Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3230382e302f32302d3234203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          GdNHyNAYnzam3w6Mq4uGcRp+6BiVl4OIO3c/lQ+OOpo=
Subject key identifier:   70:C2:DA:F4:16:5B:D6:7C:1F:C9:88:B2:C6:FA:C4:87:A9:E5:FE:4E
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       3232FD498F4B1D0E9306053068643C2CB8F27C75
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3230382e302f32302d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:27:02 +0000
ROA not before:           Mon 01 Jul 2024 19:22:02 +0000
ROA not after:            Mon 30 Jun 2025 19:27:02 +0000
asID:                     28165
IP address blocks:        187.62.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:32:fd:49:8f:4b:1d:0e:93:06:05:30:68:64:3c:2c:b8:f2:7c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:22:02 2024 GMT
            Not After : Jun 30 19:27:02 2025 GMT
        Subject: CN=70C2DAF4165BD67C1FC988B2C6FAC487A9E5FE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:c3:fc:41:cb:75:bd:13:96:c8:ac:c9:96:
                    dc:86:a2:ed:25:73:04:de:61:bf:72:94:d8:09:5b:
                    86:2c:af:51:df:97:47:14:6e:22:4e:4c:48:61:e5:
                    dc:54:97:fd:3c:17:bf:b3:9a:2f:48:0f:ae:ad:35:
                    8d:89:eb:05:6f:2d:f2:f6:a9:65:bd:0c:18:05:fd:
                    66:c6:fc:17:c2:b5:77:e8:3c:19:4c:21:a5:e3:45:
                    77:78:34:7a:a4:b4:c3:9a:b3:e2:be:66:1a:96:3a:
                    92:af:6e:ff:0e:d7:0c:3b:f9:13:a0:69:4d:37:09:
                    a8:7c:07:ff:a8:84:cf:23:0c:30:1b:63:04:38:24:
                    7f:9f:77:ab:8d:05:90:6f:96:fb:ca:49:25:06:8f:
                    ec:91:b8:e4:c0:85:8f:ce:81:1e:7d:39:c6:ca:e1:
                    03:99:35:b9:21:a6:88:99:96:12:96:91:d8:b1:d6:
                    f9:90:cc:ca:cb:43:41:41:8b:cc:59:97:d1:e4:79:
                    36:73:eb:2f:76:34:70:2b:52:1b:e9:45:c6:b8:79:
                    dd:8e:50:2e:33:eb:dc:83:3f:32:21:fc:32:1b:08:
                    c0:6c:0a:fa:dd:61:b3:d6:6a:d3:b3:cf:79:7f:7d:
                    34:fa:a0:bd:4b:04:a2:04:19:8b:55:fc:5c:aa:99:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C2:DA:F4:16:5B:D6:7C:1F:C9:88:B2:C6:FA:C4:87:A9:E5:FE:4E
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3230382e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:41:c3:d3:51:50:9d:7a:d2:fc:ec:7f:0f:3b:49:05:70:
         c6:76:0e:68:a2:59:54:fd:9a:67:0e:cb:b8:1c:45:5f:92:5d:
         6a:60:c2:ed:da:eb:ab:b9:f5:12:22:d2:90:42:35:c7:5b:09:
         e7:e1:74:fa:3c:13:80:0b:8c:d5:c7:99:58:d3:21:93:a4:7f:
         85:ea:76:24:ed:07:3e:45:1e:dc:91:1d:8f:cb:73:4e:88:ed:
         01:18:f3:fb:af:de:56:5a:78:ad:e1:3d:b4:3a:6b:b0:3d:09:
         4c:57:b5:1f:a8:cd:7e:a9:ff:8b:c2:fe:07:d4:76:fd:2f:f7:
         e8:d5:af:32:84:93:72:43:30:b7:c3:7c:3a:d6:58:34:b6:e9:
         7e:83:64:3b:61:0b:81:f6:5d:8b:d5:9c:11:28:79:b1:d0:41:
         63:e8:f5:c5:c2:44:90:fd:d8:55:f4:57:c9:22:fb:09:f8:1b:
         58:04:0c:06:e0:e4:c8:ec:4d:f5:2e:bd:a3:ae:f6:e6:43:b5:
         ba:50:9b:64:6d:f1:cf:7c:a6:39:bc:f0:90:3d:1b:4b:55:fc:
         96:12:80:60:a3:f9:31:93:e5:f1:50:35:d5:d9:5b:03:17:05:
         4c:58:5a:62:6f:06:d4:90:32:d2:1a:38:52:8c:5c:fb:d2:51:
         7a:76:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net