Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3138372e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          G+0vw9oC6nzyyKJNO79rmtL0m00KgCK+j8lh/A2AVAI=
Subject key identifier:   5B:2E:E6:B2:2B:5B:79:F4:0E:54:BB:62:DC:99:68:70:C5:65:C2:FB
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       683D685E0634ED9DC0CF3C014CF8B2E24D408399
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3234203d3e203532353830.roa
Signing time:             Sat 06 Jan 2024 19:04:00 +0000
ROA not before:           Sat 06 Jan 2024 18:59:00 +0000
ROA not after:            Sat 04 Jan 2025 19:04:00 +0000
asID:                     52580
IP address blocks:        179.191.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:68:5e:06:34:ed:9d:c0:cf:3c:01:4c:f8:b2:e2:4d:40:83:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  6 18:59:00 2024 GMT
            Not After : Jan  4 19:04:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:2c:bd:af:c5:57:a9:ef:cc:bc:b8:a4:51:
                    11:8a:66:a3:b6:f4:8a:d7:eb:b1:9f:18:66:8f:3c:
                    35:a2:56:82:30:bb:0f:8c:62:d2:e1:9b:16:54:fb:
                    c2:57:e2:ac:cd:00:4e:7c:e5:e7:e1:6f:69:22:11:
                    a1:06:c7:36:cf:5c:cd:69:ee:51:31:a9:c5:ef:40:
                    d0:1d:ae:c1:5b:d3:6a:8b:a3:1a:47:32:55:38:62:
                    18:f0:33:e4:f9:2a:ba:56:c2:fa:e2:99:57:4b:45:
                    b2:87:67:cb:bc:49:a5:56:43:6f:b0:72:19:58:88:
                    5c:a6:8e:f1:09:f2:d1:b4:01:17:09:a2:4f:1a:db:
                    f5:e4:71:26:75:f6:e0:a3:14:2f:a3:6e:f1:44:34:
                    73:ce:64:fc:41:bf:6b:d3:f2:f3:43:50:05:7f:c0:
                    39:f3:b7:c8:90:4e:7b:f5:92:34:c7:d9:67:f5:6a:
                    1e:c1:ff:4d:95:28:15:f7:1d:fe:fd:5e:b3:af:1c:
                    8d:b7:4d:23:a7:90:66:94:c2:0b:fb:58:89:69:b6:
                    26:9d:79:c9:b3:13:d9:93:d5:a4:91:58:9e:3a:b4:
                    a7:97:38:bd:94:01:01:73:ee:dc:b0:6c:1f:6c:43:
                    bc:91:d3:ca:de:05:65:cb:28:f6:4c:7c:c4:c8:c9:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2E:E6:B2:2B:5B:79:F4:0E:54:BB:62:DC:99:68:70:C5:65:C2:FB
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:3d:a1:96:53:fa:98:a2:38:aa:40:52:c8:a1:e6:e6:40:
         0a:15:64:07:d2:ce:ce:1f:92:df:e6:b5:10:eb:56:d2:4d:d9:
         d0:f9:3e:d5:79:73:01:79:f8:73:00:9d:db:05:3b:9a:5c:c6:
         8d:17:fc:d8:c8:2d:cf:87:4d:81:1e:68:92:b1:ea:db:f5:3b:
         c9:26:19:fb:e1:92:90:5e:5c:4f:60:02:96:76:2e:b4:32:1a:
         39:d8:af:37:4e:32:f7:0b:6e:71:ab:e3:5c:af:48:51:38:c4:
         be:14:6b:7d:7b:6e:5e:bf:a5:a2:10:99:98:1f:30:ae:75:ec:
         02:a3:f3:ad:3d:80:f9:6e:1f:bd:9d:0f:bf:26:47:f0:50:d3:
         c6:83:0d:e4:97:dd:f2:8d:7e:ab:a6:81:65:ea:d7:c8:fc:d1:
         29:6c:82:5a:16:79:8c:9d:8c:f2:e6:75:35:b4:19:7e:8c:02:
         eb:2e:25:f9:d3:67:ab:a7:14:9a:82:97:35:92:b1:d8:3f:a1:
         92:bd:5b:e9:51:e1:ab:bf:d4:6b:4b:2e:7b:b3:4a:fe:f9:e2:
         f1:30:55:d1:68:28:44:31:31:20:e6:25:66:94:56:3f:f7:73:
         56:33:fd:37:4a:48:b4:df:9c:f0:4f:a1:72:7a:f8:c9:4c:21:
         22:aa:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org