Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138312e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3138312e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          GE49BjYzFC2suh52YznlTVD43vrsN/+j7/fmmUeWhiE=
Subject key identifier:   36:D6:A0:CC:94:74:AB:58:E6:9A:A0:C0:7E:6E:96:89:47:20:0A:50
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       3F0A242976DE0685CE4805A2915F04CC01721267
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138312e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 18:04:01 +0000
ROA not before:           Sat 06 Jan 2024 17:59:01 +0000
ROA not after:            Sat 04 Jan 2025 18:04:01 +0000
asID:                     52580
IP address blocks:        179.191.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0a:24:29:76:de:06:85:ce:48:05:a2:91:5f:04:cc:01:72:12:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 17:59:01 2024 GMT
            Not After : Jan  4 18:04:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:c2:d8:db:d1:0d:02:fb:87:46:b4:2f:5d:
                    ef:5f:d4:f9:09:a7:a8:12:96:43:04:5e:fc:9c:e6:
                    5c:2a:c5:38:1a:59:34:ad:fc:da:60:3c:ac:a8:a6:
                    1e:f7:e6:46:29:33:ae:41:5e:0d:df:92:54:1f:c8:
                    f8:34:68:26:55:6f:fe:3e:5a:80:1c:1e:d0:e3:10:
                    d5:77:27:3a:e3:fc:ab:9b:41:16:e1:53:b7:a4:2a:
                    7d:9f:ff:61:f7:83:4a:47:fb:74:89:80:07:5b:5a:
                    2b:34:3b:0f:48:60:01:7a:2d:5e:1d:f8:d2:94:4e:
                    38:6d:c1:0b:ca:95:51:06:6e:06:10:a2:ed:a7:60:
                    e2:68:60:79:68:91:6b:dd:b3:a1:23:ed:51:57:ef:
                    62:b3:9e:84:3a:3c:bb:99:01:8b:43:51:64:db:70:
                    f0:dd:ca:bb:34:54:c6:9a:f4:11:ae:c8:ed:67:70:
                    0c:c9:ef:32:bf:a4:82:95:00:7b:09:d5:05:06:a4:
                    97:ac:dc:91:17:7c:1a:0a:29:c8:da:38:90:19:f3:
                    44:0d:1d:0c:02:8d:e4:bd:4d:bb:a8:6d:69:ae:ba:
                    33:b6:b7:2e:df:31:51:e6:93:47:98:e0:ce:46:29:
                    50:9c:58:7d:ae:1e:5a:b7:f7:a9:e9:61:4a:d8:4b:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:A0:CC:94:74:AB:58:E6:9A:A0:C0:7E:6E:96:89:47:20:0A:50
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138312e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:b6:3d:f8:48:53:61:df:10:00:85:13:99:f4:bb:d3:38:
         e2:c8:8c:98:85:59:68:67:cc:b9:56:17:be:ab:0d:58:b5:e3:
         ef:42:82:f2:e7:03:b1:80:67:73:13:e2:21:c5:c6:2c:a2:49:
         c9:21:1e:c4:ff:ab:4f:ea:7a:35:7b:bd:be:d8:e9:80:5d:3a:
         eb:e2:c3:20:a6:fa:32:27:f3:38:1a:21:d6:9f:0d:f4:df:32:
         b1:91:32:1d:4c:74:2b:8a:48:b6:1b:e5:90:2d:8b:08:2e:7d:
         1c:7e:47:a3:41:4c:f9:58:9a:56:8e:b3:fa:93:b6:dc:40:e8:
         3c:ee:c6:d5:f9:12:30:89:97:2b:df:88:b5:b6:39:7a:dd:24:
         42:50:17:46:15:a8:5b:af:50:8a:d8:92:b6:a5:74:aa:e8:e6:
         f9:85:30:a0:b0:20:f0:fa:3b:33:63:36:fb:32:cb:c3:f5:c0:
         1d:bc:b4:d7:46:03:29:bf:93:60:4c:0c:92:e1:c0:5b:19:89:
         89:75:b1:ec:cf:60:d9:f8:78:83:70:4d:f8:9a:05:f2:e4:ec:
         17:fd:12:24:c9:51:53:b0:bb:06:fc:fb:24:50:dd:ac:aa:96:
         12:cf:5f:82:81:36:01:3a:a0:52:4e:be:b2:2a:67:42:5a:91:
         ad:4b:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:54:22 2025 by rpki-client