Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          /0QUD9Qf2hXo/Yi1utGuOtWco8n2ZG+o+GUscCkr1q4=
Subject key identifier:   6C:3E:99:F9:4E:62:92:0E:92:EF:12:9F:30:8A:12:49:3C:4E:D7:FB
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       73963FBE123FD441DC7FB9A901A78B557590DA35
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:38:20 +0000
ROA not before:           Tue 18 Mar 2025 13:33:20 +0000
ROA not after:            Tue 17 Mar 2026 13:38:20 +0000
asID:                     263612
IP address blocks:        179.189.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:96:3f:be:12:3f:d4:41:dc:7f:b9:a9:01:a7:8b:55:75:90:da:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:33:20 2025 GMT
            Not After : Mar 17 13:38:20 2026 GMT
        Subject: CN=6C3E99F94E62920E92EF129F308A12493C4ED7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:95:7f:a5:0a:d4:1d:0a:0f:6a:c6:1f:ae:
                    f3:c1:08:00:5a:43:30:4b:44:a8:8e:76:59:2a:64:
                    f5:c2:cf:5e:89:94:c7:16:7d:6c:2d:14:cd:f1:9e:
                    f9:e4:6e:81:a0:cc:f2:b6:0b:8d:d5:f5:a9:0a:b1:
                    dd:7e:b2:73:31:2c:fa:ea:88:97:47:69:fe:a3:57:
                    ee:4b:57:78:3b:77:8d:68:25:af:b2:5e:d8:d8:ab:
                    9e:e3:9a:d7:02:b3:ad:30:48:cb:17:79:bf:ed:ba:
                    04:97:d2:fe:ad:79:6d:09:7f:06:4b:c7:7b:91:8d:
                    5e:e1:7b:f2:89:fb:46:e6:07:7f:c5:85:ae:18:1b:
                    69:9d:33:dc:43:f1:c9:cb:9e:5a:fd:de:c3:77:95:
                    47:09:20:ff:2c:85:f7:df:45:9e:52:5f:aa:fc:a0:
                    4c:0e:dd:9e:29:7d:be:af:51:c7:69:88:e0:6a:02:
                    be:44:af:85:7a:1f:cc:b0:e7:2e:ab:58:2e:0b:a2:
                    b0:05:58:52:c9:e4:b4:39:97:e9:3d:f3:9f:2b:59:
                    21:e5:2a:3c:3a:f4:3b:ea:17:dc:9d:4b:3d:a5:c1:
                    5b:da:a7:1e:6d:08:45:9a:e0:ca:01:b3:73:54:2a:
                    ab:cf:ea:68:9f:d5:5d:f4:ab:9d:a7:d2:ec:e8:34:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3E:99:F9:4E:62:92:0E:92:EF:12:9F:30:8A:12:49:3C:4E:D7:FB
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:e5:97:e3:06:43:7a:9f:7f:01:91:35:6a:70:66:86:b3:
         be:2e:09:4d:98:d8:23:ba:bc:fb:fb:47:ff:96:fb:1b:ac:a8:
         50:0f:6f:4c:45:c9:9e:e2:52:df:23:91:23:84:25:ae:38:21:
         5f:a1:47:1b:b6:52:84:16:d6:e0:2d:28:6e:bd:59:2c:be:59:
         8a:fb:ee:57:f2:cb:bd:e9:70:69:d1:93:9a:e2:db:d9:09:89:
         13:b8:b4:b7:eb:98:19:23:2a:c3:10:01:be:80:ca:9c:0e:02:
         96:1d:43:62:b7:84:da:12:57:12:5a:34:97:ff:3d:fb:c6:23:
         36:17:a7:4b:df:37:0f:91:c5:7c:af:7d:b5:a6:fb:52:03:1b:
         2d:9d:58:6e:74:b8:af:6e:cd:3e:2a:e9:08:f2:26:19:c5:19:
         31:a7:0e:bc:db:0c:bd:db:40:11:59:96:01:fb:8a:3f:4e:1a:
         ae:fa:64:ce:01:64:bc:c6:94:c9:36:ff:9b:eb:df:da:7c:f5:
         bb:21:0b:3c:99:3f:17:97:2c:7c:ed:4a:f1:92:3d:00:6c:6b:
         de:32:f8:59:2a:a7:ac:29:37:80:01:11:52:1e:a6:a8:85:ef:
         52:ab:eb:b9:25:5c:16:cf:35:67:ad:30:da:0a:44:aa:34:9e:
         85:4f:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:21 2025 by rpki-client