Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e38342e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          G8T1N6HgTNnrDuBs8hYErVZ2b32Q/j5kufP39dBNEeY=
Subject key identifier:   9B:A0:19:78:D7:C6:40:9D:08:35:D3:74:EA:13:07:36:78:E8:67:97
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       366384C98853B9B62DFAFA2B142D6B60D7DEC365
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:31 +0000
ROA not before:           Mon 13 Jan 2025 14:12:31 +0000
ROA not after:            Mon 12 Jan 2026 14:17:31 +0000
asID:                     262988
IP address blocks:        179.125.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:84:c9:88:53:b9:b6:2d:fa:fa:2b:14:2d:6b:60:d7:de:c3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:31 2025 GMT
            Not After : Jan 12 14:17:31 2026 GMT
        Subject: CN=9BA01978D7C6409D0835D374EA13073678E86797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:9e:cf:30:d3:20:d9:af:35:4e:de:0b:07:
                    84:63:ec:63:1c:77:a0:cd:16:d0:36:6b:22:dc:2c:
                    5f:d9:a3:cd:f0:02:ad:2b:ae:db:db:ad:db:9e:3e:
                    14:22:63:7e:fc:39:97:a9:ff:55:f7:d8:01:c8:d2:
                    66:49:a1:6f:5c:1a:e1:de:10:08:ba:a4:c1:66:bc:
                    3a:de:fd:d9:1f:85:94:e7:ac:2a:e1:5b:17:12:f9:
                    8c:e2:a0:59:f6:b3:b6:a1:70:85:16:78:85:94:23:
                    7e:7d:e6:7d:37:b7:27:ee:d4:6e:15:5c:0d:7c:ba:
                    bc:f8:af:82:2c:a0:3e:d3:9f:f5:56:46:09:87:b9:
                    d7:13:fe:11:a7:62:9a:d4:e8:93:46:6c:67:65:28:
                    cd:f0:88:57:7e:d6:c2:08:c4:c3:8f:44:fc:5c:d6:
                    c1:c8:cb:f3:14:23:e5:f0:57:17:ba:53:a7:29:45:
                    80:dd:c9:25:d9:fe:56:85:68:42:ea:fe:60:85:e4:
                    46:cc:99:de:be:ac:70:59:27:b1:12:a3:c5:ac:2b:
                    ac:d2:f7:a6:e2:79:fc:e3:02:96:6c:7f:b7:e6:f5:
                    e2:db:95:90:e8:af:51:4f:1b:e4:19:21:13:ae:42:
                    64:7e:43:df:b5:35:6b:0d:c8:ea:56:2b:f7:ad:10:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:19:78:D7:C6:40:9D:08:35:D3:74:EA:13:07:36:78:E8:67:97
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:13:b1:f6:90:6e:e6:7d:1b:9f:01:10:58:93:29:40:4f:
         45:31:65:b5:ca:ee:78:df:f2:fd:cb:c4:54:03:94:75:5f:da:
         8a:af:fc:09:80:19:40:39:14:8a:e5:d0:cf:85:77:60:32:c9:
         3e:a3:1a:f8:b8:7a:24:6e:55:ee:46:f0:0b:5a:04:4a:79:88:
         2c:f0:1b:ec:0e:82:51:92:24:9a:e1:cd:36:e4:f6:7b:e1:76:
         09:c8:69:fd:40:7a:8e:a4:35:c9:e3:99:5f:be:80:d1:97:21:
         53:c7:15:59:68:a0:ec:82:f8:49:58:de:8c:b2:45:fd:48:3e:
         68:7b:cf:8d:ab:65:13:22:54:94:e5:4b:dc:75:84:16:36:7e:
         8e:83:3b:80:7b:0b:b0:a8:ba:ca:43:5f:c1:01:f5:13:4a:b9:
         10:83:f6:b6:49:4f:32:6e:c9:98:f6:a7:c4:a8:ff:4a:f4:31:
         a3:36:dd:bd:18:c7:31:f1:e4:7b:6f:49:41:95:65:35:49:26:
         58:7b:1a:9b:89:bf:75:cd:4b:b5:47:c8:c9:40:e4:67:3f:f9:
         b2:39:65:9a:08:99:a0:81:3a:c8:32:99:8a:68:0d:a5:33:12:
         90:e8:7d:a5:84:bb:7b:27:0c:04:7e:f6:ee:25:8b:69:c9:ab:
         b2:74:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:37:57 2025 by rpki-client