Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139302e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3139302e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          eWZ/8y0vcOxPqCdUox3sD6euznQb3IrzRzATTqu9tQI=
Subject key identifier:   4C:64:9C:C8:F2:71:2D:27:F0:66:8D:DE:FE:D7:DB:89:D6:5C:98:E4
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       1857F3BA13EF587B9973202F65F66564ED78FDA3
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139302e302f32342d3234203d3e203532353830.roa
Signing time:             Thu 04 Jan 2024 23:24:00 +0000
ROA not before:           Thu 04 Jan 2024 23:19:00 +0000
ROA not after:            Thu 02 Jan 2025 23:24:00 +0000
asID:                     52580
IP address blocks:        179.191.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:57:f3:ba:13:ef:58:7b:99:73:20:2f:65:f6:65:64:ed:78:fd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Jan  4 23:19:00 2024 GMT
            Not After : Jan  2 23:24:00 2025 GMT
        Subject: CN=3082010A0282010100A7888058A8A5D2BE04FF8C2585831D4D1385E6D1822D9236D61652AB224BEA03A9418351841E0052EEC1AA4B6156F04615F3436555F1F8624D2895335269C8C37D4DBEE549B52A9B9973BCB9E9E045959E91681297B49A66BD188B5E0C8F2646F4BE2681C3BFCFF708A90F9D8BDB3177D6B8010E5732DDEE847704A843F5AC31BC0E2BEDBE346521D604A88FB0D51A03EA194553CC20A53D50ECCD2C713589C4FD594BE63DBB41F69D865FA467A9739ABB50430EC1F5F5407153229B33D74888FCE2B28048400E42426FD38DF90BF6FD0435666DC4887D0E8C3E19ACA2A018DD94526CF943E01CFC631535C64ABFE20DE0FD49DE88EE295468600B0FEC6760B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:80:58:a8:a5:d2:be:04:ff:8c:25:85:83:
                    1d:4d:13:85:e6:d1:82:2d:92:36:d6:16:52:ab:22:
                    4b:ea:03:a9:41:83:51:84:1e:00:52:ee:c1:aa:4b:
                    61:56:f0:46:15:f3:43:65:55:f1:f8:62:4d:28:95:
                    33:52:69:c8:c3:7d:4d:be:e5:49:b5:2a:9b:99:73:
                    bc:b9:e9:e0:45:95:9e:91:68:12:97:b4:9a:66:bd:
                    18:8b:5e:0c:8f:26:46:f4:be:26:81:c3:bf:cf:f7:
                    08:a9:0f:9d:8b:db:31:77:d6:b8:01:0e:57:32:dd:
                    ee:84:77:04:a8:43:f5:ac:31:bc:0e:2b:ed:be:34:
                    65:21:d6:04:a8:8f:b0:d5:1a:03:ea:19:45:53:cc:
                    20:a5:3d:50:ec:cd:2c:71:35:89:c4:fd:59:4b:e6:
                    3d:bb:41:f6:9d:86:5f:a4:67:a9:73:9a:bb:50:43:
                    0e:c1:f5:f5:40:71:53:22:9b:33:d7:48:88:fc:e2:
                    b2:80:48:40:0e:42:42:6f:d3:8d:f9:0b:f6:fd:04:
                    35:66:6d:c4:88:7d:0e:8c:3e:19:ac:a2:a0:18:dd:
                    94:52:6c:f9:43:e0:1c:fc:63:15:35:c6:4a:bf:e2:
                    0d:e0:fd:49:de:88:ee:29:54:68:60:0b:0f:ec:67:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:9C:C8:F2:71:2D:27:F0:66:8D:DE:FE:D7:DB:89:D6:5C:98:E4
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139302e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:57:17:dd:e4:b7:6f:f2:1a:b4:b4:bd:64:1c:11:b0:04:
         4a:99:d4:fa:c9:45:f8:c9:fc:6c:ac:54:e4:0e:06:df:70:3b:
         e5:a7:73:65:2a:47:e9:e0:62:24:57:08:60:2c:4c:0f:32:20:
         e2:b8:b7:e1:64:ed:8f:e8:36:35:47:a9:0d:17:1a:54:57:ad:
         49:b5:bd:49:c1:22:8d:67:6b:97:d2:9c:46:9f:50:bd:9e:eb:
         95:87:ad:e2:de:c3:34:33:38:75:ab:ce:0e:72:c5:c0:4b:74:
         c4:7b:9b:90:0d:da:96:2f:00:b6:7b:21:ce:43:4c:e9:92:ad:
         c2:46:0d:db:0d:61:54:dc:0a:8b:52:b8:bb:c1:c1:a2:a8:76:
         1f:de:01:d0:8b:8c:cb:fa:b9:c3:18:43:15:f7:2c:03:4a:ca:
         d2:92:58:e9:5d:07:71:5a:21:1f:a2:95:43:49:a9:ab:97:91:
         a3:b3:91:48:0f:cc:ae:0d:3f:18:ee:44:9e:bc:bf:c3:72:40:
         65:09:7f:b1:de:ff:18:d8:7e:88:55:31:4f:7f:85:e9:79:cd:
         6f:d2:59:b1:aa:11:69:2b:68:04:07:b7:55:61:fc:94:00:e1:
         6f:c8:33:aa:98:f1:7b:4b:76:f4:eb:6d:3b:69:11:53:40:96:
         1b:23:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org