Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37302e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37302e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          696MHvZ7+lieHa3XPLvy1obuOD1ZYa0llS0DqRXPFKc=
Subject key identifier:   D1:BB:0F:76:32:42:BA:23:EC:F3:02:D6:77:F1:8F:0A:30:E1:3D:D7
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       7A6AC3EBFBDBC7FA77793DB999388C002111E925
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37302e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:18:17 +0000
ROA not before:           Fri 14 Feb 2025 19:13:17 +0000
ROA not after:            Fri 13 Feb 2026 19:18:17 +0000
asID:                     52580
IP address blocks:        186.195.70.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6a:c3:eb:fb:db:c7:fa:77:79:3d:b9:99:38:8c:00:21:11:e9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:13:17 2025 GMT
            Not After : Feb 13 19:18:17 2026 GMT
        Subject: CN=D1BB0F763242BA23ECF302D677F18F0A30E13DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:8c:96:f5:20:db:8c:f4:25:ab:a0:4d:b8:
                    29:c3:e8:f4:13:a3:6d:0e:c2:16:46:77:0b:45:a7:
                    0c:50:c6:c8:60:ba:9f:b0:f7:3c:3c:c8:36:77:41:
                    69:44:a3:7f:20:bb:4f:7e:f9:7c:3b:7f:d7:c6:db:
                    c7:91:58:c7:b9:62:89:84:34:6a:cf:62:88:0f:9d:
                    f5:1b:08:8d:f0:03:54:d2:ae:11:9b:54:24:e0:9a:
                    ca:08:dc:f0:4d:e9:fb:f4:2b:3e:6b:94:14:e9:f5:
                    7e:3e:c0:4a:39:a7:4b:7b:e7:0b:1d:d3:f7:3d:dd:
                    66:b7:c8:da:e2:a0:d3:4f:77:e0:cf:d4:07:fb:63:
                    01:f8:74:cc:c2:ed:f0:77:c9:22:75:9f:9b:b3:c7:
                    6b:24:f0:4b:77:48:9b:e7:a0:10:51:2e:e3:10:f9:
                    00:15:5e:94:51:89:fc:9f:d1:cf:3b:85:20:3a:38:
                    98:85:50:c1:53:69:ac:87:93:dd:2c:0f:10:a1:e3:
                    47:3c:41:b4:77:90:fd:a8:64:4d:69:e8:fc:e6:40:
                    09:ac:49:71:0b:b9:e9:69:51:1a:5e:da:cf:47:f6:
                    c3:73:88:97:b5:de:d3:3f:c7:4f:ef:b7:89:78:39:
                    15:68:91:15:48:28:17:ba:90:19:84:d6:85:bc:a8:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BB:0F:76:32:42:BA:23:EC:F3:02:D6:77:F1:8F:0A:30:E1:3D:D7
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37302e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:8d:cb:77:8c:5b:7e:74:68:b4:5c:af:65:06:e2:8d:e9:
         0b:2d:bb:2b:b4:ce:47:53:a6:64:58:ad:a5:2e:0a:df:e3:a9:
         bb:76:2d:ef:e3:09:98:c5:9b:a7:70:09:2d:8c:cd:0c:db:78:
         c1:31:74:7d:64:3b:c3:0f:ba:48:1d:c8:8b:86:e5:84:f5:f6:
         70:ba:fd:b5:93:ac:81:4c:eb:fb:1d:85:88:36:a4:2e:29:1d:
         33:75:93:f1:8b:18:5d:7b:79:19:92:35:fb:5f:75:2b:10:ff:
         1d:1e:e2:5a:7c:50:1b:03:87:a8:cb:ce:43:ab:89:35:f4:3b:
         a7:ed:f4:db:18:dd:a7:6d:10:64:5e:6c:6a:6c:05:0d:7c:82:
         88:d9:c5:9e:83:21:58:bb:ed:54:f1:1a:69:af:a4:fc:1b:eb:
         71:79:6f:7a:24:7f:aa:3a:2d:48:27:d0:72:81:f1:9a:0d:3f:
         a7:27:90:d2:a0:32:65:d6:ae:80:fc:f9:3e:2b:72:cf:95:c0:
         15:b1:8f:3e:b1:ca:b4:30:90:2d:76:0e:a3:1e:ee:88:c6:16:
         4e:85:02:4c:e0:68:60:05:ce:0e:e5:b0:58:4b:de:27:c9:37:
         d8:00:8a:f0:ff:8d:90:3a:de:59:7f:62:1a:0a:93:92:9d:d9:
         8e:d7:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:25:51 2025 by rpki-client