Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137372e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          lVV7utypq3BqpLHjts0Sz8+1qrEhzuffajb2mVrr2nY=
Subject key identifier:   46:00:93:78:14:D8:35:1A:3B:A2:AB:AA:8C:0D:0B:D2:47:26:28:64
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       014E2EA8EE678842A3CE80EC5795D309ADAB5479
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:00 +0000
ROA not before:           Sat 06 Jan 2024 17:59:00 +0000
ROA not after:            Sat 04 Jan 2025 18:04:00 +0000
asID:                     52580
IP address blocks:        179.191.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:2e:a8:ee:67:88:42:a3:ce:80:ec:57:95:d3:09:ad:ab:54:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:00 2024 GMT
            Not After : Jan  4 18:04:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:dd:e6:68:15:13:fb:21:0f:6a:59:f5:3d:
                    a3:be:09:a6:c1:d8:72:c2:53:4a:c6:65:6c:f7:55:
                    76:25:81:f9:4f:f0:7e:c1:d9:eb:1c:6f:3f:bd:6f:
                    e9:d4:9f:77:94:d8:fa:3e:e3:be:e1:a2:67:7f:af:
                    6e:9e:f2:fc:3f:92:d0:c9:a7:e6:da:d2:57:a9:da:
                    aa:56:5d:a6:80:a3:2f:9d:04:50:84:8d:5a:2d:d4:
                    ba:59:eb:d2:2b:5c:56:3b:b7:42:22:7b:3c:ce:f0:
                    ec:25:d6:bd:22:30:65:92:31:8a:0c:0b:af:ca:13:
                    44:95:67:4b:1a:66:73:df:7a:68:d8:d4:50:1e:f3:
                    05:20:a4:1b:e2:5c:f6:8f:4e:fe:7a:3c:e4:da:94:
                    64:4b:40:5f:d6:83:08:91:a9:3b:df:d9:20:2e:8b:
                    17:e2:f2:9b:16:7d:b2:ea:63:08:8a:4d:aa:6e:b5:
                    84:24:12:d1:56:61:81:ce:75:89:66:32:76:32:aa:
                    bf:13:04:38:c1:d0:69:18:41:bc:e4:dc:d1:05:64:
                    36:79:84:00:18:3f:8a:be:1d:00:36:1e:42:39:ab:
                    db:fc:bb:cd:8b:4c:3d:8a:0a:71:b5:21:a4:52:ba:
                    f3:e0:ab:40:33:fa:d4:08:9f:08:9d:66:81:64:f6:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:00:93:78:14:D8:35:1A:3B:A2:AB:AA:8C:0D:0B:D2:47:26:28:64
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:0d:c1:90:69:06:09:42:b0:7f:e0:16:71:b3:b7:93:2d:
         5e:ec:8d:1b:26:72:de:94:86:35:21:68:b9:eb:79:d4:3c:44:
         c1:ea:ec:e6:23:69:2d:8a:48:d7:5b:d2:bc:39:ae:20:82:74:
         39:b7:cf:f3:f5:70:2d:cb:f8:8a:70:ff:a5:91:07:27:18:84:
         d7:7b:2b:26:77:be:88:23:e9:16:4f:3c:0d:ac:84:e6:7b:a0:
         e3:78:f3:38:5a:7e:78:48:f1:36:dd:fe:4f:dd:21:22:97:57:
         59:02:43:27:e9:e7:4b:97:19:01:c3:71:01:57:8a:e6:33:9e:
         e5:f6:39:a2:48:75:40:9a:da:a6:5d:6a:79:83:f2:45:66:8e:
         ac:a5:1f:59:16:73:e9:6f:e8:c8:ca:0d:00:9e:aa:95:c4:79:
         0b:e8:e4:a9:ad:bc:f0:39:66:da:9f:32:cc:50:83:be:bb:b6:
         c5:5e:28:22:fd:85:7e:3d:59:2c:af:2f:25:e8:a8:51:95:c0:
         12:98:81:e7:ca:b1:7b:64:30:9f:40:44:68:98:41:eb:1c:e3:
         a7:0e:9d:6e:e0:87:17:b1:ee:ca:da:d2:99:21:1d:30:6d:a5:
         de:66:5a:6b:2c:b2:6f:8a:c0:07:58:fc:15:7b:86:24:66:b6:
         be:49:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:37 2025 by rpki-client