Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ob0ZX0VGIP1g0kG2aEKqdhxRltk09HdQNqgUi9dd4TE=
Subject key identifier:   73:E3:64:E0:C7:42:02:54:3E:C7:D9:81:0B:37:FF:CF:96:61:68:9E
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       4D53B84D04596CB5BDA5897C72F93F1BFEC6F94C
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 20:06:27 +0000
ROA not before:           Mon 27 Jan 2025 20:01:27 +0000
ROA not after:            Mon 26 Jan 2026 20:06:27 +0000
asID:                     52580
IP address blocks:        179.191.187.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:53:b8:4d:04:59:6c:b5:bd:a5:89:7c:72:f9:3f:1b:fe:c6:f9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 20:01:27 2025 GMT
            Not After : Jan 26 20:06:27 2026 GMT
        Subject: CN=73E364E0C74202543EC7D9810B37FFCF9661689E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:12:16:c9:8b:dd:68:32:97:26:c0:b9:7e:
                    2b:70:8a:11:6e:d1:ca:de:52:3a:71:5c:63:15:ba:
                    cc:59:3c:5f:4e:c3:d6:ce:c5:0e:14:c5:9f:4e:2d:
                    33:7e:aa:70:74:5c:f6:03:c1:05:64:41:a9:bb:b1:
                    bb:5a:72:e4:9d:5a:69:5e:e1:37:94:10:ca:3c:6d:
                    a2:4a:81:df:ab:3f:f0:aa:37:9e:1a:52:05:19:e1:
                    10:ac:00:12:d3:06:bd:c0:2f:b3:05:2b:6b:47:5f:
                    49:c1:40:08:b0:89:b6:ed:36:47:60:de:3b:f6:39:
                    5d:1d:6b:ad:d4:8c:d8:72:38:c9:a7:3e:34:9c:55:
                    7b:a8:d6:3f:1b:dd:f4:d1:01:8d:26:13:cd:db:1e:
                    17:5a:09:52:ce:df:2b:d8:e1:aa:d4:0d:11:1a:8d:
                    9e:5c:5c:6e:4c:51:d6:56:3a:af:6a:a2:87:6a:41:
                    79:aa:6e:5d:60:7e:fa:86:af:07:1e:49:80:db:5c:
                    bb:f8:29:49:c3:37:6a:5b:89:4d:f9:3e:35:3f:e6:
                    9c:d1:c4:c8:9a:00:16:62:83:b2:1a:ca:34:56:49:
                    86:6a:1f:64:34:7e:39:f7:29:1e:95:29:71:00:5f:
                    63:3e:d4:a0:ed:d9:7f:2f:e4:78:01:ea:fa:3a:d0:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:64:E0:C7:42:02:54:3E:C7:D9:81:0B:37:FF:CF:96:61:68:9E
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:f5:87:9a:8e:c8:62:bf:88:68:7e:d3:06:fb:a8:ec:08:
         b3:2f:38:cb:b1:1e:c4:b7:d9:03:c3:a0:7d:d7:f4:26:d9:26:
         2b:e1:b7:82:1f:68:24:2f:37:52:3a:d9:29:ee:0c:c7:46:b3:
         cc:95:e3:8b:1c:0c:d7:19:46:bd:84:c8:4a:24:9b:48:88:78:
         2a:74:63:9f:08:4e:7d:81:ee:dd:c0:c7:0d:95:af:64:db:6d:
         50:a0:7a:24:b7:28:38:7c:8d:3f:93:b3:f6:d1:7b:3a:3e:cf:
         ff:c6:e9:18:ac:70:d4:fc:7a:ef:80:d9:9d:d8:27:82:e7:4e:
         ae:89:dd:81:2e:ed:61:c3:57:a9:c2:ea:cf:9a:89:14:93:25:
         94:5d:4f:30:72:4e:36:f0:86:9e:f6:ba:ff:cf:1a:2f:35:3d:
         49:ee:31:e0:50:b6:02:42:b4:54:a8:c3:c9:7f:c9:d5:94:82:
         a4:47:af:48:1d:3c:16:86:19:fd:82:7b:ca:ac:19:a1:9f:32:
         54:cf:5e:99:ea:fe:30:b5:a8:47:88:70:78:14:79:c5:77:79:
         c6:f0:a2:73:e2:0d:83:6e:6c:21:ac:22:7b:e3:e3:3c:48:8a:
         7d:84:3d:ac:57:50:69:86:d6:c2:06:cc:4b:df:b1:14:69:43:
         36:49:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:04:29 2025 by rpki-client