Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          MHDqdAQk31w9TQYkrc/4JYu7irPQRjj9myIsS+jmkpg=
Subject key identifier:   0F:E8:90:12:72:E1:A5:5B:AD:C6:9F:6E:71:56:85:EE:EF:6C:F6:E4
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       2DF57D2ACA34FC8DF0F53679CC7C00E344EC74F1
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:04 +0000
ROA not before:           Mon 01 Jul 2024 19:19:04 +0000
ROA not after:            Mon 30 Jun 2025 19:24:04 +0000
asID:                     28165
IP address blocks:        177.184.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f5:7d:2a:ca:34:fc:8d:f0:f5:36:79:cc:7c:00:e3:44:ec:74:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:04 2024 GMT
            Not After : Jun 30 19:24:04 2025 GMT
        Subject: CN=0FE8901272E1A55BADC69F6E715685EEEF6CF6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:89:48:1d:a1:a9:26:0f:c5:e3:5e:e2:eb:
                    61:8b:3e:e7:77:2e:52:7f:03:85:e4:2b:55:2e:2d:
                    ec:f2:c3:e2:14:3d:fa:57:61:62:6c:04:62:8b:e9:
                    43:32:6c:4b:8f:21:f8:01:42:9f:59:d1:e8:cc:c7:
                    b3:fe:0f:00:99:cb:a5:57:ac:ca:51:86:60:2a:ee:
                    b3:90:60:21:ff:09:ff:d2:91:f6:a2:73:21:c4:f4:
                    ee:a0:d2:ad:c7:52:38:7f:3c:e5:51:9a:49:90:69:
                    6d:53:07:d1:6d:47:1b:50:d7:d7:8f:7a:89:33:5c:
                    19:e4:c8:62:92:cd:ad:11:84:bd:c0:e1:d3:c5:b6:
                    6b:43:76:c8:9e:86:36:50:8e:c4:ce:66:9c:79:95:
                    d6:a7:1e:1e:ac:f9:6b:d9:34:7f:90:45:57:99:7b:
                    16:b7:d9:70:e0:4d:6a:27:c5:6d:82:92:5c:21:88:
                    dc:c5:a9:85:03:af:8d:99:4d:8f:78:01:aa:81:0e:
                    f6:7f:41:22:06:a9:1c:48:90:c6:da:da:e8:8a:77:
                    8b:3f:06:c6:69:b2:9e:6a:79:ea:84:a9:72:63:ed:
                    32:ae:6f:8b:7e:ff:b8:ba:47:a3:32:3e:ab:b4:65:
                    1d:ef:09:90:41:72:29:9c:d0:eb:63:a6:3b:a6:cc:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:90:12:72:E1:A5:5B:AD:C6:9F:6E:71:56:85:EE:EF:6C:F6:E4
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:66:74:41:d4:ce:bb:05:91:ff:65:e7:b8:28:d1:38:b6:6d:
         7e:a8:71:52:13:d0:2b:70:52:f3:aa:52:ec:14:f4:f1:a7:da:
         18:99:0e:7d:9c:8a:99:f7:cd:bc:48:4a:99:c1:0d:b6:2f:b2:
         c9:46:46:d8:d0:e0:d5:70:e4:05:84:66:e8:20:21:97:a1:3d:
         8d:73:57:5d:3b:87:59:2c:cc:95:63:ef:9e:dd:6a:fa:e6:55:
         29:2f:85:19:c6:69:8c:42:60:a0:4a:80:39:24:81:cc:fb:ee:
         ad:27:ea:47:e4:71:ed:fd:3b:82:3e:1e:67:e5:3d:48:46:df:
         a4:db:70:fb:a9:da:80:35:59:b9:44:79:da:40:68:20:96:be:
         b3:3b:75:7f:2a:4b:33:81:24:58:86:ec:3d:f2:d0:f1:db:fe:
         44:3b:35:b5:23:7e:f9:6f:5e:ca:a1:1c:4f:aa:16:e8:65:45:
         65:d9:31:3e:28:61:e3:58:30:a1:4a:1b:4e:03:07:ee:e4:07:
         29:f0:c9:d3:1c:c3:09:c7:e1:21:6c:03:43:db:81:08:52:44:
         c2:2c:46:37:18:97:55:c3:14:b7:2f:f5:90:f1:89:cd:1f:fb:
         79:c2:eb:57:7a:45:4b:d2:f7:c9:b3:b6:8d:11:c6:eb:29:9d:
         e9:0d:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:56 2025 by rpki-client