Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          UwF5x+KFcO4aXJLP1Io2Icq7QPxsH4CSvu908wnisD8=
Subject key identifier:   AC:87:AC:C1:C0:67:BE:92:C9:71:BB:A8:60:B0:17:3B:93:61:14:C6
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       2ADB61331E0FC41582012F3F1326F8B1BDC04A6B
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:18 +0000
ROA not before:           Mon 13 Jan 2025 14:12:18 +0000
ROA not after:            Mon 12 Jan 2026 14:17:18 +0000
asID:                     262988
IP address blocks:        179.125.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:61:33:1e:0f:c4:15:82:01:2f:3f:13:26:f8:b1:bd:c0:4a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:18 2025 GMT
            Not After : Jan 12 14:17:18 2026 GMT
        Subject: CN=AC87ACC1C067BE92C971BBA860B0173B936114C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:9c:1b:71:82:27:a9:4f:2a:74:90:73:fd:
                    de:ec:33:36:0e:a5:03:fd:12:8e:06:d1:c9:ef:ec:
                    fe:c2:a7:91:bf:c9:b8:ae:32:53:9b:ee:47:08:6c:
                    4f:49:06:a0:c6:43:8b:f9:01:44:01:09:90:16:29:
                    50:56:82:90:6c:13:46:4b:9a:70:5b:68:c1:65:29:
                    2d:17:ec:fd:58:6d:34:e7:54:c9:ae:0a:d0:12:d1:
                    87:5d:43:06:f6:87:69:38:bc:ef:c1:c7:73:a0:8d:
                    02:49:2e:15:b8:33:80:26:11:96:b4:74:f0:81:aa:
                    25:19:1b:f2:5e:df:75:d7:90:98:b2:f5:8c:4a:9f:
                    ff:f6:b2:43:3e:fb:f5:74:5c:72:37:ef:0e:72:69:
                    58:c8:0d:5e:18:01:db:d8:b4:cd:c5:86:f4:d2:84:
                    fa:20:da:ea:3e:cb:82:d2:85:2a:9f:91:ed:da:2f:
                    e3:e4:20:7b:9b:89:ae:9d:44:66:cd:68:52:20:8d:
                    43:e9:4d:bd:5c:b9:4f:95:ae:77:23:74:04:e6:65:
                    ea:05:27:7b:f1:fe:e5:b4:8e:82:a5:c2:1b:f5:c3:
                    94:cd:2a:28:13:46:f2:62:10:e5:8e:fa:4f:8f:b1:
                    7d:41:96:8a:44:bf:68:ba:37:3a:31:0a:e0:27:2e:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:AC:C1:C0:67:BE:92:C9:71:BB:A8:60:B0:17:3B:93:61:14:C6
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:43:bc:95:78:8a:02:f6:72:46:30:5d:01:44:4d:73:83:
         f5:02:1b:2f:d4:ad:16:13:f0:2d:56:ce:ae:9c:1d:5d:9d:66:
         10:42:23:bc:99:2e:d4:47:e9:1e:a7:25:46:60:37:e8:e2:0c:
         1f:c8:6a:ce:60:70:b5:e3:57:f1:50:f6:d1:ee:e6:a1:7f:d7:
         90:45:ee:5c:8f:25:e5:45:44:32:4c:be:15:2c:8a:91:81:8c:
         3f:77:c2:a6:b3:a4:75:f9:86:e4:23:fc:af:cf:65:0e:c9:91:
         08:23:81:03:f1:5f:17:0d:c6:52:1e:c9:12:fb:34:4d:8a:0f:
         60:6d:f6:56:cd:b8:13:16:ad:eb:ed:fc:c2:02:5a:7f:3b:1e:
         e5:29:4b:8b:e0:76:e0:e3:84:61:63:f3:5d:e3:8e:d3:80:b1:
         4d:8e:b0:f2:78:0c:10:fe:36:b0:d0:8c:cf:b7:f6:94:fd:86:
         0f:62:5e:30:b0:cc:f1:51:51:9f:10:74:46:bc:3a:89:8c:60:
         a8:03:50:ae:03:e6:bc:fb:bc:98:48:8b:12:3c:61:1c:0b:a4:
         67:de:83:eb:af:85:80:18:56:0b:43:a9:c9:6b:35:cc:2f:6b:
         50:10:28:f2:08:c7:3f:31:e3:52:5c:5d:59:0e:b8:b4:52:62:
         fc:b5:3c:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKtthMx4PxBWCAS8/Eyb4sb3ASmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyREI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJE
QjM3NkUwMjAeFw0yNTAxMTMxNDEyMThaFw0yNjAxMTIxNDE3MThaMDMxMTAvBgNV
BAMTKEFDODdBQ0MxQzA2N0JFOTJDOTcxQkJBODYwQjAxNzNCOTM2MTE0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjZwbcYInqU8qdJBz/d7sMzYO
pQP9Eo4G0cnv7P7Cp5G/ybiuMlOb7kcIbE9JBqDGQ4v5AUQBCZAWKVBWgpBsE0ZL
mnBbaMFlKS0X7P1YbTTnVMmuCtAS0YddQwb2h2k4vO/Bx3OgjQJJLhW4M4AmEZa0
dPCBqiUZG/Je33XXkJiy9YxKn//2skM++/V0XHI37w5yaVjIDV4YAdvYtM3FhvTS
hPog2uo+y4LShSqfke3aL+PkIHubia6dRGbNaFIgjUPpTb1cuU+VrncjdATmZeoF
J3vx/uW0joKlwhv1w5TNKigTRvJiEOWO+k+PsX1BlopEv2i6NzoxCuAnLnBxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrIeswcBnvpLJcbuoYLAXO5NhFMYwHwYDVR0j
BBgwFoAUJS23mXq5/B67j38wt1WDAts3bgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yNTJEQjc5OTdBQjlGQzFFQkI4RjdGMzBCNzU1ODMwMkRCMzc2RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MkRCNzk5N0FCOUZDMUVC
QjhGN0YzMEI3NTU4MzAyREIzNzZFMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzNzM5MmUzMTMyMzUyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfVQwDQYJKoZIhvcNAQELBQADggEBAMLnQ7yV
eIoC9nJGMF0BRE1zg/UCGy/UrRYT8C1Wzq6cHV2dZhBCI7yZLtRH6R6nJUZgN+ji
DB/Ias5gcLXjV/FQ9tHu5qF/15BF7lyPJeVFRDJMvhUsipGBjD93wqazpHX5huQj
/K/PZQ7JkQgjgQPxXxcNxlIeyRL7NE2KD2Bt9lbNuBMWrevt/MICWn87HuUpS4vg
duDjhGFj813jjtOAsU2OsPJ4DBD+NrDQjM+39pT9hg9iXjCwzPFRUZ8QdEa8OomM
YKgDUK4D5rz7vJhIixI8YRwLpGfeg+uvhYAYVgtDqclrNcwva1AQKPIIxz8x41Jc
XVkOuLRSYvy1PF4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:07 2025 by rpki-client