Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36392e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e36392e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          LbOI+RxCi2JBzubryPgSDobGSRuej+NEJITpbtRH+Dk=
Subject key identifier:   FC:3A:5F:F8:27:4B:81:91:F9:E2:19:97:49:1E:96:E5:81:91:ED:A6
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       4508E149B906FCE36CADE6DBF4B136A8ADB0D624
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36392e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:26 +0000
ROA not before:           Mon 13 Jan 2025 14:12:26 +0000
ROA not after:            Mon 12 Jan 2026 14:17:26 +0000
asID:                     262988
IP address blocks:        179.125.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:e1:49:b9:06:fc:e3:6c:ad:e6:db:f4:b1:36:a8:ad:b0:d6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:26 2025 GMT
            Not After : Jan 12 14:17:26 2026 GMT
        Subject: CN=FC3A5FF8274B8191F9E21997491E96E58191EDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:25:5c:8f:1e:66:be:6f:15:29:66:85:c8:
                    8f:07:2c:db:d7:44:fa:ae:31:ff:3a:7c:f8:6c:1c:
                    56:01:3c:20:62:42:eb:ee:5c:37:3d:15:c5:8d:a2:
                    db:e0:c0:42:27:16:78:84:f0:6b:fd:80:60:f0:d2:
                    4b:80:84:24:2e:d4:ac:12:11:28:1a:57:69:bd:42:
                    03:95:1a:5f:bd:db:17:6f:0e:fa:57:79:ff:70:2b:
                    49:64:19:45:13:fa:77:62:e1:13:77:f9:5e:7a:ff:
                    c7:ac:0d:93:8f:b7:f3:85:69:82:b4:3f:b8:fd:d4:
                    ac:2c:bf:23:88:9c:d4:0b:11:e2:5e:46:4f:90:b4:
                    16:4e:68:a9:70:f5:b6:a7:0e:98:9a:95:03:44:b0:
                    6e:1a:cf:ad:b6:ee:b9:53:9a:a4:3a:c3:d1:3b:e0:
                    1e:68:5d:25:fa:1e:99:e3:62:cb:06:d4:e0:f1:6c:
                    44:0c:bc:57:4c:48:3c:c2:c0:6a:8f:ff:e2:5d:17:
                    cc:ca:5e:4d:8d:3d:55:1e:49:f8:e7:28:2a:f1:6e:
                    18:31:45:9c:65:5d:ed:e2:c2:b5:87:fa:cf:50:2f:
                    d5:ba:b8:ff:16:f5:58:c8:8c:9f:80:8e:14:79:bd:
                    af:11:1e:7d:cf:5d:67:8a:04:8a:2c:46:f0:3f:bc:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:5F:F8:27:4B:81:91:F9:E2:19:97:49:1E:96:E5:81:91:ED:A6
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36392e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:d8:db:ac:65:c2:b3:df:31:f0:9c:de:3c:b0:14:84:6e:
         ad:b3:ed:6a:61:0c:07:8b:33:5b:b8:79:e0:ea:dc:ca:20:ee:
         29:a4:48:e9:34:5f:ff:9d:12:8c:93:ff:58:a7:aa:1a:21:5c:
         30:7b:6d:d9:b7:0b:ea:89:b6:86:4e:b8:5a:83:13:82:db:bb:
         1d:cf:50:9a:83:85:10:9a:39:89:d5:42:0e:5e:4c:70:a4:d3:
         32:46:87:15:04:c8:be:0d:16:ae:0e:8a:a6:ac:b9:7f:c7:4d:
         60:5c:c0:7a:e4:0e:86:f6:98:6d:a0:e3:70:74:97:f9:9e:fd:
         c7:5b:b8:86:a5:c3:f8:ff:1e:43:20:a4:55:d0:7f:a7:78:1c:
         54:ab:75:47:7d:0a:e5:23:8c:3f:56:21:55:73:b5:6e:e5:a9:
         b5:04:2e:06:b8:60:3c:d7:e7:69:62:c7:83:8c:cd:2d:b3:87:
         69:5c:16:94:dd:7a:23:10:5e:a7:1b:66:01:ae:b7:c6:63:06:
         15:1d:f2:2a:17:87:83:7f:39:f1:8e:d5:9d:b3:d9:fd:37:c6:
         39:62:7a:4c:22:20:d7:1f:78:03:8a:3a:be:a3:eb:c2:d7:22:
         81:b1:bd:0f:50:0e:37:9c:da:a8:52:09:10:7e:59:77:1f:51:
         0f:55:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:09 2025 by rpki-client