Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          UD+UpPU084f8udJjjL35/fgdD66CznPO0KmluytjMLI=
Subject key identifier:   51:1D:B7:09:63:51:C8:B8:41:E0:1C:16:21:62:A5:CD:83:72:CD:4A
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       68603128D8DD275B9AF6643E1CB4141C4C37DCE5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:26:42 +0000
ROA not before:           Mon 01 Jul 2024 19:21:42 +0000
ROA not after:            Mon 30 Jun 2025 19:26:42 +0000
asID:                     28165
IP address blocks:        177.222.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:60:31:28:d8:dd:27:5b:9a:f6:64:3e:1c:b4:14:1c:4c:37:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:21:42 2024 GMT
            Not After : Jun 30 19:26:42 2025 GMT
        Subject: CN=511DB7096351C8B841E01C162162A5CD8372CD4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:d6:bd:74:d2:34:37:4e:22:0b:da:0f:cc:
                    93:df:62:4b:33:41:3e:48:a2:65:c9:17:28:1e:33:
                    4e:61:ec:3c:3a:55:47:27:03:03:11:21:51:87:63:
                    35:c8:07:5b:44:7d:d7:76:f1:bf:8d:5d:6a:29:c7:
                    a5:be:87:02:7e:21:06:f8:aa:65:79:e2:16:1c:c0:
                    68:b8:51:79:45:6b:12:cb:0e:60:d4:22:13:a1:42:
                    a8:b1:4d:9d:c0:6f:b1:a0:89:af:d7:8c:da:65:a2:
                    83:b2:29:da:14:1d:46:4e:16:c3:a2:f2:29:d7:9a:
                    b7:7c:cc:af:b3:f8:f7:06:bc:02:a1:d2:1f:c2:63:
                    92:28:5b:52:f5:dd:2b:df:1d:a0:78:e1:7a:81:81:
                    18:44:b2:af:6e:db:f5:92:3d:a6:4c:2c:e2:47:97:
                    47:59:23:a2:37:e7:af:f4:1e:c8:54:2a:12:4d:2a:
                    7f:55:92:8f:6a:e0:3e:55:5d:86:5e:85:e6:81:ad:
                    74:8a:a5:64:86:53:a7:a8:da:b5:17:87:7a:88:1c:
                    3a:64:18:6d:0c:31:fa:8f:11:18:eb:17:71:90:34:
                    21:35:50:46:ea:f9:d1:b7:79:88:66:0b:ff:dd:e6:
                    4d:48:7e:dd:31:36:3d:74:fd:03:77:64:ae:c4:7e:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:B7:09:63:51:C8:B8:41:E0:1C:16:21:62:A5:CD:83:72:CD:4A
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:6f:f2:d4:76:8c:c3:f5:9b:ee:ba:e3:cb:ce:f7:fc:d7:
         b9:cc:fe:20:84:a0:bd:9c:7b:99:5f:e3:af:46:2b:ea:a4:da:
         b2:9d:fc:af:41:66:ec:fe:6c:30:56:34:bb:17:54:9e:1d:e9:
         cb:b8:cc:61:99:89:34:e7:93:2d:b6:4e:72:ee:cd:85:d5:d2:
         35:fa:37:17:b9:e1:0e:a3:30:26:e8:76:cc:b4:d7:a0:40:0b:
         d5:94:13:cf:8e:25:f4:5f:48:4e:aa:56:46:5f:84:32:ad:c9:
         39:fc:17:6a:04:81:81:6a:86:42:ca:c1:a7:3e:4b:a1:7f:ac:
         fa:44:9a:22:13:c3:4e:15:ad:0b:ba:72:a8:6d:fd:2e:fb:50:
         e2:b8:04:c9:8a:47:ab:50:da:18:a7:38:9e:0b:b0:9b:ba:94:
         54:68:cd:bb:4f:51:99:bd:81:f5:fb:c8:82:0e:2f:49:85:00:
         50:99:e3:8b:a5:57:aa:99:54:b9:79:51:74:55:f5:4a:86:ee:
         03:1e:b6:9a:8f:14:df:fd:f1:fa:fe:21:53:9e:99:d0:cd:1b:
         8c:dd:fc:1e:22:d3:82:fd:da:fc:8b:a1:fa:88:1f:c9:5d:eb:
         ac:17:a2:3d:4a:ef:4c:99:50:0a:2a:80:e7:1e:6e:ae:c5:ad:
         d0:10:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net