Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3138392e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          im8kA8t9hst+4rJ6VYlTzDBzuPOYSTlks/+CMCUwQDI=
Subject key identifier:   AA:85:E4:19:16:7B:A7:21:49:DB:06:48:82:DD:EC:4A:5D:77:DE:8E
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7A8AC1E375E62C9806CA10CE1F7529CA745A5700
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3234203d3e203532353830.roa
Signing time:             Wed 27 Dec 2023 14:04:00 +0000
ROA not before:           Wed 27 Dec 2023 13:59:00 +0000
ROA not after:            Wed 25 Dec 2024 14:04:00 +0000
asID:                     52580
IP address blocks:        179.191.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:c1:e3:75:e6:2c:98:06:ca:10:ce:1f:75:29:ca:74:5a:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Dec 27 13:59:00 2023 GMT
            Not After : Dec 25 14:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:3e:95:73:e1:8b:5c:49:07:0e:cb:6e:e2:
                    a2:9d:65:72:1b:c6:62:62:6f:5b:12:61:de:1a:86:
                    ed:ab:59:29:c5:22:80:a3:8e:3e:af:29:09:56:2c:
                    00:1b:24:53:9a:12:99:f0:c0:c1:b5:ce:3b:08:10:
                    07:28:d1:74:78:7e:b9:be:00:8a:ff:9c:a7:04:80:
                    70:e7:c6:11:8a:d8:2f:de:8e:b3:50:19:32:dc:a8:
                    e6:30:73:cf:0f:49:d2:1b:9a:21:30:22:27:79:10:
                    80:cf:79:ba:a6:86:b2:24:ec:cb:1a:be:01:7b:9c:
                    c8:a6:b0:54:2b:88:60:b6:42:22:b4:af:09:b0:3f:
                    d9:d1:e9:89:7e:2b:56:f7:8e:1e:e5:b3:b7:f0:2e:
                    9c:fa:12:e4:df:3d:95:5a:ac:55:25:2d:f1:2b:97:
                    59:ef:84:21:c6:81:7a:79:27:1e:15:05:26:8d:da:
                    a5:64:e5:43:a8:55:c2:df:e4:45:0a:b4:21:0c:57:
                    a2:2f:88:2b:7a:66:83:63:52:39:32:db:7a:74:f6:
                    b0:ce:9f:90:08:94:57:22:f8:fc:56:26:15:69:e0:
                    c4:0f:38:11:ba:8b:3c:ca:5b:52:7c:64:73:11:ba:
                    45:97:ca:c3:69:e3:82:98:e6:d5:97:f5:01:06:88:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:85:E4:19:16:7B:A7:21:49:DB:06:48:82:DD:EC:4A:5D:77:DE:8E
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:88:d9:62:71:e8:b4:49:7f:bb:6f:9b:d4:49:a7:f5:c3:b2:
         dd:0e:2f:ed:4d:e2:34:c9:c1:33:37:d2:46:90:00:7c:40:13:
         72:90:92:fc:95:1c:27:1b:5e:b2:5d:67:c9:2f:6b:63:f2:83:
         08:82:22:ae:9c:b5:4f:00:f9:09:5c:1e:32:df:09:21:25:24:
         9f:d3:f9:e2:db:91:e0:eb:82:1e:7f:45:c0:8b:1e:a5:fd:25:
         5e:b4:7f:14:da:f0:70:19:66:eb:e6:3c:8b:9e:b2:bc:24:18:
         4f:3a:ca:2e:56:bc:74:1e:5a:d4:49:72:31:28:28:4a:17:95:
         31:99:9b:25:fa:16:9b:c6:7b:12:70:7d:0b:e9:3b:59:c5:0a:
         0d:15:39:5a:3d:45:80:cc:14:fc:c5:19:28:58:b3:98:f4:6f:
         a8:6a:6f:ba:a9:00:c3:b2:18:f5:c3:dd:a1:94:7c:2e:bf:31:
         00:13:fd:1e:93:81:e4:41:6b:2f:d2:ad:4a:53:b6:88:00:75:
         80:35:b9:af:bd:c9:1a:9d:15:84:8a:dc:98:0b:0c:43:7d:0d:
         d3:98:4d:48:09:e0:c8:2f:13:9a:09:fe:3b:ad:98:32:c2:a6:
         46:7a:72:b8:45:05:60:11:91:67:0c:8e:8e:26:43:03:d9:1d:
         9c:f4:2f:c6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeorB43XmLJgGyhDOH3UpynRaVwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yMzEyMjcxMzU5MDBaFw0yNDEyMjUxNDA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQwNzNFOTU3M0UxOEI1QzQ5
MDcwRUNCNkVFMkEyOUQ2NTcyMUJDNjYyNjI2RjVCMTI2MURFMUE4NkVEQUI1OTI5
QzUyMjgwQTM4RTNFQUYyOTA5NTYyQzAwMUIyNDUzOUExMjk5RjBDMEMxQjVDRTNC
MDgxMDA3MjhEMTc0Nzg3RUI5QkUwMDhBRkY5Q0E3MDQ4MDcwRTdDNjExOEFEODJG
REU4RUIzNTAxOTMyRENBOEU2MzA3M0NGMEY0OUQyMUI5QTIxMzAyMjI3NzkxMDgw
Q0Y3OUJBQTY4NkIyMjRFQ0NCMUFCRTAxN0I5Q0M4QTZCMDU0MkI4ODYwQjY0MjIy
QjRBRjA5QjAzRkQ5RDFFOTg5N0UyQjU2Rjc4RTFFRTVCM0I3RjAyRTlDRkExMkU0
REYzRDk1NUFBQzU1MjUyREYxMkI5NzU5RUY4NDIxQzY4MTdBNzkyNzFFMTUwNTI2
OEREQUE1NjRFNTQzQTg1NUMyREZFNDQ1MEFCNDIxMEM1N0EyMkY4ODJCN0E2Njgz
NjM1MjM5MzJEQjdBNzRGNkIwQ0U5RjkwMDg5NDU3MjJGOEZDNTYyNjE1NjlFMEM0
MEYzODExQkE4QjNDQ0E1QjUyN0M2NDczMTFCQTQ1OTdDQUMzNjlFMzgyOThFNkQ1
OTdGNTAxMDY4OERDRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxAc+lXPhi1xJBw7LbuKinWVyG8ZiYm9bEmHeGobtq1kpxSKAo44+
rykJViwAGyRTmhKZ8MDBtc47CBAHKNF0eH65vgCK/5ynBIBw58YRitgv3o6zUBky
3KjmMHPPD0nSG5ohMCIneRCAz3m6poayJOzLGr4Be5zIprBUK4hgtkIitK8JsD/Z
0emJfitW944e5bO38C6c+hLk3z2VWqxVJS3xK5dZ74QhxoF6eSceFQUmjdqlZOVD
qFXC3+RFCrQhDFeiL4gremaDY1I5Mtt6dPawzp+QCJRXIvj8ViYVaeDEDzgRuos8
yltSfGRzEbpFl8rDaeOCmObVl/UBBojc1QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKqF5BkWe6chSdsGSILd7Epdd96OMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzczOTJlMzEzOTMxMmUzMTM4
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s7+9MA0GCSqGSIb3DQEBCwUAA4IBAQBziNlicei0SX+7b5vUSaf1w7LdDi/tTeI0
ycEzN9JGkAB8QBNykJL8lRwnG16yXWfJL2tj8oMIgiKunLVPAPkJXB4y3wkhJSSf
0/ni25Hg64Ief0XAix6l/SVetH8U2vBwGWbr5jyLnrK8JBhPOsouVrx0HlrUSXIx
KChKF5UxmZsl+habxnsScH0L6TtZxQoNFTlaPUWAzBT8xRkoWLOY9G+oam+6qQDD
shj1w92hlHwuvzEAE/0ek4HkQWsv0q1KU7aIAHWANbmvvckanRWEityYCwxDfQ3T
mE1ICeDILxOaCf47rZgywqZGenK4RQVgEZFnDI6OJkMD2R2c9C/G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org