Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          cFCApYiSfLlxYwI5lirAuD6vOgS49nr+ivqb6Rc6bdQ=
Subject key identifier:   CD:98:80:6D:DE:9C:5A:A4:9E:02:B4:D8:66:74:E7:04:C7:DA:F9:35
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       6356A3324ECD03DFEF3B7C7506972EE0AE32EC1F
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:35 +0000
ROA not before:           Mon 01 Jul 2024 19:18:35 +0000
ROA not after:            Mon 30 Jun 2025 19:23:35 +0000
asID:                     28165
IP address blocks:        177.222.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:56:a3:32:4e:cd:03:df:ef:3b:7c:75:06:97:2e:e0:ae:32:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:35 2024 GMT
            Not After : Jun 30 19:23:35 2025 GMT
        Subject: CN=CD98806DDE9C5AA49E02B4D86674E704C7DAF935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:51:ae:30:bd:23:5b:08:99:41:33:c6:47:
                    91:34:5c:21:66:b7:af:0a:a2:e9:27:66:fd:8b:a9:
                    52:e8:16:3a:78:f9:58:f2:c6:51:73:dd:0c:58:a4:
                    f1:7d:df:d8:2b:f0:eb:e0:fe:1b:01:b4:df:8d:06:
                    bf:75:0b:b5:be:45:38:10:6e:3f:b8:07:58:31:4f:
                    a7:c4:fa:3f:89:7d:94:08:a8:ce:47:46:c1:95:1e:
                    04:6e:26:28:42:5d:97:f7:4f:08:05:90:22:8a:1b:
                    c6:6c:c6:07:fa:fa:cb:da:53:ba:6c:34:d0:61:75:
                    e5:4f:2c:04:8a:76:e8:0c:d3:ce:6f:21:14:fc:ed:
                    bd:6c:5d:1c:ad:6c:e7:78:5f:b6:ed:2c:51:32:b2:
                    4a:34:01:21:0d:72:b8:4e:2b:97:40:f2:7a:29:76:
                    cb:a1:8c:4e:d4:ed:7d:d6:d9:7f:a1:05:98:50:f2:
                    4c:49:54:42:03:4a:8d:73:ef:86:3b:db:ea:da:b1:
                    57:12:02:aa:fd:90:53:7b:39:03:aa:fa:06:7f:e8:
                    51:f2:79:33:3f:a6:a8:af:26:e2:b5:20:31:e6:e0:
                    ba:21:21:8a:99:86:be:34:73:18:a6:a2:5d:73:3e:
                    fa:e0:e0:42:a6:a1:d0:57:b1:1f:1f:76:d5:3b:50:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:80:6D:DE:9C:5A:A4:9E:02:B4:D8:66:74:E7:04:C7:DA:F9:35
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:3f:f1:c4:f8:d5:61:b6:57:dc:67:ca:cb:77:29:41:fb:
         4f:11:f9:0d:98:b4:27:e5:6a:37:a8:43:9e:e2:f7:f2:67:e9:
         2b:6a:09:f0:ba:c7:e6:89:a0:51:aa:8e:67:df:f2:eb:db:58:
         08:f5:10:2f:a9:e1:70:36:e4:1f:e4:0a:4d:cb:0b:b0:46:79:
         47:73:91:a5:d2:51:3b:b8:9c:b5:31:03:53:9e:6c:d6:0c:8d:
         b5:98:fd:18:ba:37:c8:3b:79:5f:21:a5:6d:e2:8c:9c:09:a3:
         07:72:0d:2b:cb:e3:fa:99:66:05:60:28:f9:cd:8b:96:10:a0:
         9a:6e:d5:0a:9d:ec:60:67:99:9c:05:49:41:72:a1:2d:43:58:
         e1:3c:28:22:5b:b7:bc:81:c1:8a:e9:24:f9:6a:8d:ce:cc:21:
         c4:e6:78:62:d6:db:d1:97:7e:a5:4d:27:f5:42:50:e6:db:e8:
         1f:8b:d9:48:85:da:61:71:10:e3:ec:69:46:e6:df:de:ae:0a:
         41:c5:c9:ac:3b:e6:5f:b4:be:3f:11:f0:de:fc:c2:01:aa:57:
         79:4e:ca:ae:c8:71:89:52:44:27:7a:69:92:c3:41:6a:1d:27:
         a2:fd:b7:43:7d:b4:97:23:7c:72:4d:75:99:ed:bb:02:e1:4c:
         43:10:fb:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY1ajMk7NA9/vO3x1Bpcu4K4y7B8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTE4MzVaFw0yNTA2MzAxOTIzMzVaMDMxMTAvBgNV
BAMTKENEOTg4MDZEREU5QzVBQTQ5RTAyQjREODY2NzRFNzA0QzdEQUY5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWVGuML0jWwiZQTPGR5E0XCFm
t68KouknZv2LqVLoFjp4+VjyxlFz3QxYpPF939gr8Ovg/hsBtN+NBr91C7W+RTgQ
bj+4B1gxT6fE+j+JfZQIqM5HRsGVHgRuJihCXZf3TwgFkCKKG8Zsxgf6+svaU7ps
NNBhdeVPLASKdugM085vIRT87b1sXRytbOd4X7btLFEysko0ASENcrhOK5dA8nop
dsuhjE7U7X3W2X+hBZhQ8kxJVEIDSo1z74Y72+rasVcSAqr9kFN7OQOq+gZ/6FHy
eTM/pqivJuK1IDHm4LohIYqZhr40cximol1zPvrg4EKmodBXsR8fdtU7UIAXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzZiAbd6cWqSeArTYZnTnBMfa+TUwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzNzM3MmUzMjMyMzIyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd4XMA0GCSqGSIb3DQEBCwUAA4IBAQBqpT/xxPjV
YbZX3GfKy3cpQftPEfkNmLQn5Wo3qEOe4vfyZ+kragnwusfmiaBRqo5n3/Lr21gI
9RAvqeFwNuQf5ApNywuwRnlHc5Gl0lE7uJy1MQNTnmzWDI21mP0YujfIO3lfIaVt
4oycCaMHcg0ry+P6mWYFYCj5zYuWEKCabtUKnexgZ5mcBUlBcqEtQ1jhPCgiW7e8
gcGK6ST5ao3OzCHE5nhi1tvRl36lTSf1QlDm2+gfi9lIhdphcRDj7GlG5t/ergpB
xcmsO+ZftL4/EfDe/MIBqld5TsquyHGJUkQnemmSw0FqHSei/bdDfbSXI3xyTXWZ
7bsC4UxDEPvV
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:23:50 2025 by rpki-client