Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37382e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          zj9UpGBUfaECqdTCdEOjSPeCxJhDlWV/S/AwKHHPxOc=
Subject key identifier:   3D:0E:53:CE:2C:70:0E:25:62:F3:2F:4A:56:C3:06:3F:BB:FA:8B:A0
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       56B828D2DD3D197AB0C390FB1B721C083AADC29B
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37382e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:22:04 +0000
ROA not before:           Fri 14 Feb 2025 19:17:04 +0000
ROA not after:            Fri 13 Feb 2026 19:22:04 +0000
asID:                     52580
IP address blocks:        186.195.78.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b8:28:d2:dd:3d:19:7a:b0:c3:90:fb:1b:72:1c:08:3a:ad:c2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:17:04 2025 GMT
            Not After : Feb 13 19:22:04 2026 GMT
        Subject: CN=3D0E53CE2C700E2562F32F4A56C3063FBBFA8BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:43:61:d1:6d:a2:36:aa:03:6a:de:88:1c:
                    10:15:c5:fb:f2:08:03:f4:3b:54:6d:11:3a:42:2c:
                    4b:9e:cd:01:3e:61:cc:f6:94:f6:de:f7:28:bd:f3:
                    c7:d2:62:d0:ff:92:e5:e3:5b:e1:4a:03:df:68:22:
                    6c:cf:68:de:2d:14:6d:a6:8a:de:3d:8d:72:4f:4e:
                    da:29:c8:57:e4:1f:a6:c7:11:7e:0b:d3:96:63:3f:
                    23:cb:64:18:3c:b9:f9:2d:56:05:6e:87:6d:6e:e8:
                    f1:42:59:3a:ae:d4:8d:57:e7:83:db:2e:8e:56:d5:
                    cb:55:de:48:cd:dc:85:af:9d:fc:c5:23:70:e5:58:
                    36:14:e6:75:3d:10:9f:1e:98:ad:ac:21:53:c0:df:
                    c6:73:dd:c2:de:9e:b6:2c:a1:28:ba:43:87:47:82:
                    ab:12:12:13:ef:c6:d7:5a:e9:70:2a:84:86:6f:a1:
                    7f:e3:e6:f0:47:24:7a:8d:5e:25:8a:7a:8c:cb:52:
                    11:89:b9:9c:11:1b:9b:65:ae:24:e5:c1:25:31:13:
                    93:cf:54:19:f8:d0:34:11:dc:28:48:90:94:51:6c:
                    c2:a3:b4:9e:8d:2a:c0:52:de:ae:bd:60:92:10:7b:
                    c4:ae:e4:98:9c:40:29:0c:fa:50:74:22:62:4d:be:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0E:53:CE:2C:70:0E:25:62:F3:2F:4A:56:C3:06:3F:BB:FA:8B:A0
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:81:e8:b3:e3:23:64:5e:c7:a0:91:dd:af:9e:fd:7b:99:
         76:51:d1:35:8e:02:7e:36:de:b1:e2:86:1f:4d:e4:c5:d2:b0:
         c8:56:78:96:9c:e0:59:7e:c8:8e:8e:af:45:6e:af:16:7a:b9:
         9c:f0:4e:06:67:92:33:ab:a7:57:f8:58:c0:08:d6:ed:35:45:
         6d:c2:ae:05:a6:9f:f4:40:05:28:2d:ff:6c:14:e0:ed:10:56:
         83:3a:63:33:29:52:15:16:fa:54:20:1b:58:44:84:3e:dd:26:
         b4:c3:1b:bb:38:76:63:08:3a:22:62:23:8d:ec:42:a5:80:fa:
         7f:e2:70:13:10:ce:c5:2a:65:9a:2f:a2:68:15:68:68:17:1d:
         3f:76:00:ec:50:0f:d0:17:b0:bd:6b:fa:10:8e:08:3c:f7:ed:
         d1:42:e8:ec:a0:b1:14:61:0d:c0:11:80:c6:f8:71:db:07:58:
         f4:84:c8:b5:96:10:22:05:a1:5c:9b:66:cf:a3:e1:2a:48:71:
         f1:1c:0f:ef:89:04:c4:de:ca:53:12:1e:41:f6:2e:d3:67:7f:
         db:47:68:38:9c:be:ca:c4:b8:4c:8e:97:e1:8c:19:0f:4a:e7:
         d1:f1:07:1d:54:ab:35:93:28:9b:9c:a8:49:28:5a:61:2b:70:
         ea:54:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:01:52 2025 by rpki-client