Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131382e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3131382e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          V0ztD/OxDE743NUOwOM2e8jp/SmxLPGS1K4mlJsb2cY=
Subject key identifier:   34:25:60:F2:46:71:56:AA:A5:09:3A:FB:D0:37:39:5F:9E:F9:BD:96
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       025ED9249978E5FC396E0EB8EF4263F6CB028AC4
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131382e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:37:33 +0000
ROA not before:           Tue 18 Mar 2025 13:32:33 +0000
ROA not after:            Tue 17 Mar 2026 13:37:33 +0000
asID:                     263612
IP address blocks:        179.189.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:d9:24:99:78:e5:fc:39:6e:0e:b8:ef:42:63:f6:cb:02:8a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:32:33 2025 GMT
            Not After : Mar 17 13:37:33 2026 GMT
        Subject: CN=342560F2467156AAA5093AFBD037395F9EF9BD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:ae:ec:91:38:8f:c3:5d:79:ab:00:04:fa:
                    1f:b2:b4:45:a9:f1:69:88:d5:cb:d0:58:06:4d:8f:
                    98:9b:f4:e5:7c:07:a8:2f:90:ce:b0:c1:0f:37:50:
                    16:e5:54:ef:19:9f:09:c7:13:66:a4:13:6d:c7:c3:
                    28:44:7c:ed:59:a6:b8:82:bf:53:97:c0:e2:a0:ea:
                    cf:b7:d5:84:08:aa:b1:e8:6c:fb:b1:73:da:b7:a8:
                    06:32:31:43:4d:6f:34:c6:ce:00:3b:fc:bf:d9:52:
                    a4:70:2f:50:f8:e4:c3:0d:42:26:a2:07:22:4b:3c:
                    d2:98:e1:42:55:b9:01:19:63:8d:89:ad:0f:09:62:
                    a6:fa:c4:0b:22:c8:a3:01:8b:1f:17:25:a5:ce:46:
                    f7:ac:ed:c2:b9:90:63:67:2a:8a:2b:0c:4b:a5:e1:
                    59:9f:dd:40:ed:38:0d:c6:34:a1:7f:73:99:e0:c2:
                    5c:58:a4:ce:b1:39:f4:b6:b0:16:5f:8c:3e:28:48:
                    ef:e7:5b:f3:20:51:64:a2:10:cd:07:3d:44:27:a6:
                    45:8b:9e:59:62:15:16:5e:2e:4a:59:21:89:45:59:
                    2f:ce:cd:d2:c5:46:9d:7c:7c:97:ce:82:a4:c9:c1:
                    34:a5:85:ed:31:2a:6e:4c:91:f7:e9:af:3b:aa:7f:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:60:F2:46:71:56:AA:A5:09:3A:FB:D0:37:39:5F:9E:F9:BD:96
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131382e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:db:91:57:c9:39:00:88:e3:1d:be:d3:f9:cd:cb:16:a4:
         73:65:f9:e8:d1:36:10:02:53:8c:63:56:00:63:2e:00:0a:94:
         c6:4d:0a:c3:7f:92:95:55:68:8c:7b:84:05:6d:80:f7:78:79:
         c8:42:22:4c:c0:8b:41:20:45:cb:5b:4d:cc:42:1f:11:40:a4:
         1b:fd:b1:4e:66:e5:30:84:21:7c:52:ec:84:7f:d2:b6:da:1d:
         f5:50:8d:6e:94:98:be:d4:3b:b4:ae:2a:c3:5a:a1:75:2a:6d:
         a5:25:33:56:56:00:a9:e0:fc:58:ee:c8:53:58:a2:e6:e3:35:
         2a:4c:6f:d8:2c:62:e9:bb:7a:b6:56:a4:3b:7c:79:e2:17:33:
         c2:5e:3d:87:f7:e6:56:3f:f0:4f:d6:f3:24:20:ae:f5:5a:92:
         88:50:04:93:8d:12:52:71:8a:63:88:49:c1:df:f9:bb:ae:0e:
         59:8d:4f:0f:1f:ca:3a:75:4a:1e:d3:70:75:00:8f:74:0a:e0:
         1a:a8:3a:0c:8a:b2:60:5f:27:7f:53:75:db:74:7e:35:24:2d:
         cf:9c:99:59:52:fa:a2:f9:e4:37:38:ff:34:61:97:ff:dd:f0:
         a3:68:d3:01:12:54:c8:17:af:63:ac:d9:e9:20:e7:2a:70:e4:
         42:34:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:06 2025 by rpki-client