Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          fYaRQLNHKuzG/JKYBHcsflKsJP5s+f3ZqREmGrJaVBU=
Subject key identifier:   6B:4E:C4:B5:B0:76:F9:A2:78:13:91:B9:D5:1B:E6:70:68:ED:4C:0C
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1A79E29ACEDFC708D92040AB082DB736DB408E53
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:56 +0000
ROA not before:           Mon 01 Jul 2024 18:40:56 +0000
ROA not after:            Mon 30 Jun 2025 18:45:56 +0000
asID:                     28165
IP address blocks:        138.204.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:79:e2:9a:ce:df:c7:08:d9:20:40:ab:08:2d:b7:36:db:40:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:56 2024 GMT
            Not After : Jun 30 18:45:56 2025 GMT
        Subject: CN=6B4EC4B5B076F9A2781391B9D51BE67068ED4C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:18:2a:35:f2:ac:8f:22:3e:c8:28:00:aa:
                    68:72:cf:6c:db:18:1e:4c:1d:02:c1:cc:69:8b:97:
                    b8:06:64:03:3d:5e:67:a1:1a:ff:3c:95:74:bf:f2:
                    e4:7c:4f:23:32:c4:fc:d9:3b:65:fc:6a:1d:b9:4e:
                    15:85:a5:4f:56:d3:b9:96:e4:dd:6e:79:c2:1c:08:
                    c0:6b:aa:b2:fb:79:9b:a0:73:69:12:01:73:b4:74:
                    05:b0:75:14:c5:23:11:e1:ab:86:c2:39:b5:49:b2:
                    da:e0:d3:f4:d1:a0:04:ba:1b:10:70:c1:ca:12:30:
                    4b:bb:8c:61:1e:c2:85:09:47:45:ed:ed:d8:09:f7:
                    29:20:cd:93:b2:18:00:af:0e:b3:7a:03:1a:24:b2:
                    4b:89:29:dd:6a:59:47:14:bd:16:5b:b9:76:e1:4d:
                    d1:d6:f7:96:6f:ea:d4:48:a9:db:8a:9c:cd:fa:97:
                    9b:64:6c:a9:cb:7b:b8:e6:c5:81:5d:ae:93:68:b7:
                    df:bd:1b:4b:33:d9:41:54:99:16:55:fc:ff:f6:7d:
                    7a:39:ed:b7:1d:d4:7c:32:22:e9:0a:0d:5b:d2:10:
                    9e:3e:bb:33:44:8b:86:bb:8b:ac:00:04:48:bc:59:
                    b0:e8:2f:f0:a3:5d:5e:4e:fa:4b:d5:86:3d:34:bd:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:C4:B5:B0:76:F9:A2:78:13:91:B9:D5:1B:E6:70:68:ED:4C:0C
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:57:3d:c7:62:c5:9d:60:3a:be:57:40:50:af:ce:04:1f:c8:
         ee:b3:ca:dc:b3:70:0f:6c:34:11:25:9f:da:50:24:38:3b:a9:
         9e:ef:d4:4e:20:5d:09:16:53:71:04:1f:aa:b2:8b:e6:a9:52:
         9b:e7:e6:72:e0:4b:fa:6c:25:5e:5e:98:9f:a3:80:32:4d:d9:
         d2:fa:7a:40:b0:8e:55:72:4f:c4:42:40:61:5d:67:a6:9e:0a:
         1e:09:ae:95:4f:b8:20:95:7a:87:b8:74:08:39:85:16:30:69:
         02:38:84:fb:cc:a4:bb:ef:05:bc:ba:6d:3f:d7:5e:7c:a4:b2:
         9c:ac:66:9c:3b:89:e1:da:11:a2:e9:6f:23:ff:d9:07:10:f7:
         a8:71:02:49:fd:b9:71:62:3d:c0:45:40:3e:f6:48:19:1a:e9:
         bf:a2:3c:6d:5f:f8:6e:df:72:b1:60:56:fe:4c:e7:61:63:fb:
         b8:10:15:c5:71:ea:87:3e:c2:3f:f7:9f:5d:39:ca:62:70:d5:
         a6:0e:04:be:72:6d:30:37:54:a3:9d:b3:f7:7d:0b:de:53:e1:
         96:70:2f:31:e6:f5:06:fd:29:e7:bb:3c:0f:63:72:5b:53:a9:
         d2:8c:88:d1:9e:07:a6:31:31:a1:11:98:90:04:ba:df:75:a4:
         3a:53:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net