Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          Ihz3vYR4xg4CeXKwltcopd07Q33DAAb26/y33k4EO3w=
Subject key identifier:   2C:4B:E5:BE:74:24:73:91:E7:9D:65:9E:4A:31:EF:D9:AF:E7:86:16
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       5F5325BE973F6904BCB4E6FE0EA39C194B7F8473
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:20:22 +0000
ROA not before:           Fri 14 Feb 2025 19:15:22 +0000
ROA not after:            Fri 13 Feb 2026 19:20:22 +0000
asID:                     52580
IP address blocks:        186.195.73.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:53:25:be:97:3f:69:04:bc:b4:e6:fe:0e:a3:9c:19:4b:7f:84:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:15:22 2025 GMT
            Not After : Feb 13 19:20:22 2026 GMT
        Subject: CN=2C4BE5BE74247391E79D659E4A31EFD9AFE78616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:66:85:ef:41:f5:4c:8a:ec:55:40:8b:2a:
                    5a:4e:06:ba:cb:57:81:d0:9d:e6:37:ac:44:f1:71:
                    e6:c1:cc:85:e3:7a:d0:1f:94:1b:4d:07:f0:aa:f3:
                    51:13:d7:16:8b:9c:3f:fa:bd:95:16:17:c4:42:6e:
                    05:74:2e:42:50:19:0a:e3:13:6e:34:0e:8a:6d:69:
                    48:8a:b6:01:67:cb:11:a2:4b:d0:73:b1:cc:be:d2:
                    77:84:84:f5:52:fd:82:fd:30:99:83:71:a7:59:a4:
                    b1:c8:ed:b4:b1:09:ed:60:40:d3:48:50:c0:99:9e:
                    dc:69:ea:e4:af:d1:eb:c2:a4:b4:ff:f4:75:8b:5a:
                    3b:ea:3f:7d:54:40:4c:d0:c4:4f:33:9e:c1:15:a9:
                    cb:85:f9:a4:c1:2c:e8:15:e5:8b:51:c3:0a:01:cc:
                    30:ef:8d:f3:97:9b:4d:96:00:3e:4c:28:0e:3d:4a:
                    a5:9b:6d:79:d6:52:eb:e8:7d:6b:83:b8:c3:78:dc:
                    af:95:c0:69:40:66:d6:e2:b1:43:2c:c3:a3:41:92:
                    af:4d:52:30:d6:f8:91:b1:9e:9e:da:bf:9e:30:6a:
                    a5:43:17:22:c8:f1:ef:8a:09:4a:35:75:ac:ba:51:
                    6d:91:59:74:58:54:36:84:57:f1:8b:9a:f4:47:83:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:E5:BE:74:24:73:91:E7:9D:65:9E:4A:31:EF:D9:AF:E7:86:16
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:5d:00:df:e5:68:a0:aa:26:00:fa:b0:b3:e3:8e:7c:2a:
         ca:8b:6b:a1:0d:51:f9:9a:ff:bd:96:b8:2c:15:0b:4e:70:6a:
         0c:73:7f:54:76:5c:ca:6d:2d:3a:cf:e8:a0:97:eb:d4:57:8a:
         76:65:d9:68:74:6c:1a:0e:d1:eb:16:94:45:da:d9:c8:3a:a6:
         61:1c:86:94:f0:15:b7:57:46:d6:6a:b8:bc:b7:93:6c:4d:22:
         cd:53:fc:12:75:f5:74:17:76:4e:c5:76:d0:4a:71:fb:5e:8a:
         de:d6:3a:33:69:d6:44:05:40:92:dd:5a:d6:d3:f8:7c:19:1e:
         43:36:21:5f:c3:0c:3a:45:09:bf:7d:a5:cc:18:bb:a5:c1:b0:
         79:8e:62:5b:58:ae:fe:1b:14:e9:57:ef:03:cb:11:41:fb:b4:
         8c:82:1b:b4:84:58:b8:ca:22:22:2f:16:8d:70:7b:2c:51:51:
         60:e3:40:f8:33:e9:13:77:16:36:95:be:12:e8:1a:39:54:d2:
         3c:c8:80:6e:a5:87:4f:fb:4d:f4:be:ef:0b:c1:07:27:bd:1c:
         d5:00:7e:d3:01:7b:16:5f:9b:2e:15:bb:43:16:c4:ea:cf:f9:
         3b:50:aa:77:f3:24:0f:81:de:59:d5:4c:c7:ac:00:ea:e8:93:
         af:bf:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:23:33 2025 by rpki-client