Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230372e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          A0GA7Xe0MC9hCuAnjVEUf7l/55ss1bnDDb9B6MAacH8=
Subject key identifier:   D3:80:63:01:88:FC:76:8F:7A:A6:73:65:58:AE:12:46:2E:D8:5D:82
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       46834963C6DE0D6F08335B39E4E877DDA86326D0
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:56 +0000
ROA not before:           Mon 01 Jul 2024 19:18:56 +0000
ROA not after:            Mon 30 Jun 2025 19:23:56 +0000
asID:                     28165
IP address blocks:        177.184.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:83:49:63:c6:de:0d:6f:08:33:5b:39:e4:e8:77:dd:a8:63:26:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:56 2024 GMT
            Not After : Jun 30 19:23:56 2025 GMT
        Subject: CN=D380630188FC768F7AA6736558AE12462ED85D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:be:17:9e:d7:f4:d2:75:2b:6a:15:46:61:
                    c6:bc:7f:d4:36:dd:20:f0:29:af:3e:fb:83:1a:46:
                    4b:10:9d:ac:a0:22:23:62:f0:01:e3:70:d3:90:22:
                    c0:4d:5c:ff:46:60:fb:32:fc:16:51:36:6d:df:9d:
                    59:32:13:dd:b7:1f:6a:6d:2d:7e:43:d3:67:32:cd:
                    a2:8e:d8:85:18:6d:ab:e7:91:f5:80:9e:b0:0b:b6:
                    fc:84:cf:2b:22:a8:b3:7a:5a:50:9b:9c:42:7d:dc:
                    c2:fd:8a:ab:06:99:c2:31:55:9b:09:34:fc:f6:6d:
                    80:81:08:bc:6a:9c:40:e0:b0:5b:20:05:46:88:1c:
                    ad:d8:4e:ff:2f:9e:c8:46:80:68:76:25:59:46:81:
                    e0:ec:81:0a:c0:91:6c:7d:4f:79:fb:83:74:dd:31:
                    72:16:aa:b7:f2:ed:ba:1c:4c:f4:20:f8:5a:af:a4:
                    a8:3c:0c:9a:b2:22:85:5a:03:70:cf:94:79:7c:41:
                    f6:66:59:52:4c:33:a1:fa:27:e0:d9:62:50:8b:5d:
                    30:ff:d4:aa:f6:05:c4:2f:db:e5:ab:84:c8:89:5a:
                    d4:c1:7a:a9:78:88:5e:d9:82:21:67:b1:b0:41:e6:
                    9c:15:93:61:61:c5:14:b6:17:e9:6e:b6:30:99:15:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:80:63:01:88:FC:76:8F:7A:A6:73:65:58:AE:12:46:2E:D8:5D:82
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:4f:93:1c:64:30:14:b7:e7:98:00:c4:81:a3:7b:17:47:
         90:47:b1:27:b4:00:0e:82:40:ab:6a:67:6b:6a:b9:a0:09:1d:
         f2:9e:ee:40:bc:2a:62:6d:8a:24:cf:d1:ad:44:c4:3c:db:7a:
         c6:ce:67:1a:4e:51:12:e6:84:51:32:2b:c3:e7:2d:c5:8d:fb:
         42:24:55:1b:af:92:2e:65:b2:43:0e:33:2b:d4:75:14:e0:84:
         71:35:cd:a2:9b:4b:c6:d6:d3:2e:21:00:30:9b:63:64:58:a8:
         8b:a6:eb:a9:61:63:43:fc:ee:05:cd:16:03:87:f9:81:6e:8e:
         b1:f5:a2:77:36:18:5b:c0:c5:b8:4c:ba:74:a7:00:cd:c5:78:
         63:5f:fe:52:28:ed:fb:11:9a:33:e3:32:1b:09:8d:2a:46:de:
         c4:fe:a3:a0:6f:2b:77:f0:f7:f1:2f:60:0b:26:cd:8c:34:a1:
         8f:8e:a1:2d:ac:cd:3a:31:1f:39:cc:d6:43:a5:bc:f1:7d:29:
         be:37:71:3f:1e:d2:91:56:d7:46:4b:f8:28:42:b4:f1:41:82:
         c5:a9:c2:69:ac:43:87:49:01:99:a3:97:42:83:85:2d:19:cd:
         b4:a1:e1:e4:14:5b:d2:4c:2e:4c:5a:64:51:c8:8c:76:a0:25:
         ba:bc:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:59:24 2025 by rpki-client