9:7c:52:81:64:68:ef:5d:
         e1:fe:d8:6c:31:71:6e:37:bc:30:f4:4f:b2:de:75:31:29:6b:
         62:58:13:cd:30:f8:10:e5:80:68:8f:d5:b4:1d:9a:83:24:bb:
         aa:ae:b0:5b:28:63:cc:01:0e:d4:12:b7:af:9d:d4:c0:d2:a2:
         21:9e:d2:a6:ff:df:01:36:ae:3b:7d:ae:57:86:1c:1d:76:c4:
         73:8c:35:0b:ca:ed:1e:b7:a5:1a:7c:06:18:d8:39:05:67:e6:
         15:92:2a:2d:e3:0e:43:fe:8b:db:1c:9c:d5:4d:dc:c3:a5:16:
         dc:06:c0:bf:45:d4:2f:c6:b1:d1:a3:79:51:ac:bb:be:08:33:
         0e:e8:a7:78:a5:59:ad:0f:76:b8:7f:4f:5e:b8:dc:8a:c7:dc:
         ea:6f:b8:4e:66:5a:a1:b4:5a:2a:5c:0e:73:8e:62:b7:53:9a:
         86:32:20:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL2Nk+6kQNoxQBZhNdfLC66JHYZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTEwMzZaFw0yNjAyMTMxOTE1MzZaMDMxMTAvBgNV
BAMTKDMwQjM4Q0ZBQjU0QkE0ODMzMzZFODdFQTMyMEZEN0YzQThDRjY1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKLHUm+XbwP+rPrgOXYPxeavU
jWT1WkBxvSFNmpqGeKYNsrmfZ3XeyxhDv2+4tW2varciZOvrnvLEnNnHARgW5i6b
Qyfs3rMCzBbtJGWg5KaLL/CsfEYoPhhyacd9TLV6jeYO8bHVY5h3dcTj/kWAj5JO
sLgySxhKl//Jor2Kr/xlCTb00+rk2CNU5HdMi6lqNwRhTEaOAWwuP71E/Ccg/KXl
ZL5Z+c9R5dE17JvG+M3WTGFSBqWvm8U0s76dHASqF22dmR7H8YQnyvxczvyFzVpo
F/4E/3AvPlDC6hKDPl/FXyTHh5ic/do3SXB33Sf+RtTOtKehXwkac/24qGnFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMLOM+rVLpIMzbofqMg/X86jPZQkwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzczNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv68wDQYJKoZIhvcNAQELBQADggEBAFONH3Br
Kr0TMQuEat2Qoa1KvMfYt2tR+FZQ1AmMZJUL/fL1osdH1IFq3JHLIV5ksuUxjPtk
J+GQx/NvGdX1u16OTzMFA/8OBrgqjrsRRdG4iLe5fFKBZGjvXeH+2GwxcW43vDD0
T7LedTEpa2JYE80w+BDlgGiP1bQdmoMku6qusFsoY8wBDtQSt6+d1MDSoiGe0qb/
3wE2rjt9rleGHB12xHOMNQvK7R63pRp8BhjYOQVn5hWSKi3jDkP+i9scnNVN3MOl
FtwGwL9F1C/GsdGjeVGsu74IMw7op3ilWa0Pdrh/T1643IrH3OpvuE5mWqG0Wipc
DnOOYrdTmoYyIL0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:47:34 2025 by rpki-client