Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          0SOmzWWqcMFQXUEIHDD4FHFOTtMJx+28/KpgRxAgoyA=
Subject key identifier:   BF:00:7D:75:6C:01:17:04:B0:D1:0B:44:5E:12:84:08:78:C8:43:7B
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       1D62C10B91F2442F8F88B55938140C254A165CF0
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:25 +0000
ROA not before:           Mon 13 Jan 2025 14:12:25 +0000
ROA not after:            Mon 12 Jan 2026 14:17:25 +0000
asID:                     262988
IP address blocks:        179.125.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:62:c1:0b:91:f2:44:2f:8f:88:b5:59:38:14:0c:25:4a:16:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:25 2025 GMT
            Not After : Jan 12 14:17:25 2026 GMT
        Subject: CN=BF007D756C011704B0D10B445E12840878C8437B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:07:f7:d0:41:04:64:5f:db:09:e2:cc:b2:
                    5f:47:4a:93:6b:d1:7c:49:7d:86:b6:ae:a4:ec:cd:
                    18:ed:66:e9:2d:eb:ff:d7:63:14:26:4a:92:24:e5:
                    40:a4:65:b7:b8:40:76:f3:c0:7a:0d:31:f2:30:bf:
                    60:ef:9f:8a:96:16:03:39:c1:8f:ae:3f:13:ce:37:
                    a8:f6:8b:b1:e2:24:52:c0:a3:d0:fd:6c:30:a7:c0:
                    78:ad:c3:25:6a:db:f6:7d:0a:03:be:7b:32:dc:30:
                    92:76:9c:05:61:85:a2:01:b9:63:40:39:6a:4b:5a:
                    8d:ab:cb:1b:c9:f0:7f:22:2a:f2:9d:30:cb:df:96:
                    dc:f1:d1:b3:15:53:1d:19:05:f1:b6:4b:f0:56:02:
                    97:e0:b6:b8:71:a3:b2:44:a6:0a:50:bd:4a:c1:78:
                    93:50:ef:44:3b:87:c6:38:d0:6c:0a:f9:a8:c5:a6:
                    56:ad:4b:18:81:bf:a6:45:02:6f:23:34:75:43:3b:
                    c5:67:ce:f2:ba:9b:95:04:4a:df:fa:ec:df:d5:bd:
                    8e:b6:1d:3e:df:a7:07:a1:96:bb:ad:2d:b0:5f:78:
                    65:6e:02:53:9c:26:16:3b:a4:8c:2c:82:4f:f2:2c:
                    28:61:a0:7e:06:d3:7f:6d:6d:2e:bb:0b:5c:ac:22:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:7D:75:6C:01:17:04:B0:D1:0B:44:5E:12:84:08:78:C8:43:7B
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:50:04:0c:5e:23:1a:c1:0f:59:58:59:3e:b0:1a:5b:13:33:
         62:78:d4:79:96:90:50:f7:29:53:9b:46:d4:cf:d6:24:b4:d3:
         37:ce:39:00:e3:fb:3c:45:ad:19:fa:71:5b:81:65:1b:12:89:
         eb:90:f6:09:65:ac:e0:49:12:89:6e:40:67:24:71:10:e5:56:
         d3:48:9c:35:21:58:72:b3:5a:48:d4:11:68:11:3c:0f:02:f4:
         e6:0e:ba:d2:3b:8c:22:9f:2f:42:a3:20:11:8b:4c:ba:20:f4:
         e0:34:85:09:7a:9b:44:ec:d3:3c:49:75:b3:7f:be:3b:04:0d:
         a0:a1:80:6d:db:bd:14:34:0c:7c:65:c2:a5:8c:cd:9e:0c:bf:
         75:00:52:95:14:37:a5:6c:eb:b6:b2:45:2c:9a:2b:b7:7b:3e:
         a5:59:4b:de:85:51:2b:0d:62:e0:1d:6c:be:d4:9d:ae:c3:e6:
         71:ca:6e:79:06:59:c8:4e:38:8f:7b:a4:dc:a3:de:00:dc:b2:
         21:e7:c8:fe:71:e6:48:26:d9:df:e6:f8:58:71:98:25:67:57:
         b7:ec:93:e7:81:66:13:56:4f:e0:11:e2:86:82:b0:c1:9a:d9:
         e1:b5:7a:be:70:f5:53:5f:5e:87:64:d0:2b:b9:6c:ea:90:d4:
         42:aa:34:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHWLBC5HyRC+PiLVZOBQMJUoWXPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyREI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJE
QjM3NkUwMjAeFw0yNTAxMTMxNDEyMjVaFw0yNjAxMTIxNDE3MjVaMDMxMTAvBgNV
BAMTKEJGMDA3RDc1NkMwMTE3MDRCMEQxMEI0NDVFMTI4NDA4NzhDODQzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjgf30EEEZF/bCeLMsl9HSpNr
0XxJfYa2rqTszRjtZukt6//XYxQmSpIk5UCkZbe4QHbzwHoNMfIwv2Dvn4qWFgM5
wY+uPxPON6j2i7HiJFLAo9D9bDCnwHitwyVq2/Z9CgO+ezLcMJJ2nAVhhaIBuWNA
OWpLWo2ryxvJ8H8iKvKdMMvfltzx0bMVUx0ZBfG2S/BWApfgtrhxo7JEpgpQvUrB
eJNQ70Q7h8Y40GwK+ajFplatSxiBv6ZFAm8jNHVDO8VnzvK6m5UESt/67N/VvY62
HT7fpwehlrutLbBfeGVuAlOcJhY7pIwsgk/yLChhoH4G039tbS67C1ysIuPHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvwB9dWwBFwSw0QtEXhKECHjIQ3swHwYDVR0j
BBgwFoAUJS23mXq5/B67j38wt1WDAts3bgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yNTJEQjc5OTdBQjlGQzFFQkI4RjdGMzBCNzU1ODMwMkRCMzc2RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MkRCNzk5N0FCOUZDMUVC
QjhGN0YzMEI3NTU4MzAyREIzNzZFMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzNzM5MmUzMTMyMzUyZTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzOTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzfUgwDQYJKoZIhvcNAQELBQADggEBAGRQBAxe
IxrBD1lYWT6wGlsTM2J41HmWkFD3KVObRtTP1iS00zfOOQDj+zxFrRn6cVuBZRsS
ieuQ9gllrOBJEoluQGckcRDlVtNInDUhWHKzWkjUEWgRPA8C9OYOutI7jCKfL0Kj
IBGLTLog9OA0hQl6m0Ts0zxJdbN/vjsEDaChgG3bvRQ0DHxlwqWMzZ4Mv3UAUpUU
N6Vs67ayRSyaK7d7PqVZS96FUSsNYuAdbL7Una7D5nHKbnkGWchOOI97pNyj3gDc
siHnyP5x5kgm2d/m+FhxmCVnV7fsk+eBZhNWT+AR4oaCsMGa2eG1er5w9VNfXodk
0Cu5bOqQ1EKqNDg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:42 2025 by rpki-client