Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3139312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          3z37q/fcOhaLEDt6AtnSyOHYkcLsxCS+TpczN/41G1Y=
Subject key identifier:   2F:39:C4:5B:38:45:30:0F:E1:BA:31:DB:5C:25:58:2E:1F:28:A6:A7
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       090F36EBB4656BDD2C43C9E6D7DE3E9E0F4A0A53
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:17:29 +0000
ROA not before:           Fri 14 Feb 2025 19:12:29 +0000
ROA not after:            Fri 13 Feb 2026 19:17:29 +0000
asID:                     52580
IP address blocks:        179.191.191.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0f:36:eb:b4:65:6b:dd:2c:43:c9:e6:d7:de:3e:9e:0f:4a:0a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:12:29 2025 GMT
            Not After : Feb 13 19:17:29 2026 GMT
        Subject: CN=2F39C45B3845300FE1BA31DB5C25582E1F28A6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:d7:ff:15:15:79:0f:73:59:7f:cb:e4:84:
                    6c:73:43:50:bf:f8:87:a1:83:76:8e:e0:a2:49:75:
                    43:80:6b:1f:13:2c:13:f6:7a:66:1b:da:dc:89:f9:
                    58:48:a0:26:e5:ca:15:18:ec:e5:5d:c3:16:86:42:
                    a7:10:7f:27:30:61:0d:e9:38:56:e5:45:8b:77:59:
                    48:d7:90:68:94:78:a3:71:e8:e1:dc:14:44:a2:3c:
                    0b:1f:bf:da:9e:a6:d0:e0:c9:4c:29:91:73:1f:9f:
                    52:fe:9d:58:22:c6:7b:32:6b:93:7c:52:a0:c7:4f:
                    4a:c9:1a:b0:3b:a6:ac:d9:61:e0:8e:25:ba:c2:2c:
                    7e:30:c5:d3:65:dc:2b:0e:20:26:07:33:e5:51:e0:
                    ee:2a:67:b4:bc:37:4c:c3:10:e8:aa:86:2b:05:e6:
                    0d:8d:55:31:8e:75:e2:24:82:67:f1:00:88:11:31:
                    ca:79:0f:c6:58:e1:25:3e:74:ea:1f:c0:ad:8b:9c:
                    f1:99:92:53:1f:f5:3d:4e:7a:18:86:d5:4d:a7:30:
                    64:25:84:86:80:18:99:c8:b5:f4:fe:d7:b5:0e:81:
                    dc:36:0e:7c:61:61:5d:91:a3:d5:71:26:45:ab:51:
                    b9:15:d9:1c:79:a3:aa:6a:33:68:3e:aa:68:ef:f7:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:C4:5B:38:45:30:0F:E1:BA:31:DB:5C:25:58:2E:1F:28:A6:A7
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3139312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:91:44:4b:c4:c0:45:01:78:80:7a:a7:31:dd:3c:c7:7b:
         83:fb:dc:c3:97:28:c0:b1:b5:c8:9c:4b:11:7c:97:5a:91:5a:
         ec:59:32:4c:86:43:28:53:33:f1:13:a8:eb:32:fb:a6:f6:87:
         4e:76:a2:90:1d:96:47:e9:68:ea:f7:28:9c:e3:4b:dd:3b:56:
         ca:07:c7:9e:da:21:b2:69:71:d1:07:18:24:9a:0f:a3:05:92:
         55:4e:43:e9:14:4b:e1:3d:81:68:ef:43:a0:6d:25:91:33:d2:
         b6:62:2d:0a:fd:fe:84:41:92:be:ce:a4:a4:70:9e:f6:59:84:
         04:c2:e8:97:78:4c:db:32:59:b9:8c:30:d5:e8:d2:5d:fd:f6:
         76:4d:1d:f6:62:ad:80:50:cf:b1:67:9a:95:f6:db:49:5b:07:
         61:46:ff:e8:27:02:38:dd:67:4d:df:58:cb:8a:35:ba:e3:ae:
         ce:c8:27:76:8f:0a:56:74:88:e0:30:24:80:91:cc:35:9c:68:
         ee:8d:a8:97:dd:e2:41:0f:f6:9d:d6:b2:4a:a0:fe:38:3e:c1:
         41:97:7e:c1:61:a1:ca:c8:10:33:a2:eb:fa:cd:8a:1b:8b:db:
         35:58:a4:64:9a:6a:e8:e5:e1:5b:29:4b:c9:fd:35:0d:35:6c:
         22:cd:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:34 2025 by rpki-client