Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138342e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138342e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          J84arElCYYBk6xlYTWAjlKvqkovv2XnAaYeE4Y8DeWY=
Subject key identifier:   73:C2:4A:81:4A:25:F9:71:01:2A:CB:E1:E5:AB:15:AE:4E:D1:BF:7F
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       1803D77C8BF310802AC3E50B6FECCB6EE252A073
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138342e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:16:45 +0000
ROA not before:           Fri 14 Feb 2025 19:11:45 +0000
ROA not after:            Fri 13 Feb 2026 19:16:45 +0000
asID:                     52580
IP address blocks:        179.191.184.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:03:d7:7c:8b:f3:10:80:2a:c3:e5:0b:6f:ec:cb:6e:e2:52:a0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:11:45 2025 GMT
            Not After : Feb 13 19:16:45 2026 GMT
        Subject: CN=73C24A814A25F971012ACBE1E5AB15AE4ED1BF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:c8:b6:e9:42:d9:33:88:4b:fc:c6:50:73:
                    a1:eb:ae:65:e3:05:f1:14:22:e7:6f:71:3d:66:00:
                    89:62:0d:30:13:2d:2e:c1:6a:e5:59:ee:2b:46:ab:
                    64:55:75:e5:81:e5:86:6a:6c:af:0f:da:7a:30:23:
                    04:56:9f:bf:18:25:c0:0b:50:2d:25:d3:9d:38:d3:
                    ce:ca:c0:76:ec:ee:0c:04:ac:4f:ff:da:7a:6a:cc:
                    d0:f7:b7:7a:f9:b6:53:9e:fb:9d:6c:fb:7c:aa:fc:
                    57:c2:9a:dd:6c:f0:ea:a1:a5:c6:98:9a:df:ac:ec:
                    15:8b:7e:a5:ed:f9:34:85:bc:20:06:36:c3:ec:b7:
                    54:cf:ac:f2:67:82:48:ca:cb:75:4b:ad:9c:fb:32:
                    4f:e2:bf:a6:d1:4c:84:4d:00:37:5a:83:a4:a8:11:
                    90:33:fa:f8:27:e4:bd:95:bb:2d:0e:6a:3b:43:8c:
                    69:66:20:b4:e1:65:cc:bb:55:75:03:79:c3:65:70:
                    18:5d:fc:0f:a5:37:fb:5c:09:36:73:de:8e:73:7d:
                    12:d9:fc:a3:69:72:3a:7b:1e:2b:24:b0:23:d7:9a:
                    12:73:7d:b4:6b:dd:63:13:78:4b:b9:2c:21:7e:d9:
                    e5:7b:ce:19:99:ef:05:a4:ff:f5:e0:44:d8:1e:67:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C2:4A:81:4A:25:F9:71:01:2A:CB:E1:E5:AB:15:AE:4E:D1:BF:7F
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138342e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:72:66:66:ee:3c:1a:27:11:70:11:38:c1:36:7a:b8:37:
         b9:be:8f:a9:0b:e3:ac:21:ec:bc:47:f2:08:bb:32:18:5e:0c:
         c9:03:d7:d4:06:aa:a7:8e:42:6d:49:f8:a3:8f:c9:26:01:cb:
         9b:ce:a9:19:c5:17:1f:df:ef:b9:db:58:d8:8c:0a:e0:42:f9:
         6b:00:a1:29:77:89:c1:ee:36:dc:68:fa:27:3d:76:50:f1:9e:
         a8:ba:5d:b6:c2:9a:c4:27:d4:6e:a8:e8:09:62:fc:d4:0f:a9:
         92:f2:4f:49:20:e4:00:6a:aa:be:4f:ff:1a:7f:3b:06:40:bb:
         e5:7b:6b:fb:7c:be:8a:46:2d:c0:c9:68:22:fa:d7:76:33:67:
         a4:7d:d8:71:76:5c:c8:2c:bd:14:8e:f8:ce:0c:61:85:9c:15:
         af:95:09:9f:49:e5:77:3a:66:9d:4b:74:94:99:dd:6d:55:8c:
         6c:07:2f:a0:97:1b:fa:4b:6b:90:0b:f4:5e:da:a5:95:a5:03:
         44:80:ba:51:74:32:7a:76:41:2c:f0:0d:81:fc:93:8a:64:c2:
         ca:9b:f6:48:ad:01:34:e0:e2:60:33:84:fa:08:2f:1b:36:03:
         95:17:8c:f5:2e:10:0b:5b:44:c6:ad:5c:4e:6b:2f:bb:d0:d2:
         13:5b:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:51:34 2025 by rpki-client