Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
File:                     3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          GkhDsuTuFRckFGTp20xi9WaafdhzcuOfErQbnS76fgA=
Subject key identifier:   5C:37:FE:A8:FD:1E:B2:54:09:77:13:AE:E2:D9:C2:9A:58:C5:2B:7F
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       4218203A8156AF07AC9C29990B6A5096E38E74DB
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:41:29 +0000
ROA not before:           Sun 11 Dec 2022 18:36:29 +0000
ROA not after:            Sun 10 Dec 2023 18:41:29 +0000
asID:                     262847
IP address blocks:        179.125.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:18:20:3a:81:56:af:07:ac:9c:29:99:0b:6a:50:96:e3:8e:74:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:36:29 2022 GMT
            Not After : Dec 10 18:41:29 2023 GMT
        Subject: CN=5C37FEA8FD1EB254097713AEE2D9C29A58C52B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:99:dc:12:29:e5:02:50:3e:77:c5:15:aa:
                    b4:70:27:46:d2:bc:c3:8b:f3:28:1d:59:a2:25:3a:
                    b2:14:ff:a6:ca:ee:7c:b3:f5:e6:73:7d:42:13:a3:
                    49:32:52:eb:f0:ec:f7:8c:23:78:46:21:e7:c8:ad:
                    84:22:da:5f:b9:36:47:a8:cb:f2:df:f8:0a:52:06:
                    d0:f5:7e:5f:be:f3:cc:33:00:f2:9f:34:1d:49:ac:
                    de:c3:a8:fb:b6:f5:e2:f0:ec:e7:b6:c7:e2:cb:bb:
                    e9:53:a5:b1:11:19:48:4b:2b:3c:fa:ed:98:d9:ea:
                    10:3f:5c:53:7d:e3:54:e0:60:4e:b5:fe:58:25:1f:
                    bb:8b:0a:9c:f3:92:e0:61:d2:c8:23:fe:0d:2f:71:
                    17:c5:96:7a:0b:7e:4f:17:be:b5:41:0c:de:63:bf:
                    be:75:69:1a:c2:bc:a4:30:da:ab:b5:eb:25:98:59:
                    d1:af:f9:48:6f:e3:2e:5d:d4:89:53:bf:a6:11:fa:
                    6b:65:e6:bd:24:2f:77:dd:7b:d8:b5:70:74:2d:95:
                    6f:84:82:de:4a:c9:7b:06:1a:d6:bf:37:64:94:ab:
                    55:b8:fa:0a:c0:5a:ff:ec:c5:1e:50:36:84:1c:66:
                    b5:4f:01:81:04:39:39:89:99:7d:e1:7c:35:ec:a5:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:FE:A8:FD:1E:B2:54:09:77:13:AE:E2:D9:C2:9A:58:C5:2B:7F
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:0b:49:b5:88:04:6a:f8:86:76:50:ad:04:99:0c:10:2d:
         a6:9e:33:d3:f2:93:10:dd:6d:9e:8b:c0:22:82:93:e2:e0:0b:
         ab:7d:8e:63:02:30:ad:a0:3c:06:e4:2f:81:32:b3:8b:ba:73:
         41:62:9c:b9:59:e5:d2:e3:35:6e:67:5e:0d:ef:b5:45:80:31:
         38:e3:8e:44:72:03:f5:79:4c:47:f6:e9:08:14:1a:64:bb:bf:
         00:0c:d6:a8:c5:20:4b:b0:b2:ce:10:35:aa:db:0a:de:8c:e0:
         3b:d2:89:bf:d7:9a:17:e7:6f:a8:70:d5:46:59:88:a5:b6:b2:
         43:f7:bb:06:af:e3:5c:5d:b1:82:fc:d1:58:50:b0:c2:84:fc:
         a1:a5:1d:33:21:8e:e8:1c:ab:e7:0f:01:c5:6b:ab:47:2d:30:
         62:be:b2:71:64:44:72:dd:6c:9e:c5:84:9a:11:5b:cd:67:d0:
         36:09:f1:64:77:13:32:5c:75:d1:ca:bc:2b:50:71:e8:dc:e6:
         9d:cd:cd:ec:0c:d3:6a:f4:5c:24:5d:65:c8:11:b2:6d:f9:89:
         9a:23:75:36:e2:92:57:df:4b:87:de:ef:b5:d2:d1:c0:75:b1:
         37:19:57:cc:da:ba:2b:f8:09:c7:61:f2:43:b1:1b:ef:7d:26:
         1f:2c:af:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQhggOoFWrwesnCmZC2pQluOOdNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU5ODI1QkZGM0VDQTY0MjQ1QjY4RkFFMDdDRUVDQkMy
NUUzNTUwMDAeFw0yMjEyMTExODM2MjlaFw0yMzEyMTAxODQxMjlaMDMxMTAvBgNV
BAMTKDVDMzdGRUE4RkQxRUIyNTQwOTc3MTNBRUUyRDlDMjlBNThDNTJCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDleJncEinlAlA+d8UVqrRwJ0bS
vMOL8ygdWaIlOrIU/6bK7nyz9eZzfUITo0kyUuvw7PeMI3hGIefIrYQi2l+5Nkeo
y/Lf+ApSBtD1fl++88wzAPKfNB1JrN7DqPu29eLw7Oe2x+LLu+lTpbERGUhLKzz6
7ZjZ6hA/XFN941TgYE61/lglH7uLCpzzkuBh0sgj/g0vcRfFlnoLfk8XvrVBDN5j
v751aRrCvKQw2qu16yWYWdGv+Uhv4y5d1IlTv6YR+mtl5r0kL3fde9i1cHQtlW+E
gt5KyXsGGta/N2SUq1W4+grAWv/sxR5QNoQcZrVPAYEEOTmJmX3hfDXspdENAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXDf+qP0eslQJdxOu4tnCmljFK38wHwYDVR0j
BBgwFoAUJZglv/PspkJFto+uB87svCXjVQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC8yNTk4MjVCRkYzRUNBNjQyNDVCNjhGQUUwN0NFRUNCQzI1RTM1NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1OTgyNUJGRjNFQ0E2NDI0
NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzEzNzM5MmUzMTMyMzUyZTMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzfSAwDQYJKoZIhvcNAQELBQADggEBADDJC0m1
iARq+IZ2UK0EmQwQLaaeM9PykxDdbZ6LwCKCk+LgC6t9jmMCMK2gPAbkL4Eys4u6
c0FinLlZ5dLjNW5nXg3vtUWAMTjjjkRyA/V5TEf26QgUGmS7vwAM1qjFIEuwss4Q
NarbCt6M4DvSib/Xmhfnb6hw1UZZiKW2skP3uwav41xdsYL80VhQsMKE/KGlHTMh
jugcq+cPAcVrq0ctMGK+snFkRHLdbJ7FhJoRW81n0DYJ8WR3EzJcddHKvCtQcejc
5p3NzewM02r0XCRdZcgRsm35iZojdTbiklffS4fe77XS0cB1sTcZV8zauiv4Ccdh
8kOxG+99Jh8sr3I=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:09 2025 by rpki-client