Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32322d3232203d3e20323632393838.roa
File:                     3137392e3132352e38342e302f32322d3232203d3e20323632393838.roa (raw, json)
Hash identifier:          Pf9vJqzSiOUi9eIwwa8t5FxL2RC9acVRrte0aOL9sfU=
Subject key identifier:   27:10:3D:F0:7F:15:8E:D2:1F:ED:38:E5:1B:51:D9:C8:91:85:88:1C
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       1F39308C272D587A1AA83C6AC9D75E4AA0040A5C
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32322d3232203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:16 +0000
ROA not before:           Mon 13 Jan 2025 14:12:16 +0000
ROA not after:            Mon 12 Jan 2026 14:17:16 +0000
asID:                     262988
IP address blocks:        179.125.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:39:30:8c:27:2d:58:7a:1a:a8:3c:6a:c9:d7:5e:4a:a0:04:0a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:16 2025 GMT
            Not After : Jan 12 14:17:16 2026 GMT
        Subject: CN=27103DF07F158ED21FED38E51B51D9C89185881C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:9f:72:4d:fd:a8:62:29:d7:c5:3f:8d:f4:
                    1f:e8:8b:ab:95:04:18:39:00:f6:3d:54:2a:c2:55:
                    10:2d:52:04:b8:3b:45:05:24:67:ce:90:fe:30:b4:
                    5c:02:e8:89:8f:a8:26:74:f4:66:6b:04:21:96:d2:
                    df:25:6a:4c:27:c6:0c:e0:d7:d8:c2:4c:df:a4:3d:
                    a3:1f:c1:e5:1e:60:54:18:63:4a:d3:6f:fc:63:74:
                    1e:6f:40:ac:9c:b7:e1:0e:09:d2:f0:f3:ff:70:ec:
                    0a:b0:0a:c7:95:e1:dc:78:0e:a3:c1:64:fd:a7:9f:
                    9d:d7:80:ab:13:39:ce:69:10:41:a1:cf:36:ae:13:
                    3a:b7:b5:f5:22:ba:cf:3f:d4:6f:33:93:8d:f5:08:
                    07:f0:e8:ff:22:fc:e2:2f:0f:a1:7d:42:94:d8:b9:
                    86:53:ff:aa:11:6a:44:08:1e:36:ea:04:19:2b:48:
                    c6:e2:d1:f3:23:fd:b0:0f:41:b9:a9:c1:16:73:40:
                    26:18:27:be:c9:9e:a7:8a:6e:20:4f:2f:36:ad:e8:
                    e0:05:d8:e7:71:12:bf:31:03:32:12:18:88:bc:f9:
                    2d:84:39:31:72:f2:76:17:a3:d2:3b:42:76:05:53:
                    b0:4c:48:b1:c2:c6:a1:06:2e:df:51:c5:27:f3:07:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:3D:F0:7F:15:8E:D2:1F:ED:38:E5:1B:51:D9:C8:91:85:88:1C
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32322d3232203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:69:70:0f:3c:a7:0b:a6:68:15:90:bc:e9:3f:d5:ed:76:00:
         b2:9f:49:18:b8:eb:23:dc:9e:3a:91:74:0e:d9:e5:64:65:7d:
         47:48:ca:8c:2d:d5:3b:30:a7:e5:22:57:80:b6:44:5c:e0:fe:
         d8:ee:11:b5:37:27:21:04:d6:1c:e0:bd:5f:4e:bc:85:f3:c1:
         3f:5b:2f:bc:88:1b:42:f9:97:6d:e0:4b:9f:50:54:86:00:34:
         46:1a:72:b9:62:7d:b3:70:41:af:51:42:a6:59:3c:6b:e0:63:
         75:58:ec:3d:55:ec:b7:c7:b8:c6:c3:32:a4:55:c3:e4:08:f7:
         ac:d4:94:d7:d9:ea:2b:14:f8:5d:bd:67:99:7e:d9:46:0c:0d:
         c0:ba:5c:b2:2b:1d:00:a2:d3:89:a2:67:6c:fa:c6:64:f6:42:
         74:6c:94:f7:82:09:d8:01:df:75:52:8d:a4:20:32:b3:3d:57:
         66:35:9b:97:6a:5a:4b:aa:23:4a:dd:67:95:7b:51:9c:cc:72:
         95:e6:34:57:a1:42:60:32:5d:69:4e:c4:3b:c5:e6:f1:3f:b5:
         1b:ce:81:98:8f:58:0d:e4:3c:2e:af:b3:2d:f7:06:9d:a8:1f:
         37:26:2f:44:d8:87:b1:14:e1:1e:ff:ed:b3:3f:13:75:74:c0:
         fe:12:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:07 2025 by rpki-client