Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
File:                     3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          curXqVyBNJQ/T00GobRzNeAx7dNWkE7gOGS03OsWIes=
Subject key identifier:   CF:C2:A8:00:73:37:3E:47:BE:C4:7C:9E:05:93:C6:52:D6:37:0A:09
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       0A4C92BA1E5C9040AA97B92DD2C681F7D3C697E7
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:22:52 +0000
ROA not before:           Mon 01 Jul 2024 19:17:52 +0000
ROA not after:            Mon 30 Jun 2025 19:22:52 +0000
asID:                     28165
IP address blocks:        191.240.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:92:ba:1e:5c:90:40:aa:97:b9:2d:d2:c6:81:f7:d3:c6:97:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:17:52 2024 GMT
            Not After : Jun 30 19:22:52 2025 GMT
        Subject: CN=CFC2A80073373E47BEC47C9E0593C652D6370A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:43:74:c6:6a:7c:34:8d:ce:9a:6c:26:dc:
                    63:cd:7e:44:4a:a7:f6:3a:fe:3d:a9:6d:0b:a6:64:
                    5c:9c:13:98:af:1d:4c:3a:de:bb:fd:e3:40:a4:4a:
                    40:9a:8e:e8:8c:4f:29:d3:57:c5:14:b4:b2:ed:57:
                    bd:36:a1:ce:ef:fa:2e:91:cb:39:f7:bb:7e:a8:fe:
                    d3:fd:b4:13:59:2a:1d:c1:22:a7:17:eb:62:3b:fc:
                    bf:f2:49:0b:5e:e5:32:7d:14:da:12:0d:c7:bd:02:
                    02:36:38:3b:99:23:9d:39:a0:35:28:6f:cc:e7:35:
                    47:6d:99:08:87:f2:a7:72:b3:dc:83:ff:18:bb:a3:
                    bd:69:e2:74:ad:1f:27:39:78:ed:3b:86:92:67:7a:
                    3d:8c:e9:13:62:70:97:dd:56:fa:5f:42:1d:89:f3:
                    d8:17:c6:3b:57:0d:56:03:15:74:2f:6a:e3:6d:47:
                    d9:b4:c2:b1:d5:fb:2a:9f:04:16:67:17:fa:c3:5e:
                    94:ed:09:5e:b7:fb:c6:31:74:7f:28:b5:80:c5:5b:
                    48:89:b4:01:3a:da:54:a1:ad:92:f4:26:a9:8a:4f:
                    0a:92:2d:39:39:59:73:0e:8d:80:59:59:c4:76:5f:
                    a1:2c:61:28:68:e4:a0:42:5c:c4:b1:d8:a6:c1:42:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:A8:00:73:37:3E:47:BE:C4:7C:9E:05:93:C6:52:D6:37:0A:09
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:33:95:da:11:83:c3:4e:7c:6b:6e:d0:1a:cf:ec:c6:c6:64:
         99:9d:b0:57:e3:b3:e3:df:93:dd:11:6e:5b:f3:67:a0:cf:8d:
         10:d3:72:ec:59:7b:3b:6d:ea:5a:f5:92:69:9c:d8:e3:b1:ac:
         5f:90:65:1f:9c:e0:f6:2d:67:37:63:d8:4e:0b:81:57:13:81:
         9e:84:03:3a:8d:2e:96:b2:fe:ef:96:cf:9c:6f:88:ca:6b:32:
         4e:99:ae:a7:45:06:05:00:46:ad:2a:7c:a5:f7:e9:72:5f:b3:
         34:33:ea:1f:b2:d4:8c:b1:3b:96:5d:6f:72:5a:2c:2c:d5:54:
         36:f0:48:49:80:84:fb:fd:64:c1:c8:58:95:e7:a2:66:f5:00:
         d6:93:8b:a7:5b:3f:dd:e3:f6:2d:57:0e:cd:a9:7a:0a:a7:70:
         92:63:e9:73:0f:d3:8f:39:d4:c9:1b:a9:33:43:c0:a8:3e:2f:
         59:ec:53:87:a8:1a:21:17:21:a5:f5:40:cf:d2:26:78:18:51:
         15:68:db:67:bc:f2:93:bb:01:06:66:cd:3e:a9:de:df:87:b4:
         ff:df:a2:3c:85:23:ca:7e:37:1d:8b:01:b8:97:c6:11:3e:b1:
         5f:f9:4b:13:96:37:41:fe:c0:9a:83:12:0b:3c:aa:15:a9:65:
         f9:3a:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:46 2024 by rpki-client on console.sobornost.net