Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa
File:                     3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          b5vyiotpv4+cBeGCZtiYiuq2J/cm3iLZW82f/vHtFNs=
Subject key identifier:   9D:81:2A:25:60:6B:F2:A9:12:13:6E:A7:62:A6:C8:FE:7F:3A:7E:D3
Certificate issuer:       /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial:       1326DD4FC83E75C79C248040A1D6CC463B4E831D
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa
Signing time:             Thu 06 Mar 2025 08:03:53 +0000
ROA not before:           Thu 06 Mar 2025 07:58:53 +0000
ROA not after:            Thu 05 Mar 2026 08:03:53 +0000
asID:                     265066
IP address blocks:        179.125.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:26:dd:4f:c8:3e:75:c7:9c:24:80:40:a1:d6:cc:46:3b:4e:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Validity
            Not Before: Mar  6 07:58:53 2025 GMT
            Not After : Mar  5 08:03:53 2026 GMT
        Subject: CN=9D812A25606BF2A912136EA762A6C8FE7F3A7ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:29:86:82:63:1b:cc:24:ae:31:b3:dc:22:
                    98:06:0a:1e:bf:aa:15:c1:b9:89:ad:ef:49:cd:14:
                    8a:2b:be:92:15:1f:5e:f7:3c:7e:6f:4a:48:6f:8b:
                    a6:02:f3:4b:48:48:6a:ce:51:27:75:15:f4:fc:09:
                    da:ea:3b:51:c6:2c:ff:ea:8c:f7:29:10:97:fc:07:
                    d1:fa:8e:5c:07:46:5f:6e:0c:0c:1f:29:e6:07:02:
                    a5:ff:96:ff:20:41:65:e7:08:fd:18:86:d4:62:c5:
                    a3:70:ec:84:36:ab:69:18:af:54:21:c4:0f:98:11:
                    86:36:85:3b:ff:33:7d:5c:ee:e4:6c:6a:47:69:06:
                    1e:2d:01:0e:57:c0:82:4d:13:a9:93:a3:f7:1d:72:
                    97:97:7a:e3:fd:28:7d:e9:3f:b2:53:d9:52:06:75:
                    5f:5a:7e:db:5f:08:c6:50:00:5b:33:bb:37:08:d1:
                    48:01:fa:81:4b:0b:50:c9:ac:3b:42:76:92:d3:f7:
                    6f:9d:41:4e:db:0a:88:6f:95:21:08:c4:fc:9e:65:
                    78:23:a8:10:db:28:1b:a8:38:49:a4:65:99:00:89:
                    6c:65:98:48:6f:37:e6:93:19:d1:66:e4:78:a7:b3:
                    fc:5e:2e:fb:14:3c:99:03:1d:bb:6a:7c:fb:96:5c:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:81:2A:25:60:6B:F2:A9:12:13:6E:A7:62:A6:C8:FE:7F:3A:7E:D3
            X509v3 Authority Key Identifier:
                keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:14:82:b4:9c:01:c8:86:3b:74:26:ed:d2:32:3e:c3:f5:
         1c:e7:eb:d0:a3:3e:aa:4b:6a:bc:69:83:c8:3c:92:65:b3:5c:
         8c:d8:2a:2f:77:c9:ef:38:ea:08:cc:52:a8:55:f1:e1:ea:1a:
         2c:06:5a:93:ba:46:29:c1:ec:29:3d:6b:4f:9f:0b:f1:57:17:
         24:1b:43:d8:d8:fe:5f:d7:c2:0e:a8:94:ea:33:4a:c6:ca:8e:
         d2:5a:6d:1c:f3:e3:11:29:f7:69:be:c9:e5:b5:88:68:bf:1d:
         b1:3c:99:6d:96:c9:66:f5:ba:5b:cd:a4:7f:3a:00:4f:ad:9b:
         13:db:8b:4a:85:8a:c8:bc:a5:99:10:d5:8e:45:4a:60:66:6a:
         f6:be:9c:eb:5b:37:40:32:4a:14:fd:5e:35:e3:66:12:73:bb:
         6a:93:17:a2:1d:98:de:6c:9a:5e:59:29:f7:e4:1a:13:0c:33:
         59:c7:32:77:46:f6:c8:af:df:a9:9e:5b:c4:00:98:d2:32:1e:
         e8:6d:c2:d9:91:db:4f:bc:a1:05:fe:f5:e5:58:b2:5f:2c:3d:
         71:75:36:d8:69:69:07:ca:9d:9b:be:cf:4e:4e:5b:df:9f:ad:
         c3:e6:f4:53:d3:3a:b7:e5:cb:b2:72:08:3f:84:dd:b5:19:fc:
         02:a0:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:03 2025 by rpki-client