Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38392e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38392e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          thFmMHL3L2ICHraIF1k3fe3rtEZAf+WDCltwZ8mdgBc=
Subject key identifier:   83:CD:0B:FE:DC:E6:FF:39:9F:54:41:47:47:75:E8:50:84:E2:93:B7
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       0E2706CF9A6AF7EDC8200F6056F4D3153E280DBF
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38392e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:20 +0000
ROA not before:           Mon 13 Jan 2025 14:12:20 +0000
ROA not after:            Mon 12 Jan 2026 14:17:20 +0000
asID:                     262988
IP address blocks:        179.125.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:06:cf:9a:6a:f7:ed:c8:20:0f:60:56:f4:d3:15:3e:28:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:20 2025 GMT
            Not After : Jan 12 14:17:20 2026 GMT
        Subject: CN=83CD0BFEDCE6FF399F5441474775E85084E293B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:e0:ca:42:2d:85:72:60:b2:83:12:84:45:
                    ae:ce:9d:f2:12:dd:a5:bb:94:69:74:e0:e1:f2:b7:
                    56:19:af:55:cb:ee:fc:97:1f:94:04:b8:91:bd:72:
                    bb:6a:9e:10:5f:ef:6d:4d:3d:41:4e:17:f6:6e:ee:
                    3d:36:08:d7:a8:b4:31:73:0f:f4:bc:94:50:df:c6:
                    bf:5e:df:2a:72:e8:33:04:03:58:ba:3a:d5:60:0c:
                    6a:60:df:41:0b:05:d7:51:6c:84:8f:8b:e9:4c:62:
                    d2:ce:74:72:5c:1e:f6:1d:78:c3:72:25:0e:4b:63:
                    5c:27:95:22:06:15:dc:cd:70:d8:7c:df:a2:5f:75:
                    25:81:b3:33:d9:29:21:e5:29:43:02:da:30:cb:c6:
                    89:e1:dd:76:c9:a3:4c:4e:1f:23:5c:d3:cb:23:c7:
                    96:6f:6b:fd:4a:0c:4d:14:0e:df:cc:83:3a:13:9c:
                    fa:63:2d:f9:63:79:fc:fc:24:fb:9f:ac:16:a8:7d:
                    12:bb:d3:d9:e6:5e:cc:70:29:f0:b3:20:31:e5:c9:
                    55:ce:f3:71:df:59:b9:7a:d7:8b:55:9a:54:c2:53:
                    ab:66:7c:06:30:af:eb:c5:c9:75:52:13:2a:7c:87:
                    fa:db:80:bc:bb:8c:fe:b2:e1:f6:21:36:ae:6d:cf:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CD:0B:FE:DC:E6:FF:39:9F:54:41:47:47:75:E8:50:84:E2:93:B7
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38392e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:bd:d4:1a:c0:d2:29:fc:83:1c:18:0b:22:0b:cd:38:73:
         db:42:53:ed:7e:98:02:71:68:7a:6b:79:04:8b:ea:ca:3e:1f:
         ae:71:a2:0b:f9:80:b8:5c:de:7d:59:3c:ff:4b:c2:7b:71:57:
         51:1b:2b:86:9b:5b:95:e7:58:21:03:e0:80:13:17:ea:14:18:
         00:73:d9:22:60:b7:a9:8d:c0:5d:3a:ec:1a:24:8d:54:59:da:
         03:bf:be:ab:ff:b9:07:9d:6a:89:6a:06:0f:be:fb:68:72:c0:
         cf:a1:e2:66:f1:ab:75:bb:7f:29:3a:4f:cf:4e:34:b0:3f:1d:
         7a:58:de:62:be:73:43:71:6a:91:59:c3:77:f1:51:a8:80:29:
         43:65:41:c9:d6:1c:b9:c9:72:e9:04:ea:be:b7:6b:93:83:ea:
         b6:06:f9:45:71:a5:5e:ed:90:ec:8b:66:b4:03:51:00:ec:29:
         1f:c3:f6:bf:52:76:7d:7a:0c:33:a4:a5:17:93:cc:87:2e:00:
         ff:77:aa:fb:2f:05:ce:9e:37:a1:1f:89:bd:72:42:c1:49:02:
         a4:69:2a:9d:91:9a:ef:29:27:4e:be:c2:d5:3c:ab:60:7b:22:
         32:a7:fb:06:52:2b:a1:eb:ab:e2:0e:9e:78:ba:52:3d:46:ca:
         db:97:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:07 2025 by rpki-client