Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3234203d3e203532353830.roa
File:                     3137392e3139312e3139312e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          tk0RBrNBnqFWebEJuCb31EmkdldDtU0r8Y0JdCp4giU=
Subject key identifier:   88:8C:22:FB:A5:18:8F:54:C0:FE:A8:E7:30:0E:B0:D5:7D:C3:B5:8E
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       5E0FB669EE5A68DCDE93DEA7328EE21A3BFF5AC5
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3234203d3e203532353830.roa
Signing time:             Tue 09 Apr 2024 21:48:00 +0000
ROA not before:           Tue 09 Apr 2024 21:43:00 +0000
ROA not after:            Tue 08 Apr 2025 21:48:00 +0000
asID:                     52580
IP address blocks:        179.191.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:b6:69:ee:5a:68:dc:de:93:de:a7:32:8e:e2:1a:3b:ff:5a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Apr  9 21:43:00 2024 GMT
            Not After : Apr  8 21:48:00 2025 GMT
        Subject: CN=3082010A0282010100D10DF49841B369627DAFE23259CAEE0730CE34B8D6A659F9AABEBBB8C1C4CF58F792891B35C43345D281EAD114DF2C6F5E0C1088167F640211F8783E3EA77E6BEDACC0B6A33A1ABD0D487BC1CCFFBC2DBA0B81C105CFD037F9C6DDB7D99D18110450002FB51ABC38C27EDCAD67577EE617D1623B7D02D887CCA19D77400FCF1E32A241D350F481C90829650A6B3A3FE2174107088C10D81ED68791E462FF0F18386CFCBECA2CB9D1A64CB8238A1D408AE68C4CF9454973D173B2AB6B5492ADAB76F131336A9600FE457301DAF70B656F10332F71B9602A8B51F095330AFB59D608B30002FB8A3A9E743B5F11661B68E162840C6577A3522903140AFB000AEA2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:f4:98:41:b3:69:62:7d:af:e2:32:59:ca:
                    ee:07:30:ce:34:b8:d6:a6:59:f9:aa:be:bb:b8:c1:
                    c4:cf:58:f7:92:89:1b:35:c4:33:45:d2:81:ea:d1:
                    14:df:2c:6f:5e:0c:10:88:16:7f:64:02:11:f8:78:
                    3e:3e:a7:7e:6b:ed:ac:c0:b6:a3:3a:1a:bd:0d:48:
                    7b:c1:cc:ff:bc:2d:ba:0b:81:c1:05:cf:d0:37:f9:
                    c6:dd:b7:d9:9d:18:11:04:50:00:2f:b5:1a:bc:38:
                    c2:7e:dc:ad:67:57:7e:e6:17:d1:62:3b:7d:02:d8:
                    87:cc:a1:9d:77:40:0f:cf:1e:32:a2:41:d3:50:f4:
                    81:c9:08:29:65:0a:6b:3a:3f:e2:17:41:07:08:8c:
                    10:d8:1e:d6:87:91:e4:62:ff:0f:18:38:6c:fc:be:
                    ca:2c:b9:d1:a6:4c:b8:23:8a:1d:40:8a:e6:8c:4c:
                    f9:45:49:73:d1:73:b2:ab:6b:54:92:ad:ab:76:f1:
                    31:33:6a:96:00:fe:45:73:01:da:f7:0b:65:6f:10:
                    33:2f:71:b9:60:2a:8b:51:f0:95:33:0a:fb:59:d6:
                    08:b3:00:02:fb:8a:3a:9e:74:3b:5f:11:66:1b:68:
                    e1:62:84:0c:65:77:a3:52:29:03:14:0a:fb:00:0a:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8C:22:FB:A5:18:8F:54:C0:FE:A8:E7:30:0E:B0:D5:7D:C3:B5:8E
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:f4:a4:b5:dd:98:2d:e6:bb:25:3b:53:d9:d7:48:99:db:
         a2:99:bd:dd:79:c0:b6:cb:07:27:58:03:6b:0c:3a:24:78:7e:
         a0:89:9d:a3:19:34:40:a1:3a:53:ad:e1:c9:bf:19:0a:3c:74:
         eb:79:13:02:fa:0c:87:fe:15:04:de:51:de:40:c8:dc:f3:bd:
         54:97:e4:15:07:c5:ca:dd:17:78:cb:90:f4:a8:c4:a5:a9:35:
         f8:2f:3d:79:99:97:2c:d5:c4:8e:dd:c0:93:ab:ad:4f:12:aa:
         5b:88:0f:58:36:a8:eb:08:29:3e:77:21:53:fd:bd:dd:df:f1:
         eb:36:1f:2b:d7:00:3b:8d:e7:c0:96:6f:5b:c7:67:12:63:5d:
         32:0d:f7:68:01:11:70:a7:af:89:03:1f:fc:94:7a:5f:75:52:
         45:1a:f5:e6:c8:3d:06:ce:a8:41:ea:a0:00:7a:d8:2e:35:20:
         f5:5f:bd:d5:ab:b0:33:e0:7c:ad:22:cd:b2:90:75:3e:2a:65:
         78:4a:23:ba:c2:47:d3:cd:7c:bd:05:16:b9:d7:5a:83:d7:87:
         9a:70:83:df:5b:60:89:ae:75:a4:af:c9:df:68:7d:de:51:f7:
         2c:90:55:70:1c:69:e1:74:ab:85:1c:79:f3:f1:0a:77:73:a9:
         a8:07:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:56:17 2025 by rpki-client