Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          441t2854JAApzMh8PVBpJMyrRZsNd225YBe49IbujIE=
Subject key identifier:   7A:A2:41:06:C4:6C:34:D5:CF:A8:CA:A6:7C:68:19:DC:9D:6A:8F:B3
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       0CE639BB923F00C80B71C2330B111D00EDE0E424
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:38 +0000
ROA not before:           Mon 01 Jul 2024 19:18:38 +0000
ROA not after:            Mon 30 Jun 2025 19:23:38 +0000
asID:                     28165
IP address blocks:        177.222.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e6:39:bb:92:3f:00:c8:0b:71:c2:33:0b:11:1d:00:ed:e0:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:38 2024 GMT
            Not After : Jun 30 19:23:38 2025 GMT
        Subject: CN=7AA24106C46C34D5CFA8CAA67C6819DC9D6A8FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:33:64:de:b2:51:e5:b9:83:47:b7:25:13:
                    85:5a:05:e2:12:06:4d:21:04:ed:1f:a8:1e:08:fb:
                    ba:26:c4:6e:8a:01:56:26:a6:c2:01:af:a1:c0:cf:
                    8b:c8:53:10:81:b9:06:e3:3d:79:33:97:4b:11:be:
                    76:4e:30:8c:19:32:da:d0:b8:fe:5f:53:48:f2:b5:
                    67:00:6a:f6:c6:e1:71:d9:85:0d:fd:8c:0e:53:fc:
                    02:ff:fa:12:f7:25:10:13:17:a1:87:27:6e:2e:7d:
                    d7:19:62:56:56:f8:f1:6e:94:1b:3d:e2:8a:fd:f6:
                    33:be:ef:4b:f4:7c:0c:55:b2:63:78:92:58:37:f7:
                    48:bc:2f:26:0a:c7:02:44:c5:63:85:90:cc:88:e6:
                    eb:27:98:9e:42:6b:ce:2c:f2:85:c1:c1:9e:63:86:
                    62:e1:5c:09:83:77:37:32:a4:f4:79:5b:e4:e4:3d:
                    aa:36:ee:8d:46:d4:6e:d9:35:78:36:dd:bb:f6:11:
                    d1:c8:45:49:6a:ca:59:25:84:1c:d0:d9:6f:b5:48:
                    77:fe:eb:39:d4:34:1d:53:10:cd:bc:fa:f1:98:c3:
                    0c:d8:da:d1:40:45:f5:bc:9b:1b:e6:9f:9b:f1:89:
                    b8:7e:d5:ae:bd:ac:fb:a4:0b:26:bb:3f:df:64:3d:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A2:41:06:C4:6C:34:D5:CF:A8:CA:A6:7C:68:19:DC:9D:6A:8F:B3
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:59:1a:ad:eb:1e:ea:75:60:72:bb:cc:6b:49:c3:de:f0:c6:
         70:e7:fb:66:54:33:dd:94:a6:65:bc:ae:45:2f:80:a2:67:c1:
         5e:f3:4f:f4:cc:d6:5a:e8:4a:72:3a:d3:25:41:a7:49:5f:61:
         eb:0e:59:b0:ec:6d:73:9f:b3:ed:49:bc:2a:dc:14:6a:25:41:
         84:e4:08:1f:88:99:d9:ed:df:10:f4:12:70:dc:33:56:5d:b0:
         04:58:86:04:09:85:f3:88:c8:70:c3:fe:48:89:c9:da:f3:51:
         04:ad:a2:18:8f:26:6e:47:0d:79:3b:ea:7a:98:2e:4b:42:f0:
         1a:ce:ad:d8:00:e2:19:b2:6b:4f:2e:33:c2:c4:f6:39:24:27:
         2b:18:df:42:80:94:b9:34:a7:68:57:26:59:f3:2f:b0:b8:6d:
         8c:9f:9c:ef:59:5a:4e:f4:bb:7c:fb:5e:4a:bb:9b:b1:79:5b:
         50:6d:71:06:9b:05:b8:08:09:af:e5:18:a4:9f:de:f9:c8:4f:
         f4:c9:6e:1e:fa:d2:b7:cb:37:2b:36:e0:57:71:31:07:2e:dd:
         b2:a9:5b:15:66:6e:9a:9b:77:af:89:ec:5a:fb:44:b5:af:6e:
         a6:20:55:65:6c:3a:39:f6:9c:bf:5c:46:64:e0:03:23:13:4c:
         93:2f:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:35:12 2025 by rpki-client