Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          ByLtOIAippVnUXb6meL6nrbNYaPIP90gU7D1iOTxR9g=
Subject key identifier:   0C:40:92:F7:A1:85:6B:B8:28:DD:7C:B4:EA:84:03:47:34:6C:D9:10
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       610A26E548E6ABBBF8D5E9E063EF021803F70789
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:27:52 +0000
ROA not before:           Mon 01 Jul 2024 19:22:52 +0000
ROA not after:            Mon 30 Jun 2025 19:27:52 +0000
asID:                     28165
IP address blocks:        191.240.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:26:e5:48:e6:ab:bb:f8:d5:e9:e0:63:ef:02:18:03:f7:07:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:22:52 2024 GMT
            Not After : Jun 30 19:27:52 2025 GMT
        Subject: CN=0C4092F7A1856BB828DD7CB4EA840347346CD910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:a2:85:b0:23:f0:01:31:2c:20:0f:ac:91:
                    6b:64:65:39:3d:cf:f4:83:0f:be:01:05:04:7d:fe:
                    e9:4c:10:6b:db:15:54:f0:a0:0e:73:67:ab:88:47:
                    f4:5d:c8:53:1a:7e:92:e6:ae:3d:ac:d5:2a:19:0e:
                    41:41:c5:44:1f:9c:aa:f7:cd:52:e2:5b:98:6f:8d:
                    9e:56:6a:c7:c6:19:19:fa:84:4a:55:7b:85:8f:53:
                    e7:69:36:40:2f:d5:0d:c2:eb:91:9c:16:ec:65:ae:
                    74:ec:08:68:45:25:b6:5d:95:81:2d:a6:74:ce:dd:
                    0c:1a:a2:33:7f:0b:dd:90:22:66:a4:ea:e1:6d:51:
                    61:a9:a8:2a:c4:0f:8a:34:50:34:f0:e9:da:b0:38:
                    ad:e7:5e:b6:39:40:c0:81:26:1b:0d:7e:f0:ee:c3:
                    c5:6e:e7:ff:20:c7:19:48:53:e3:59:75:3c:d3:cb:
                    8c:da:73:d9:9f:a9:c1:6a:f5:3d:dd:64:7f:f2:84:
                    4f:95:a0:a8:6d:e3:9a:54:3b:c3:f7:1f:04:36:9e:
                    ab:7d:f8:02:50:54:62:98:8a:7e:78:03:a2:e6:23:
                    a3:be:50:40:6c:aa:a4:98:01:b1:36:a6:b9:a1:2d:
                    19:5e:15:13:b6:b8:de:11:c5:70:34:1f:aa:67:00:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:92:F7:A1:85:6B:B8:28:DD:7C:B4:EA:84:03:47:34:6C:D9:10
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:b2:f0:40:f6:1c:18:e4:03:9d:56:02:0c:05:a7:8d:33:
         ec:94:14:d2:78:4f:26:89:01:c2:48:9f:08:78:26:45:bd:98:
         32:7b:45:3f:e2:bc:40:ce:67:41:6e:8c:de:56:fa:8f:bc:ea:
         37:de:fe:3c:cc:9d:51:ff:e3:70:ce:b7:9a:2f:40:fa:99:55:
         9f:c7:a6:b2:09:03:4d:3f:45:06:88:e9:ad:bd:ab:f3:ed:18:
         5c:e4:bd:bc:1c:4e:25:16:9e:29:fb:d5:93:0d:2d:03:60:6b:
         19:e6:86:1a:dd:8b:3a:b4:2a:54:25:26:ef:02:94:78:32:23:
         50:ca:61:4d:48:25:14:e3:b0:ca:68:59:66:6c:7b:62:eb:3e:
         82:be:bd:ae:c4:e0:9c:3a:76:d5:a8:1c:a5:b6:c5:94:f7:f3:
         13:55:20:2d:86:8e:e5:13:ed:51:48:e0:e4:9c:77:e4:88:f9:
         ee:77:ce:da:4c:ad:25:da:c2:11:de:51:dc:d7:0b:4f:b4:53:
         d0:b0:e5:4c:ab:2d:1f:cf:a7:d3:fb:e6:06:fb:cd:e5:fc:0f:
         42:5a:f9:d1:d7:90:f0:36:ee:b5:25:e2:f5:21:19:8b:84:b9:
         17:77:de:bc:92:e0:5f:0e:7a:ec:eb:7c:c7:b5:ee:2b:86:75:
         d7:b5:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net