Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          jkQrD15NPQdc1Z7ijsA5h89cvaRIXvejoA76SJ1q25E=
Subject key identifier:   17:E5:62:4B:FF:F4:8E:E9:5B:96:D0:B8:D6:4F:4E:31:A5:84:95:56
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1E1F026D3525D9DD6CED7E4B9D2DCDB55E943752
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:22:33 +0000
ROA not before:           Mon 01 Jul 2024 19:17:33 +0000
ROA not after:            Mon 30 Jun 2025 19:22:33 +0000
asID:                     28165
IP address blocks:        177.184.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1f:02:6d:35:25:d9:dd:6c:ed:7e:4b:9d:2d:cd:b5:5e:94:37:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:17:33 2024 GMT
            Not After : Jun 30 19:22:33 2025 GMT
        Subject: CN=17E5624BFFF48EE95B96D0B8D64F4E31A5849556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:a0:3c:1c:ee:f7:45:8d:9a:7c:91:82:7c:
                    53:c1:ae:5e:f5:6e:e4:01:86:c6:ed:93:92:4c:d8:
                    c8:57:ff:02:f7:43:04:9b:3c:6c:5e:6a:cb:a1:94:
                    b5:d0:77:81:4a:a0:aa:06:d6:4b:20:b7:af:f0:0f:
                    bc:fe:bc:56:4a:76:6f:ce:18:9d:5b:74:c2:e1:dd:
                    23:9a:31:a0:3c:01:a1:52:62:7c:c3:e6:bd:7a:f3:
                    8c:ec:b9:4d:68:be:3b:21:56:f8:3b:fc:e5:bc:c0:
                    e8:d0:31:e3:5c:c9:f3:8d:e2:ea:a6:10:c3:96:7c:
                    80:a2:c1:f3:74:11:fb:89:10:af:77:a7:e2:fb:b9:
                    87:61:a7:7c:90:71:02:88:c9:03:87:40:2f:05:8e:
                    2c:22:e8:de:04:06:ba:39:f5:0a:a5:a8:99:c6:18:
                    ab:dc:67:8f:9f:49:ec:9b:21:27:c8:03:5b:21:4f:
                    99:0b:00:26:49:e5:ac:ca:b0:4c:18:39:ce:b1:54:
                    de:75:57:58:d8:44:cb:be:9e:84:23:47:05:79:09:
                    78:34:74:1d:41:a0:79:13:1f:e3:97:96:08:3d:85:
                    6c:c7:b4:d9:5b:9f:83:8d:d1:ba:6c:3e:72:0a:cc:
                    fe:7f:53:4a:fe:d0:f3:7f:9a:ba:bc:57:c6:61:b6:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:62:4B:FF:F4:8E:E9:5B:96:D0:B8:D6:4F:4E:31:A5:84:95:56
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:15:5a:ca:5c:85:d5:07:c3:79:ee:e1:c9:3a:15:99:d4:
         5e:4f:6f:8c:75:42:48:2e:b8:a3:67:15:44:02:2c:12:c3:c1:
         87:0e:97:4f:93:93:a8:49:48:f0:4b:c8:06:d1:a6:45:5a:74:
         41:f2:2d:8b:03:bb:9b:51:3f:47:a8:61:c8:ed:60:7d:3a:b2:
         da:6e:20:22:a5:cf:f0:02:0f:52:4c:99:be:1f:f4:2e:20:bc:
         d7:22:46:3f:ed:fb:2b:46:6b:d1:78:08:0a:06:73:aa:e5:42:
         bf:be:74:9c:e5:31:65:e6:70:bc:76:aa:bc:33:cf:2c:f5:40:
         7c:22:63:71:17:a3:aa:30:ec:da:16:ea:57:ec:07:02:c4:f7:
         7e:7d:22:e8:d3:eb:5e:48:7e:46:7a:92:ca:51:4c:5c:bb:32:
         db:60:18:64:50:22:7b:cd:ed:ac:1d:e2:7b:6c:6b:18:f0:bb:
         2a:dd:93:90:0a:3c:8c:aa:d4:16:28:2f:14:30:37:5e:c0:f0:
         be:69:8c:4b:c1:5d:e7:5d:88:30:d5:4a:bc:d9:8b:15:65:b5:
         70:0c:dd:95:07:55:e7:9e:e1:a5:80:59:43:62:6a:db:bb:16:
         66:4e:5f:06:75:26:af:28:c0:e3:09:6d:39:06:a7:80:b9:79:
         19:ce:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:51 2025 by rpki-client