Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          wvfk9x0CLZBzn/NRDmdpQddgIRo0RkYCEMuY+RdPQhM=
Subject key identifier:   8C:E2:C3:42:AE:D3:0A:BB:56:5B:43:5C:A6:95:D6:7B:76:8B:12:37
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       619717D83CD8668A11818EA79733F5B6FBE9BA20
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:38:04 +0000
ROA not before:           Tue 18 Mar 2025 13:33:04 +0000
ROA not after:            Tue 17 Mar 2026 13:38:04 +0000
asID:                     263612
IP address blocks:        179.189.120.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:97:17:d8:3c:d8:66:8a:11:81:8e:a7:97:33:f5:b6:fb:e9:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:33:04 2025 GMT
            Not After : Mar 17 13:38:04 2026 GMT
        Subject: CN=8CE2C342AED30ABB565B435CA695D67B768B1237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:88:bf:77:d6:f7:d9:f3:5a:34:a8:0c:c8:
                    b1:9e:92:2b:d0:06:eb:1b:bd:65:89:fc:48:fa:64:
                    8c:1c:14:cb:b7:14:a8:2a:79:b4:ce:56:59:38:6e:
                    98:b3:3d:02:a0:00:e6:cc:9f:0c:f1:36:a4:e7:1b:
                    eb:d7:59:03:e4:24:97:86:b6:aa:b2:df:5e:f3:79:
                    0b:2d:13:4e:3f:0e:68:6e:cb:ab:a1:6b:b9:af:ee:
                    17:63:39:b0:b1:3b:35:f7:3d:c4:5e:a6:e9:ce:ac:
                    54:d2:ce:d2:d7:c0:e3:4a:aa:87:b6:0e:4a:43:fc:
                    71:4b:92:2d:b9:c1:af:12:0d:7c:12:59:91:5b:b1:
                    37:3f:40:8d:91:16:3f:33:3f:d2:56:fc:f9:1e:17:
                    cb:13:d4:e1:b6:77:c1:65:7c:98:d0:ea:1c:6c:d5:
                    ea:bb:be:89:9f:f4:b9:de:a2:3a:0f:f8:61:6f:4f:
                    b5:5b:c7:fe:d2:3f:4f:20:53:d0:cc:78:e2:2a:2a:
                    b6:3e:4a:a7:94:34:40:3c:5f:27:5c:32:1b:b9:af:
                    27:fa:6f:82:f0:1f:e9:33:cf:22:dc:96:51:88:5f:
                    61:b1:8a:a6:e6:27:e6:1f:03:3e:7b:59:3b:da:82:
                    46:0a:a4:0a:29:3f:5f:64:7b:ab:c5:60:6f:8c:91:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:C3:42:AE:D3:0A:BB:56:5B:43:5C:A6:95:D6:7B:76:8B:12:37
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132302e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:f6:6a:f2:1c:b8:eb:99:f7:76:56:77:ae:51:09:5d:27:be:
         fe:0e:c7:b5:c3:4c:4e:67:00:1a:56:57:4e:1e:d4:1b:43:42:
         71:b5:28:b8:8e:a4:a2:4e:d6:5e:a4:b4:69:fa:70:3f:23:dd:
         15:57:71:df:1d:54:6e:e8:e8:b7:53:36:b2:9b:02:00:37:82:
         fc:0d:ee:3e:1a:5a:dc:ce:52:73:a1:76:87:4d:8c:c2:fd:f9:
         f4:d3:ec:93:55:15:47:b5:e4:b9:08:6d:bd:a5:8b:ac:ae:c4:
         17:c7:b8:16:d9:e8:e1:47:e9:41:97:c6:dd:86:42:1b:96:58:
         3a:5b:d5:d5:b4:27:73:5e:e2:f7:6b:52:a9:cd:6c:d2:f8:51:
         bd:74:d1:e2:e3:30:d7:c6:28:a6:f6:b9:f1:84:b9:f4:28:bb:
         2e:b0:ca:d0:94:92:1e:b2:c4:2e:d8:eb:7c:cb:6f:9a:83:c8:
         07:eb:1a:df:f1:18:18:8d:48:e6:67:e2:66:de:99:0a:ec:8b:
         77:bc:a7:0d:e3:bc:90:84:e0:d0:20:de:b4:ae:ba:e8:4f:73:
         f3:6a:84:e7:ae:ef:b6:f7:6d:bc:e6:54:a2:48:ea:99:d4:85:
         ae:63:f8:ec:39:1b:b8:91:75:e0:16:8d:34:b7:1e:ee:57:7d:
         24:7d:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:45 2025 by rpki-client