Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          H2UHQVRmQQ0wQiV4vDOmjG8QYMwcMq+FMk8TroQHWNA=
Subject key identifier:   E6:C3:A6:DB:2E:D8:CE:54:B0:E1:44:3C:1A:F6:40:5E:0B:47:DE:53
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       6C7E69AA5962091445E12AD0028C9DFBE85E6E90
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:47 +0000
ROA not before:           Mon 01 Jul 2024 18:40:47 +0000
ROA not after:            Mon 30 Jun 2025 18:45:47 +0000
asID:                     28165
IP address blocks:        138.59.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:69:aa:59:62:09:14:45:e1:2a:d0:02:8c:9d:fb:e8:5e:6e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:47 2024 GMT
            Not After : Jun 30 18:45:47 2025 GMT
        Subject: CN=E6C3A6DB2ED8CE54B0E1443C1AF6405E0B47DE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:6b:5e:95:e3:a4:60:85:ee:3c:61:8a:d1:
                    1d:c5:ff:1a:4e:be:5f:24:5a:a1:52:60:ee:3f:89:
                    e5:42:50:47:0d:3f:3c:76:ef:3b:ca:15:34:5b:98:
                    88:20:e7:b3:c8:04:9e:82:b5:c3:b7:8f:2f:3b:e1:
                    f6:59:47:07:27:cc:93:5e:98:cd:ba:cb:d5:db:72:
                    b1:35:2b:24:f6:eb:36:b7:6e:eb:c3:64:3e:f3:bc:
                    59:d0:5b:22:c4:32:ac:21:95:e2:64:f9:db:0b:c6:
                    5d:ed:1e:6f:af:8f:5f:df:78:db:c6:1f:af:9a:cd:
                    cd:49:d8:f8:66:e8:aa:fc:1b:5b:3a:e6:c6:92:6b:
                    c2:3f:bb:db:f3:82:e8:ba:ab:36:7d:ae:63:96:46:
                    dc:dc:e3:c2:11:4d:ae:35:33:ff:af:bd:87:b6:bd:
                    da:78:2f:a1:34:5d:e1:04:3e:b5:cd:8e:ea:e2:c2:
                    e6:e7:ca:d4:49:2d:0f:6f:15:7e:8d:dc:88:75:f5:
                    27:27:d0:12:82:9e:a2:9b:b3:53:b2:7c:a1:52:fd:
                    cd:8d:73:9c:99:03:70:ed:2e:37:9e:fa:2e:db:06:
                    0e:2a:1f:16:97:f3:17:1d:32:19:6e:3b:a6:40:77:
                    0f:05:f0:66:40:ab:c5:71:eb:30:32:f4:86:c6:6a:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:A6:DB:2E:D8:CE:54:B0:E1:44:3C:1A:F6:40:5E:0B:47:DE:53
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:a7:89:6f:25:c9:6b:64:0a:98:9c:e3:89:66:66:98:dc:
         8f:4a:62:41:7e:a3:d2:a5:05:35:5a:d6:ff:3a:e6:5c:ac:34:
         b2:d0:d6:a3:c1:c3:8d:dd:dc:44:6b:58:4d:2e:26:5c:bd:f4:
         26:53:a7:aa:e3:47:d5:e4:be:00:44:77:c7:a5:25:d7:95:95:
         fe:31:b6:18:25:8b:6f:20:4d:93:09:b9:85:d7:eb:55:9f:57:
         76:58:ec:7f:94:c5:f7:6c:ba:d6:b3:9d:fb:4d:ae:ee:b7:d3:
         ef:b7:51:7f:fb:93:88:31:a3:22:e7:b4:0c:75:1e:66:40:dc:
         ab:32:10:e2:1a:a8:d3:ac:5a:40:c4:0a:5b:6c:93:c8:8d:80:
         4d:d1:af:b3:1f:83:74:a1:32:eb:c0:de:44:a6:52:d7:c3:fc:
         fa:d8:40:7e:46:21:98:80:d7:9a:0e:05:a9:af:d0:7c:cd:e0:
         83:9d:dc:9f:7d:07:ac:a0:c9:6b:5f:51:a5:27:6a:4a:d5:86:
         c9:58:c5:2d:8e:9e:c4:1d:6d:ac:67:de:14:f1:11:9d:bc:59:
         9e:2b:22:ab:54:90:89:78:f4:05:d8:c8:0f:4b:b2:77:f4:86:
         c7:b5:d2:3f:20:d6:e0:d6:04:7c:26:5d:f5:36:d5:ec:42:e2:
         68:12:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net