Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3137392e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          hqiY8ptOA9HoCEmQH0WpYGnvkBKF3xBhO26HroDlAoA=
Subject key identifier:   BA:EE:07:D1:26:B3:C8:C3:18:A5:71:FA:9C:2F:21:5A:73:47:B1:BE
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       53D7847E72DE22299F840736F9E87CAE0AECDE72
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3234203d3e203532353830.roa
Signing time:             Thu 04 Jan 2024 23:22:00 +0000
ROA not before:           Thu 04 Jan 2024 23:17:00 +0000
ROA not after:            Thu 02 Jan 2025 23:22:00 +0000
asID:                     52580
IP address blocks:        179.191.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d7:84:7e:72:de:22:29:9f:84:07:36:f9:e8:7c:ae:0a:ec:de:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  4 23:17:00 2024 GMT
            Not After : Jan  2 23:22:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:bd:69:97:77:64:fe:de:cc:ce:34:5d:c9:
                    11:f3:13:1f:79:4b:43:32:56:7c:ae:5b:30:a1:c3:
                    04:df:1b:d8:b5:03:b5:03:c8:26:6d:7a:ff:68:1f:
                    35:e1:c0:da:cf:9e:da:96:e7:42:66:9f:43:5b:d2:
                    6c:3b:17:29:e1:c2:60:b2:f0:d0:10:fb:c8:18:35:
                    f2:8c:ed:86:88:c2:d0:ad:76:b1:46:9e:a0:33:ea:
                    3b:65:86:0f:e9:51:69:64:d4:7f:1a:d2:ae:3e:ed:
                    c4:b6:78:c8:d7:62:c5:11:92:c8:4a:ad:39:fd:7a:
                    d4:b8:ff:2a:d1:33:df:a0:b9:3a:b4:b5:4d:a0:90:
                    db:2b:ea:17:ed:9d:83:9b:03:6e:e6:94:05:a0:0c:
                    46:0d:5f:29:18:fe:5e:e2:21:81:62:62:60:66:4d:
                    4d:f3:ee:fe:bb:42:e1:ec:63:53:6a:5a:e6:37:1c:
                    12:71:fe:4c:ea:f9:a7:02:55:00:2e:6b:dc:de:97:
                    b7:5d:fa:cf:03:4f:70:af:b9:2f:95:8d:98:79:47:
                    da:6b:8e:8b:93:04:52:59:01:79:42:7e:59:7b:46:
                    89:10:80:fe:ac:01:54:50:fe:45:7d:de:af:2e:96:
                    12:44:10:d6:09:a4:54:d0:48:a7:98:71:6e:fe:e7:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:07:D1:26:B3:C8:C3:18:A5:71:FA:9C:2F:21:5A:73:47:B1:BE
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:97:53:9c:ff:9b:ac:c1:72:26:a6:cc:63:ea:33:1d:82:
         2a:94:62:cb:29:55:0d:2e:c3:68:6c:f3:75:04:18:f6:c3:26:
         85:52:bd:ec:b7:16:dd:da:48:1e:11:67:a9:2b:4b:8f:f9:49:
         bc:bf:89:84:81:77:1d:93:1b:d7:6a:c7:07:5b:73:5a:f6:ee:
         11:0c:33:3f:bb:2d:1e:eb:93:a5:81:4f:ec:d9:25:e9:cf:91:
         4f:4c:b1:4c:87:ad:58:77:4a:5c:75:c4:b9:6c:98:14:cb:2d:
         51:87:58:93:b1:37:98:8a:10:51:32:4a:22:fa:0d:b0:3c:ef:
         b1:48:31:1c:2b:31:bf:5e:17:57:9e:d2:82:bb:62:b4:bb:96:
         ce:a2:82:5f:aa:a7:de:4a:14:a9:86:23:54:26:08:eb:ce:f2:
         82:80:ab:11:ec:4a:4c:23:29:b2:3c:18:87:52:38:0a:d1:41:
         59:24:14:1b:8b:99:21:31:88:62:72:79:d9:27:c5:e3:69:e1:
         ca:a4:92:43:46:f9:72:f8:29:c5:29:89:92:20:95:8e:15:f2:
         00:69:ce:2d:19:32:39:28:51:02:24:ae:85:49:c3:6a:4e:ec:
         90:0f:0a:8b:69:eb:d8:a6:8e:ac:5b:46:e1:15:ed:f2:e4:43:
         07:bb:86:ed
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUU9eEfnLeIimfhAc2+eh8rgrs3nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDAxMDQyMzE3MDBaFw0yNTAxMDIyMzIyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMzNEJENjk5Nzc3NjRGRURF
Q0NDRTM0NURDOTExRjMxMzFGNzk0QjQzMzI1NjdDQUU1QjMwQTFDMzA0REYxQkQ4
QjUwM0I1MDNDODI2NkQ3QUZGNjgxRjM1RTFDMERBQ0Y5RURBOTZFNzQyNjY5RjQz
NUJEMjZDM0IxNzI5RTFDMjYwQjJGMEQwMTBGQkM4MTgzNUYyOENFRDg2ODhDMkQw
QUQ3NkIxNDY5RUEwMzNFQTNCNjU4NjBGRTk1MTY5NjRENDdGMUFEMkFFM0VFREM0
QjY3OEM4RDc2MkM1MTE5MkM4NEFBRDM5RkQ3QUQ0QjhGRjJBRDEzM0RGQTBCOTNB
QjRCNTREQTA5MERCMkJFQTE3RUQ5RDgzOUIwMzZFRTY5NDA1QTAwQzQ2MEQ1RjI5
MThGRTVFRTIyMTgxNjI2MjYwNjY0RDRERjNFRUZFQkI0MkUxRUM2MzUzNkE1QUU2
MzcxQzEyNzFGRTRDRUFGOUE3MDI1NTAwMkU2QkRDREU5N0I3NURGQUNGMDM0Rjcw
QUZCOTJGOTU4RDk4Nzk0N0RBNkI4RThCOTMwNDUyNTkwMTc5NDI3RTU5N0I0Njg5
MTA4MEZFQUMwMTU0NTBGRTQ1N0RERUFGMkU5NjEyNDQxMEQ2MDlBNDU0RDA0OEE3
OTg3MTZFRkVFNzVGOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvDS9aZd3ZP7ezM40XckR8xMfeUtDMlZ8rlswocME3xvYtQO1A8gm
bXr/aB814cDaz57aludCZp9DW9JsOxcp4cJgsvDQEPvIGDXyjO2GiMLQrXaxRp6g
M+o7ZYYP6VFpZNR/GtKuPu3EtnjI12LFEZLISq05/XrUuP8q0TPfoLk6tLVNoJDb
K+oX7Z2DmwNu5pQFoAxGDV8pGP5e4iGBYmJgZk1N8+7+u0Lh7GNTalrmNxwScf5M
6vmnAlUALmvc3pe3XfrPA09wr7kvlY2YeUfaa46LkwRSWQF5Qn5Ze0aJEID+rAFU
UP5Ffd6vLpYSRBDWCaRU0EinmHFu/udfjwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLruB9Ems8jDGKVx+pwvIVpzR7G+MB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzczOTJlMzEzOTMxMmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s7+zMA0GCSqGSIb3DQEBCwUAA4IBAQCsC5dTnP+brMFyJqbMY+ozHYIqlGLLKVUN
LsNobPN1BBj2wyaFUr3stxbd2kgeEWepK0uP+Um8v4mEgXcdkxvXascHW3Na9u4R
DDM/uy0e65OlgU/s2SXpz5FPTLFMh61Yd0pcdcS5bJgUyy1Rh1iTsTeYihBRMkoi
+g2wPO+xSDEcKzG/XhdXntKCu2K0u5bOooJfqqfeShSphiNUJgjrzvKCgKsR7EpM
IymyPBiHUjgK0UFZJBQbi5khMYhicnnZJ8XjaeHKpJJDRvly+CnFKYmSIJWOFfIA
ac4tGTI5KFECJK6FScNqTuyQDwqLaevYpo6sW0bhFe3y5EMHu4bt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org