Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36362e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e36362e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          sX//BqyNw+Yk2Gy/2FtDqCu1WwZj/e8pn4tCPXdsf3I=
Subject key identifier:   B7:B0:13:89:B0:41:DF:CC:56:0F:E3:3B:65:65:7B:D2:A2:F5:D7:2A
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       6CFD256188ACD7819863F8BAA1BD5E8149344FC4
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36362e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:14 +0000
ROA not before:           Mon 13 Jan 2025 14:12:14 +0000
ROA not after:            Mon 12 Jan 2026 14:17:14 +0000
asID:                     262988
IP address blocks:        179.125.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:25:61:88:ac:d7:81:98:63:f8:ba:a1:bd:5e:81:49:34:4f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:14 2025 GMT
            Not After : Jan 12 14:17:14 2026 GMT
        Subject: CN=B7B01389B041DFCC560FE33B65657BD2A2F5D72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:18:0c:9c:14:52:f6:ea:19:f7:02:f7:f7:
                    ae:27:2c:59:a3:05:4c:cf:56:30:49:ab:f0:d4:4b:
                    2c:b4:1c:86:cd:56:cf:e1:97:de:e2:7c:38:15:bd:
                    b0:ff:95:ad:fd:45:28:62:58:26:fa:d4:be:77:1c:
                    8e:5e:fe:7a:19:be:d2:9b:1d:ac:e6:97:dd:4f:73:
                    3f:f2:23:94:7d:c8:d7:16:ee:a0:64:87:b4:37:e7:
                    63:6f:f3:d0:5d:33:1f:0b:d2:da:70:f2:d9:e0:bc:
                    33:df:95:7d:a7:e9:9a:3a:51:1d:5b:02:e7:6d:22:
                    02:65:ab:93:6c:b4:df:90:8c:4e:36:69:aa:50:0d:
                    78:49:b9:0c:15:6c:fc:fb:d0:1f:77:6d:46:53:a5:
                    24:d2:bc:5b:51:21:bc:02:53:0b:36:7a:9e:46:13:
                    fe:76:2d:06:f8:33:71:40:8c:1c:5a:8c:95:3b:a2:
                    49:26:18:0e:b9:63:f9:52:a1:12:18:ba:d8:1d:63:
                    f3:4c:5d:61:16:83:d9:79:a0:29:dc:8f:b0:f4:3d:
                    ad:86:1e:ab:12:29:52:26:c2:d1:a4:bf:b7:0e:51:
                    1c:b2:e8:7c:1d:d5:d8:94:a3:ee:3d:01:a7:65:cd:
                    12:72:1c:62:73:3c:ed:82:58:1d:2d:69:b6:fd:00:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:13:89:B0:41:DF:CC:56:0F:E3:3B:65:65:7B:D2:A2:F5:D7:2A
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36362e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:ae:60:1b:4a:d5:73:37:2e:af:b5:17:85:43:cc:9d:ed:
         73:92:cf:ed:be:d9:e3:63:c5:20:e5:69:50:c3:18:dd:26:86:
         5a:62:a1:25:7f:eb:6b:8f:9e:b8:77:99:0d:66:94:41:a7:5b:
         47:fd:37:11:fe:06:41:53:73:2b:f0:fb:b6:f3:d2:53:95:7e:
         99:cb:86:5f:42:4c:7d:5b:6f:37:64:18:57:71:d7:65:22:94:
         70:9d:3b:2d:0e:df:cd:84:cf:74:ae:a8:82:89:64:8c:b8:3d:
         29:7c:95:1a:cd:87:fa:62:3b:d9:b6:78:e4:51:ad:f9:ed:0e:
         67:b9:2c:63:1a:2d:18:0f:db:aa:9a:8c:b0:57:4d:0e:55:af:
         17:6c:55:25:c1:06:1b:fb:54:eb:1b:0c:e4:7d:68:4e:60:10:
         f0:e5:e1:86:b7:bf:79:f8:81:51:f5:d5:01:50:87:04:ae:e1:
         73:15:5b:93:00:11:1e:ac:aa:7e:e7:22:65:26:ee:c2:d1:2e:
         85:fe:fd:29:93:3c:98:4c:8f:3b:e8:24:96:65:b2:8c:dc:b6:
         05:29:04:f8:b1:4f:c1:16:4d:0a:fb:b4:15:2a:28:2b:3e:c0:
         e5:bf:1f:10:02:1c:3c:7e:4b:0c:68:5f:31:8d:e5:21:4a:9d:
         e9:83:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:07 2025 by rpki-client