Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          RWq5bxaXtLp/TdyXy2u8NMLUskNbuaFbrYql4bMwHlk=
Subject key identifier:   22:78:A0:B4:8C:6C:C8:23:FD:CE:E6:8C:B2:14:64:69:07:3D:D4:13
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       568E0659F2903160EC733D0F8A907038147D3980
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:41 +0000
ROA not before:           Mon 01 Jul 2024 19:18:41 +0000
ROA not after:            Mon 30 Jun 2025 19:23:41 +0000
asID:                     28165
IP address blocks:        177.222.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:06:59:f2:90:31:60:ec:73:3d:0f:8a:90:70:38:14:7d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:41 2024 GMT
            Not After : Jun 30 19:23:41 2025 GMT
        Subject: CN=2278A0B48C6CC823FDCEE68CB2146469073DD413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:f7:66:4a:e4:cf:eb:ff:a2:0b:44:3b:7e:
                    12:16:03:1a:d4:cf:59:3b:2d:33:d4:a0:9a:48:10:
                    31:4c:5d:2b:ce:4a:32:19:8d:79:39:fa:a6:a5:11:
                    fe:cd:bc:07:7c:89:04:dc:3f:de:6e:cf:5c:54:0c:
                    2c:f5:ba:a8:6f:8a:dd:6f:37:8c:16:95:f9:47:b2:
                    5e:b7:4c:f3:a3:29:12:77:86:7c:bc:9f:b5:9e:31:
                    04:33:90:b8:bf:34:9b:16:a2:29:aa:0a:de:8e:94:
                    25:16:5f:98:83:32:62:bc:e2:59:17:c9:f7:f2:ca:
                    86:e2:58:70:ff:0a:80:39:3c:da:d0:b0:09:db:e6:
                    8d:4d:5d:e1:0b:7d:ba:3d:ec:fb:9d:e2:76:d5:a9:
                    7e:b0:96:b3:dd:67:c8:a8:b3:ee:59:58:5e:27:b1:
                    99:91:6d:ee:93:70:d9:cb:2c:2d:57:cc:c9:cd:48:
                    63:43:74:8f:8a:82:95:75:ae:cd:b3:fc:9d:57:23:
                    6e:bc:0d:f0:c6:7c:40:a6:ac:a2:55:7f:86:dd:83:
                    1b:b5:70:7d:73:70:8b:e0:0a:4a:73:57:cd:ce:52:
                    75:4f:c9:27:33:5d:e7:8b:4c:80:97:bd:8f:69:b9:
                    9a:94:70:d7:5b:8f:1b:67:86:09:ae:39:56:9b:84:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:A0:B4:8C:6C:C8:23:FD:CE:E6:8C:B2:14:64:69:07:3D:D4:13
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:02:dd:25:be:84:93:58:70:a4:a3:4a:c6:b4:0a:ee:da:
         5a:ec:74:54:46:f3:a7:98:89:e9:95:30:9f:57:8f:c8:8f:a8:
         3e:79:00:45:f4:8a:25:c5:2b:81:f8:dc:c5:29:c3:60:0d:c3:
         dc:fa:92:db:a2:3e:91:b5:06:b6:37:c7:67:cc:fa:f7:f6:d5:
         dc:89:be:9b:4c:42:cf:11:8b:cd:58:ee:ab:11:41:e8:9a:64:
         7d:89:2d:95:1a:97:b6:6d:2b:20:a1:f3:ba:32:e3:da:7f:a7:
         14:ad:57:18:a3:3b:a2:d9:63:4a:da:12:b9:f9:54:dd:3f:b1:
         5e:ea:d9:38:38:88:7d:27:46:e7:01:72:ef:4c:1e:f2:9d:e3:
         1e:e9:78:c6:5b:fd:13:35:84:86:01:f0:58:f5:c7:52:6b:b6:
         15:17:c8:24:a2:ff:03:28:fc:d4:f2:3d:77:39:77:9a:10:0d:
         4c:18:54:cc:53:ec:30:73:42:39:bc:8d:e9:c8:ea:f9:1e:4c:
         d8:16:db:1a:c4:d2:dd:09:e5:18:11:73:41:e0:4b:6a:20:d0:
         58:2d:f7:82:5e:9a:6d:a5:4d:68:48:09:88:0d:47:dc:11:48:
         3d:45:1a:92:3f:7b:24:1c:68:04:bd:ed:1d:36:77:34:6c:ad:
         cd:c9:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:50:15 2025 by rpki-client