Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          4xvLTuoOc+/RfTBUVJT/470oYjLthwJ6hqh+9HJ6x64=
Subject key identifier:   06:93:5C:3B:D0:B5:83:62:00:4E:22:70:73:AC:36:D5:73:4F:6E:31
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       2EE8D6A9FB16F264DB8EEA40CAF2EAB7E44BD616
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:25:44 +0000
ROA not before:           Mon 01 Jul 2024 19:20:44 +0000
ROA not after:            Mon 30 Jun 2025 19:25:44 +0000
asID:                     28165
IP address blocks:        187.62.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:d6:a9:fb:16:f2:64:db:8e:ea:40:ca:f2:ea:b7:e4:4b:d6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:20:44 2024 GMT
            Not After : Jun 30 19:25:44 2025 GMT
        Subject: CN=06935C3BD0B58362004E227073AC36D5734F6E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:48:33:ea:46:85:a2:68:ac:45:72:fb:04:
                    22:e8:f4:72:8c:b2:8e:49:24:8c:a3:1b:b7:8a:7f:
                    11:ee:24:46:9f:38:82:3a:c6:0d:93:f8:61:3f:60:
                    39:d9:62:49:e2:97:eb:a7:b6:49:56:b2:b5:24:8b:
                    64:9d:29:5d:56:13:92:f3:a5:16:ba:56:91:95:5e:
                    2f:7a:46:0b:c7:5f:13:46:c0:98:25:e1:e9:ed:0f:
                    95:7f:cc:75:ea:ff:ec:17:2e:e6:de:67:77:4f:64:
                    0c:9b:03:7e:34:78:74:28:67:58:49:85:3f:ab:53:
                    35:82:15:72:87:c9:fb:ea:9a:20:58:62:26:83:8d:
                    26:ca:25:c1:59:02:25:21:df:64:58:8e:a4:df:15:
                    b6:09:e7:ac:3c:ce:ac:aa:ce:5b:ee:7c:46:46:b3:
                    d0:dd:b1:f6:b9:bd:ae:29:34:3e:44:e5:39:af:43:
                    35:94:16:9b:3d:e5:db:45:5a:f4:e8:94:25:3b:54:
                    5d:52:1d:a5:03:4a:e2:63:00:23:20:4e:00:b3:c1:
                    ac:f4:47:36:6a:99:84:86:12:43:63:07:58:25:f9:
                    67:a0:c2:86:6b:8b:1f:fe:48:97:bc:4e:f6:11:36:
                    ce:16:0f:90:4e:7e:9b:12:d8:33:9a:66:bc:7d:55:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:5C:3B:D0:B5:83:62:00:4E:22:70:73:AC:36:D5:73:4F:6E:31
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:33:63:7e:1b:49:fd:33:07:20:f3:a5:74:1f:08:fe:c7:cf:
         cf:9e:36:6c:f8:94:12:9a:bf:1f:8f:a9:3f:e6:24:d9:d1:46:
         a1:ad:45:b3:82:60:3a:93:c1:fc:24:96:61:55:6d:e0:b8:40:
         00:ba:9f:cc:da:59:87:27:b6:30:c0:f5:c3:a8:3a:d0:78:5d:
         93:8f:52:00:e5:ca:b1:c4:a1:ef:5c:29:98:52:2d:0d:43:1a:
         32:dc:26:ca:31:41:e5:a5:03:8d:f4:90:88:d9:09:3a:49:d2:
         e0:4c:52:61:b6:95:f8:35:20:18:6f:54:11:d9:f1:d3:f7:01:
         e0:e1:0d:96:e0:4b:04:16:20:ef:58:76:8a:19:f2:c1:d4:ef:
         7b:02:b0:a6:d7:1f:e6:d5:8f:41:13:6c:9b:5f:e0:18:31:46:
         cd:70:eb:5a:46:12:da:39:5f:07:a8:45:4c:58:d1:01:e8:f0:
         a8:2a:86:ff:a7:55:f1:2a:8d:33:2d:a3:2a:98:fb:9b:6d:17:
         88:44:a2:2b:38:0b:01:49:29:a2:de:43:78:62:03:8c:e8:67:
         d3:6a:44:39:74:a9:28:21:73:c8:60:2e:08:9c:49:12:fa:f5:
         a1:e3:2d:0a:50:f9:dd:b8:01:81:9b:45:7c:1f:c6:d1:cf:b8:
         0e:50:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net