Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          mziQi9kkJxpDZJtHSoumhSC8/m0ZuRdFWSyMISo3xUI=
Subject key identifier:   39:4E:95:90:E0:9E:DE:29:95:B6:F9:A0:7E:D7:7E:44:1B:76:42:62
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       0AA03499D35C933FB631C82527B94C981B0572CD
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:15:54 +0000
ROA not before:           Fri 14 Feb 2025 19:10:54 +0000
ROA not after:            Fri 13 Feb 2026 19:15:54 +0000
asID:                     52580
IP address blocks:        179.191.177.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a0:34:99:d3:5c:93:3f:b6:31:c8:25:27:b9:4c:98:1b:05:72:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:10:54 2025 GMT
            Not After : Feb 13 19:15:54 2026 GMT
        Subject: CN=394E9590E09EDE2995B6F9A07ED77E441B764262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:cd:88:ac:1b:3e:f6:95:64:de:43:02:c2:
                    35:5a:ee:52:0e:d4:26:25:db:43:e2:fa:c3:92:63:
                    8b:9e:00:d8:b9:c5:36:5f:27:7e:ae:4d:9e:0d:e8:
                    bc:1d:32:76:e3:f6:d4:dc:ec:05:1b:5b:c6:ea:0a:
                    96:a4:81:13:63:a8:4f:1d:f9:d6:a2:e9:aa:cd:c7:
                    fd:1b:ab:aa:6b:47:e7:15:8f:36:de:7b:84:15:d6:
                    25:18:15:78:24:92:0a:8c:7c:6e:ef:49:14:3e:f5:
                    b7:4a:f7:7e:84:d9:ca:1f:d3:bf:e5:71:61:fe:51:
                    9f:5f:c5:71:9b:07:6f:99:13:97:2c:44:37:57:23:
                    21:84:09:93:b4:51:27:87:b1:18:b2:00:75:55:8c:
                    4e:f7:0c:dd:71:cc:ac:9c:a3:5c:89:bf:27:5d:81:
                    fd:90:5d:d8:a5:33:96:46:79:e3:5e:07:0d:15:84:
                    2c:6a:31:72:e5:38:d1:05:c5:c1:98:0b:3b:ca:18:
                    a4:3f:c8:21:ee:f5:6a:e5:80:bd:f4:43:9e:90:ae:
                    c4:15:8f:dd:19:08:c0:12:03:54:02:c5:b5:99:fa:
                    2e:df:95:05:5d:56:7e:51:3c:59:08:13:59:74:51:
                    fc:9e:f4:64:45:5c:e9:9f:12:c4:6f:81:6d:ad:b0:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4E:95:90:E0:9E:DE:29:95:B6:F9:A0:7E:D7:7E:44:1B:76:42:62
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:51:b5:9e:f9:a5:c2:9b:a0:9f:9c:b6:0b:81:29:9b:84:
         ad:65:57:1b:bf:cd:21:e6:85:eb:53:8c:61:45:cf:72:27:7e:
         77:88:f7:a6:ad:81:c7:d1:7a:68:a5:ab:47:dd:cd:55:30:52:
         50:c7:fc:53:c8:2d:7d:6a:63:39:6b:c9:85:f2:ff:2f:78:69:
         bd:7b:9b:c1:d6:56:33:77:ba:35:3d:da:8c:d5:0c:9c:1f:79:
         b4:fc:ee:9e:f5:c1:3f:33:91:bd:a7:c4:3b:aa:2e:31:91:8e:
         b3:27:83:65:39:37:19:e0:c3:42:cd:eb:9a:37:e2:1c:33:0c:
         d0:68:73:bf:4d:e1:52:6c:2c:68:47:66:85:43:34:c4:be:79:
         71:a6:7a:88:bb:fd:df:69:b6:96:8c:e4:98:dd:c3:37:90:28:
         2a:75:31:58:e4:a7:e7:e7:e9:5b:f1:95:ea:51:4a:d0:93:a0:
         db:05:82:90:f9:7f:1e:26:f8:cf:a8:0a:c4:b4:72:c6:99:af:
         cb:b6:09:30:30:09:68:2a:d4:b0:bf:fc:6a:a8:35:e6:be:d1:
         30:48:22:7a:3a:23:02:86:61:80:6b:97:7f:a0:0a:96:69:15:
         25:85:ee:a2:00:ec:f1:b2:a4:3a:30:de:7e:c8:54:85:8e:54:
         4a:73:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:19 2025 by rpki-client