Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38352e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38352e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          hND3YZK2SAMYrGkCiQma9FZNlfBa2zChHQSkB1XE/tY=
Subject key identifier:   9F:CD:AC:C0:80:A0:0C:79:E5:39:91:66:CD:DD:3B:D3:0B:A9:A3:9A
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       66CF936EB7C928060DA97488AE49552301C8A1D0
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38352e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:49 +0000
ROA not before:           Mon 15 Jul 2024 15:13:49 +0000
ROA not after:            Mon 14 Jul 2025 15:18:49 +0000
asID:                     262988
IP address blocks:        179.125.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cf:93:6e:b7:c9:28:06:0d:a9:74:88:ae:49:55:23:01:c8:a1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:49 2024 GMT
            Not After : Jul 14 15:18:49 2025 GMT
        Subject: CN=9FCDACC080A00C79E5399166CDDD3BD30BA9A39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2a:9a:8b:84:97:8d:00:14:99:42:50:ed:01:
                    7c:13:63:ff:29:42:ee:a7:90:e9:27:f9:e4:24:ee:
                    88:f3:8e:8f:0b:4c:f6:21:40:76:d5:1c:d4:b5:29:
                    bf:ff:67:e8:d2:2e:ce:a9:70:d9:7c:a9:62:9c:47:
                    29:a6:eb:b1:36:15:0e:a6:14:3d:9e:82:15:c6:a5:
                    bc:c1:43:7d:6e:4f:d5:6d:dc:38:54:f4:65:90:9b:
                    1c:81:9f:d8:47:dc:98:05:87:6d:69:a0:8b:7a:1d:
                    6e:cb:ac:9f:4e:11:09:c8:ba:8a:d9:1d:7c:ec:03:
                    ff:7e:d6:8f:5d:27:ee:e4:0d:89:8b:d3:18:b2:d0:
                    ba:97:8f:fc:88:74:d7:51:fe:69:52:92:0a:e9:fa:
                    6a:b9:42:66:12:ed:33:c1:62:02:7d:95:e1:0d:86:
                    c9:81:79:dd:00:69:0c:de:75:23:4d:87:c5:27:e3:
                    58:19:49:eb:c4:71:0c:3f:81:34:08:33:86:53:a4:
                    c0:01:7d:db:72:0a:21:a6:6e:9a:46:14:bd:03:c6:
                    c8:48:30:81:87:72:9d:f9:12:05:13:a6:04:7c:75:
                    85:60:47:91:de:b4:1b:c9:21:77:e3:2c:49:8b:3a:
                    5f:e2:ca:75:dd:01:5c:a8:85:cd:fd:8c:cf:a6:f7:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CD:AC:C0:80:A0:0C:79:E5:39:91:66:CD:DD:3B:D3:0B:A9:A3:9A
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38352e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:0b:91:5e:52:26:bc:6e:0a:0c:90:ce:7b:e3:1f:4f:78:
         28:0c:5e:34:8c:67:f3:2f:f0:56:bf:7a:5e:fa:fb:7e:04:0f:
         cc:e8:74:d5:1a:a1:31:33:36:3f:e1:c8:b9:47:53:fd:55:14:
         bb:cd:b0:98:df:c1:64:42:6e:70:57:91:2f:54:00:d2:28:27:
         4a:5d:74:e6:85:45:5d:39:5f:33:3e:4c:bb:ce:1f:90:c1:6d:
         ed:93:0a:cb:fb:30:d3:e8:10:4d:a8:28:4c:0b:68:9c:d5:3d:
         21:38:98:c5:04:87:ed:d3:68:2c:9f:00:0c:ea:fc:17:97:67:
         d5:d1:bb:cb:69:49:33:71:fc:73:8d:2a:da:d0:f4:a9:71:04:
         e1:75:e5:92:92:06:2a:b1:46:3e:a9:f2:aa:93:17:cf:c0:78:
         b9:7e:53:ce:1f:73:3b:56:c4:75:1e:24:fb:52:72:67:78:f7:
         80:11:c4:ad:46:f1:fa:43:21:88:b8:5b:15:3b:c7:bb:ba:45:
         bb:b1:4a:65:09:af:52:ac:2d:6d:22:05:33:ec:40:42:c5:03:
         1a:ea:7d:64:1f:6a:08:ff:b4:8a:7f:fd:aa:52:2c:4c:e5:f0:
         49:72:51:5b:c4:f0:4c:9b:1a:0c:fe:41:14:6c:ee:8b:26:3d:
         b9:10:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:27 2025 by rpki-client