Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          fBXGN+FMRoFNnhTa+tPfaO6y8r2TvJ5I4ZooZBIu8+k=
Subject key identifier:   F0:50:E0:51:04:BD:26:6F:D5:85:DA:D5:EC:0D:67:46:EC:EE:02:E8
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       480CB89C6F6E4A55FA690116F61863CF3A1A77F9
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:33 +0000
ROA not before:           Mon 01 Jul 2024 18:40:33 +0000
ROA not after:            Mon 30 Jun 2025 18:45:33 +0000
asID:                     28165
IP address blocks:        131.255.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0c:b8:9c:6f:6e:4a:55:fa:69:01:16:f6:18:63:cf:3a:1a:77:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:33 2024 GMT
            Not After : Jun 30 18:45:33 2025 GMT
        Subject: CN=F050E05104BD266FD585DAD5EC0D6746ECEE02E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:88:7c:85:85:19:d3:79:08:c2:a7:81:08:
                    00:26:75:ff:54:7f:eb:4d:ab:41:e0:ec:fc:33:4b:
                    75:45:54:63:7a:e0:86:6d:18:e8:8e:78:a5:7f:73:
                    49:e3:5b:5f:86:d1:aa:99:ea:59:8b:b6:7c:43:b7:
                    3e:94:8c:83:fd:77:46:a3:72:b2:ff:8f:de:fd:e7:
                    12:f9:30:c4:cb:86:c6:2c:d1:9c:47:e2:d0:13:2f:
                    1a:3e:3c:c1:f3:82:da:81:2e:29:46:14:e1:5a:5b:
                    cb:a3:19:2e:8e:d4:db:a0:dc:b5:91:61:e8:ac:6a:
                    ef:36:a2:c9:67:b6:e8:dd:93:54:09:9e:26:d2:e3:
                    c8:b4:a5:7a:17:da:46:40:64:a0:0a:55:01:72:ac:
                    38:43:32:2a:99:31:d7:fd:d2:24:88:a9:67:b4:db:
                    bc:a3:7d:eb:5d:dc:2c:52:c7:8b:2b:c9:bf:72:94:
                    de:17:ed:90:58:f7:eb:bf:9e:f2:83:64:71:7d:7f:
                    a7:54:55:8b:93:59:80:af:c2:55:f0:47:a5:20:a9:
                    41:1c:0e:0d:01:22:97:4f:8c:e6:1a:08:40:0e:e2:
                    f9:83:80:74:06:99:71:9e:68:e9:d3:0a:cd:1a:bb:
                    a1:4e:6b:fc:12:7f:fe:c6:dd:3b:a9:b3:50:81:04:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:E0:51:04:BD:26:6F:D5:85:DA:D5:EC:0D:67:46:EC:EE:02:E8
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:fe:4e:93:43:a3:1b:30:8c:5a:85:78:49:a3:c9:67:de:
         51:c1:d8:f0:be:68:c6:45:84:c1:09:aa:df:9b:12:9d:00:2a:
         49:04:5a:a9:24:1f:99:91:69:2c:ca:90:87:3f:d5:24:1f:a5:
         0a:09:82:39:fe:d7:57:b0:b5:f5:4f:a5:ba:b1:fc:03:a1:e2:
         08:21:df:1b:55:cd:4c:3f:90:8c:42:e0:46:ea:08:72:bc:6c:
         03:c9:98:14:18:cd:1b:17:97:1c:a7:af:d9:c1:0d:67:89:ed:
         06:9f:5a:9e:ef:aa:6a:5d:f9:25:4a:48:60:db:ff:53:b3:4b:
         9e:8f:3a:7e:e0:59:a8:8b:48:90:84:fc:7d:05:56:30:4a:d0:
         7a:e6:fa:d1:d1:e6:93:a1:8a:e2:6d:44:b1:78:a4:c9:93:16:
         1b:45:61:24:d9:54:28:76:b4:32:8a:b3:cf:42:e0:11:55:4c:
         cb:1a:35:03:07:12:01:47:7a:2b:49:f8:38:55:d7:b5:f7:81:
         5f:bd:9c:76:df:7c:13:f1:e1:b1:1b:e3:13:f0:45:62:b9:8c:
         af:77:9d:a8:5d:b9:97:e9:a5:d1:40:07:77:6f:7f:b8:84:e9:
         57:d8:d2:7e:1a:ae:e9:22:b1:58:8a:aa:39:ed:a9:ee:f2:96:
         38:39:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net