Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          wcy9e84BmBFz3NYZDLdlYzlf1GHEevUxFtiluhkEAsU=
Subject key identifier:   F6:47:53:4C:8D:A1:AB:A5:8B:FB:48:21:64:9E:55:96:78:A3:FB:F3
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       4670CCDFB3A7B2AFA9FDE443113A9C96AAA6470E
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:25:47 +0000
ROA not before:           Mon 01 Jul 2024 19:20:47 +0000
ROA not after:            Mon 30 Jun 2025 19:25:47 +0000
asID:                     28165
IP address blocks:        187.62.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:cc:df:b3:a7:b2:af:a9:fd:e4:43:11:3a:9c:96:aa:a6:47:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:20:47 2024 GMT
            Not After : Jun 30 19:25:47 2025 GMT
        Subject: CN=F647534C8DA1ABA58BFB4821649E559678A3FBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:76:05:30:59:f7:1c:39:81:c2:5a:b9:c4:
                    0c:9a:e3:c4:b7:a8:4c:79:cc:83:00:12:3e:9b:7e:
                    ce:d5:76:ed:bb:ab:fc:cc:28:cb:ca:1c:e8:26:9c:
                    ae:a6:e4:51:a0:78:9b:1f:03:6a:6d:85:e4:08:46:
                    77:0d:b3:1a:9f:e7:32:82:12:3a:e5:37:d2:8d:d5:
                    3b:02:d5:a3:e9:c3:a9:13:56:26:76:2c:a4:8f:ee:
                    a9:d6:c9:76:9c:e7:79:91:5e:dd:ea:c8:2d:bc:e1:
                    95:8b:b5:52:77:1e:a9:4d:f3:b4:c6:dc:d1:d2:fa:
                    50:3b:85:75:7f:e7:08:43:00:28:9c:11:14:6a:40:
                    03:2e:4e:09:3d:89:00:13:11:d0:95:0f:35:69:4f:
                    49:ab:46:89:a2:5d:c0:15:48:74:fa:6b:08:0d:0d:
                    5e:a5:dd:80:4f:14:e6:1f:4c:30:d6:a7:c0:f8:9b:
                    17:e5:b9:95:ea:e1:ce:2f:83:f7:a3:32:c8:73:f3:
                    0a:af:0b:73:e8:35:a4:70:08:c6:e4:9f:84:6a:ac:
                    f4:1d:28:31:31:4c:8d:97:24:b7:c6:c8:43:1c:dc:
                    11:e5:ac:00:e6:47:92:54:3c:b4:a7:c6:06:21:23:
                    19:e7:c0:40:3e:6b:bf:00:b2:5c:36:ed:63:2b:5d:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:53:4C:8D:A1:AB:A5:8B:FB:48:21:64:9E:55:96:78:A3:FB:F3
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:3a:f9:0a:c9:9c:4b:14:90:97:05:6d:85:96:a5:c7:90:
         cf:b7:84:81:2c:f0:54:fb:84:87:9f:88:4e:61:fc:c8:c0:39:
         f9:a3:9f:f6:f6:ef:55:7c:db:d9:65:d7:b7:6f:3c:92:80:97:
         88:ec:33:3d:8a:90:c2:b0:9e:39:a6:fc:2a:ab:cf:5a:7d:9b:
         b9:79:f1:a5:a7:bd:b4:73:ed:9d:4f:8d:5e:9f:96:30:a4:9b:
         c7:f7:e8:8d:c0:8a:70:54:09:bf:58:96:bb:2b:d0:fa:cf:96:
         7c:db:1a:32:2e:0f:34:67:40:67:54:e8:43:b9:66:5a:f4:85:
         c8:43:b1:f8:3e:b7:79:a2:7e:47:1e:90:36:37:80:72:bf:9d:
         dd:80:b8:72:c1:14:2e:c0:7b:00:16:14:4e:24:f2:59:e3:53:
         f7:32:d6:54:cb:53:a6:fa:4d:05:44:9c:13:5c:93:38:29:d0:
         d4:e1:82:50:82:50:e3:91:5d:93:80:ee:58:84:99:d8:5f:51:
         16:a5:d9:bc:ac:3d:63:73:ea:c0:08:0b:c0:9f:2d:40:a5:08:
         ec:62:6d:73:91:60:c0:a0:e2:2d:33:f8:c2:fa:44:5b:45:f3:
         35:5f:06:c1:1f:64:d0:f7:59:2e:c7:f7:03:26:75:49:04:16:
         22:90:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:49:15 2025 by rpki-client