Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e38362e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          csnO7TxFSW+GNIh9LA8y0XBS8NkUnj7RR+2DN1RO2Lw=
Subject key identifier:   86:35:C8:95:88:52:99:39:CD:72:72:5C:1E:6E:51:5B:C3:3D:05:C8
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       6E2D6CE5AA74E49BAAC9183FE0605E4C75311B01
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:20 +0000
ROA not before:           Mon 13 Jan 2025 14:12:20 +0000
ROA not after:            Mon 12 Jan 2026 14:17:20 +0000
asID:                     262988
IP address blocks:        179.125.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:6c:e5:aa:74:e4:9b:aa:c9:18:3f:e0:60:5e:4c:75:31:1b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:20 2025 GMT
            Not After : Jan 12 14:17:20 2026 GMT
        Subject: CN=8635C89588529939CD72725C1E6E515BC33D05C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:b3:ba:1d:6d:d0:4a:6a:a1:96:79:f1:e7:
                    1b:a4:0e:70:55:38:44:36:63:e8:b3:e2:ab:0d:d6:
                    27:4d:8e:c2:51:79:80:16:20:12:26:95:33:8e:22:
                    b7:32:e5:f0:dd:db:55:b6:95:71:71:c0:c8:8b:21:
                    f6:cc:b5:87:5c:a9:cb:d5:98:3b:dd:b8:6f:9c:16:
                    b3:61:23:fc:a3:7e:a5:1e:46:67:28:dc:90:13:b0:
                    2d:1c:9f:31:51:11:77:c3:83:18:4d:d3:6b:65:af:
                    bd:99:7d:ba:6c:e5:85:5a:8c:3b:73:9c:05:73:51:
                    00:e7:fc:22:16:ee:be:43:7c:40:7c:0b:cf:be:d0:
                    12:71:2c:92:8d:01:f3:2d:85:f2:49:53:51:1a:60:
                    1a:01:b6:b3:3a:86:03:d5:e9:df:30:72:4c:78:9e:
                    89:55:fe:84:0a:7a:1d:83:86:4d:8d:9f:51:d4:d0:
                    5c:44:4a:3e:5c:d7:f3:af:ce:2b:7d:a0:6a:83:34:
                    e0:6a:35:7a:af:8b:a2:8e:0c:40:06:03:e3:d1:49:
                    c5:6c:9e:72:13:95:3b:e4:41:26:82:a3:cd:9d:08:
                    8d:a6:df:49:5c:43:6a:ee:ef:6b:5a:69:9b:50:39:
                    51:43:0f:c7:58:f2:50:73:5b:a4:81:f8:64:52:0f:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:C8:95:88:52:99:39:CD:72:72:5C:1E:6E:51:5B:C3:3D:05:C8
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:8d:f4:25:be:09:3c:89:dd:f0:e9:33:da:bc:79:cc:9d:09:
         8f:4a:71:0f:7b:cc:99:69:33:72:cc:d2:d0:14:f6:cb:d9:d1:
         83:e0:02:30:07:24:cd:72:c7:10:bf:a2:81:fc:a6:2b:f8:f3:
         ed:d4:63:40:3d:81:26:03:b8:5c:ec:e4:f1:60:22:88:ce:53:
         63:37:e8:bc:54:f4:03:c5:c8:a9:4b:fc:08:d6:0b:bf:fc:3f:
         6e:00:0f:0f:0c:34:5e:10:11:6e:92:32:5c:4a:cf:f9:10:0e:
         b7:45:60:6a:27:c1:a4:53:8e:4c:9c:ee:b8:a2:10:45:a7:fb:
         b7:0d:02:3f:91:e5:20:58:17:3f:61:c8:c1:c8:d6:11:8e:f5:
         56:bc:ee:66:36:11:e4:95:f6:81:ce:ba:30:e3:04:a8:f8:20:
         32:39:d9:ae:d4:ec:a9:ff:6d:02:14:d3:2d:dc:77:87:f8:ca:
         3c:ef:ca:54:6c:c6:a5:22:0d:a7:9b:1f:20:f8:a9:78:53:26:
         d0:90:20:ea:a2:30:a9:0a:95:b0:a3:76:84:44:6b:f6:ed:3d:
         4d:8d:5c:ba:32:42:98:15:a2:5a:e6:79:c3:d3:71:da:43:86:
         63:f0:49:44:41:38:76:ed:14:7c:3f:d1:b0:6b:7b:d2:5e:98:
         ce:ba:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:40 2025 by rpki-client