Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          t6YzKjNrePWZF+p7E57mraJKTK7h06hXeht29i5omgQ=
Subject key identifier:   EF:41:76:03:20:ED:AB:B1:0E:A4:7C:DB:F9:85:D7:DD:EA:08:8B:BF
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       7406C0B3C37702CFD2CDCD6A863AA62818F5E2DF
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:20:48 +0000
ROA not before:           Mon 01 Jul 2024 19:15:48 +0000
ROA not after:            Mon 30 Jun 2025 19:20:48 +0000
asID:                     28165
IP address blocks:        177.222.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:c0:b3:c3:77:02:cf:d2:cd:cd:6a:86:3a:a6:28:18:f5:e2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:15:48 2024 GMT
            Not After : Jun 30 19:20:48 2025 GMT
        Subject: CN=EF41760320EDABB10EA47CDBF985D7DDEA088BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:7d:92:8b:e1:a3:8f:22:e7:8a:e1:e6:73:
                    c2:f3:1d:44:b8:b0:48:52:0a:95:4e:76:8f:71:85:
                    73:f3:91:4d:87:f5:91:e9:84:37:89:3b:dc:a1:75:
                    db:2e:88:6c:10:09:22:b3:5f:36:7c:ec:03:51:3c:
                    e3:e6:71:75:9a:05:ff:06:0b:a9:61:01:32:49:72:
                    de:62:06:ce:01:a5:47:1f:42:d6:45:9a:e3:4c:82:
                    d3:53:67:99:82:ff:57:da:82:9b:80:5d:3c:48:8e:
                    8f:6a:d5:0b:97:3d:95:5b:e1:7d:26:33:77:ae:3f:
                    13:6e:af:a5:e7:85:5b:2c:b8:86:b9:9d:ca:24:20:
                    1c:07:71:c3:1c:07:33:69:2b:ec:62:87:b4:80:e0:
                    af:1a:a6:c5:5d:1a:f7:7e:87:b2:c7:f6:1d:d0:68:
                    4a:64:3f:51:9e:09:c8:22:d7:8d:27:d4:cc:93:01:
                    cc:61:6f:f7:70:6f:58:99:32:ab:19:d7:83:25:14:
                    f9:d8:e5:bd:f4:ff:27:ea:f5:aa:68:15:ae:97:18:
                    6e:71:2d:7e:c8:3f:7a:3f:e6:63:0e:e5:0d:28:6e:
                    b4:91:13:56:be:e4:2f:93:d5:04:ff:cd:48:f7:2b:
                    a6:ee:4e:40:08:c6:10:d3:4e:7e:71:ae:10:4e:97:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:76:03:20:ED:AB:B1:0E:A4:7C:DB:F9:85:D7:DD:EA:08:8B:BF
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:2a:cc:72:95:ca:76:78:3f:0f:2d:eb:a3:17:fe:9d:d5:
         ba:cc:1a:9a:6f:d2:df:d8:59:13:84:8f:e7:20:b3:4d:fe:e3:
         64:24:13:9d:27:f5:7d:27:12:ce:3e:26:c4:a0:b8:46:bb:e7:
         bf:d7:b4:08:a2:ed:3a:4b:72:37:dd:8b:90:03:db:0f:cf:a0:
         0c:6f:eb:34:c7:9e:a7:bd:d5:4e:e6:c1:1a:03:6c:cf:93:08:
         e4:0c:fd:53:f9:3a:67:b0:81:f6:33:61:d7:83:60:eb:dd:3c:
         20:a3:a5:d3:05:60:94:2b:6e:37:c8:a9:62:eb:eb:34:35:d8:
         0c:85:72:eb:3b:22:bd:7e:08:16:d3:ae:54:76:bf:65:02:2b:
         4a:26:b4:fd:cc:27:c6:08:b4:e5:ac:28:92:64:bc:8b:e2:1b:
         51:d2:88:ea:30:34:fb:cf:56:cc:ba:a6:69:52:de:6c:0c:89:
         8f:89:e0:f1:92:53:f8:3e:74:0a:b6:5c:6b:df:b9:8f:fe:37:
         6a:18:11:30:83:9c:da:01:59:7d:72:f5:29:90:dd:85:26:3d:
         bc:60:15:3d:65:96:8b:8a:00:f8:5a:41:b4:84:01:dd:2b:a2:
         11:28:fa:2c:58:62:95:9e:ff:7b:f6:ab:49:d8:80:37:d7:7d:
         00:73:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net