Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          /8O+I+FlppnTeL8k1oo1TnwiUmipRnOjCCSQXn1ZXuk=
Subject key identifier:   4E:1D:D0:27:A9:E2:86:CA:BE:DF:FE:7E:A6:B4:21:4E:87:B4:E9:4B
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       5736905B4639B829AF9A640EF6EEFDC22F6C7938
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:39 +0000
ROA not before:           Mon 01 Jul 2024 19:19:39 +0000
ROA not after:            Mon 30 Jun 2025 19:24:39 +0000
asID:                     28165
IP address blocks:        187.62.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:90:5b:46:39:b8:29:af:9a:64:0e:f6:ee:fd:c2:2f:6c:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:39 2024 GMT
            Not After : Jun 30 19:24:39 2025 GMT
        Subject: CN=4E1DD027A9E286CABEDFFE7EA6B4214E87B4E94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:39:2c:14:7f:6c:57:07:6e:1a:3a:04:85:
                    08:5e:ba:ef:44:94:e4:ed:75:15:ee:8e:bc:64:3c:
                    79:07:48:78:c3:6a:f8:a5:bb:f5:6b:7a:a5:73:91:
                    71:66:2f:19:ba:fd:66:11:5c:b6:51:3a:a9:cf:38:
                    4b:4b:ae:94:0c:4c:12:d7:01:39:77:47:23:c7:02:
                    16:42:40:d2:2c:f7:98:95:44:b8:be:c8:94:ac:74:
                    01:ac:aa:22:b2:3c:63:ae:be:0b:3f:46:3a:83:bd:
                    7c:5f:38:eb:45:ce:75:54:59:07:f2:8e:3e:c4:24:
                    f1:f2:50:b3:5e:d5:0a:91:1f:0f:95:69:e9:fd:86:
                    fc:a2:f2:ef:61:16:9c:0a:af:ec:ba:f7:e4:88:5d:
                    bc:d1:86:4a:6b:73:09:e7:2d:34:99:7c:55:2b:54:
                    31:dd:cb:6f:1e:b0:84:6c:95:b3:a1:b0:b9:3e:91:
                    c4:b4:1a:6c:7c:3e:2a:cc:6e:9a:85:b4:65:0a:06:
                    f1:fd:a7:5b:e5:2f:17:f6:3b:aa:89:79:45:16:a9:
                    fe:29:8b:f2:c3:aa:e1:26:02:ff:0e:1b:88:54:54:
                    7f:4a:a3:5a:80:3d:d2:c2:a7:f4:24:55:a3:92:5d:
                    48:fd:4b:25:b9:08:a2:51:5e:1b:60:7b:23:09:42:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:D0:27:A9:E2:86:CA:BE:DF:FE:7E:A6:B4:21:4E:87:B4:E9:4B
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:c8:00:00:d9:10:b8:3c:94:fc:0e:99:0f:9c:f6:af:5f:
         14:56:45:a1:b6:8f:92:a1:dd:c0:72:87:b7:2e:d7:b3:0e:ef:
         1a:3d:aa:10:48:3d:fa:8b:f7:fb:95:c7:e8:4a:dc:75:65:ab:
         f7:6f:57:91:84:23:9e:5e:55:55:a9:b1:ca:30:a8:3c:40:55:
         49:7f:b4:f4:3e:5b:04:78:3d:21:3c:02:0c:85:4a:de:88:d5:
         86:03:7b:25:cf:a3:7c:f7:ff:5c:c2:4d:8c:12:42:1b:d7:72:
         7b:43:58:1b:55:7e:b9:31:34:8b:7c:73:2b:24:32:30:3e:c0:
         dd:0d:01:f4:15:73:36:21:65:dc:15:01:b4:15:bb:b7:92:b1:
         20:18:c1:97:b0:ea:c2:36:db:54:d2:cd:c3:2c:5b:fd:50:75:
         4a:24:2b:1f:a4:75:d8:89:c0:19:69:9e:fc:ca:11:30:e8:ae:
         0c:97:27:5e:3c:87:84:e0:fd:a9:9b:26:82:4b:b0:4f:f3:65:
         aa:38:d9:3d:57:d4:03:c2:47:7e:f2:13:a6:9b:a0:9b:ed:13:
         51:88:3b:22:1e:5d:2f:b3:eb:e1:be:d5:c9:a5:e5:32:93:94:
         46:07:bc:2e:3e:2e:4f:ba:0d:8b:5a:1c:da:1b:98:5a:69:dd:
         a2:35:06:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVzaQW0Y5uCmvmmQO9u79wi9seTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTE5MzlaFw0yNTA2MzAxOTI0MzlaMDMxMTAvBgNV
BAMTKDRFMUREMDI3QTlFMjg2Q0FCRURGRkU3RUE2QjQyMTRFODdCNEU5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIzksFH9sVwduGjoEhQheuu9E
lOTtdRXujrxkPHkHSHjDavilu/VreqVzkXFmLxm6/WYRXLZROqnPOEtLrpQMTBLX
ATl3RyPHAhZCQNIs95iVRLi+yJSsdAGsqiKyPGOuvgs/RjqDvXxfOOtFznVUWQfy
jj7EJPHyULNe1QqRHw+Vaen9hvyi8u9hFpwKr+y69+SIXbzRhkprcwnnLTSZfFUr
VDHdy28esIRslbOhsLk+kcS0Gmx8PirMbpqFtGUKBvH9p1vlLxf2O6qJeUUWqf4p
i/LDquEmAv8OG4hUVH9Ko1qAPdLCp/QkVaOSXUj9SyW5CKJRXhtgeyMJQlXbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTh3QJ6nihsq+3/5+prQhToe06UswHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzODM3MmUzNjMyMmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz7fMA0GCSqGSIb3DQEBCwUAA4IBAQByf8gAANkQ
uDyU/A6ZD5z2r18UVkWhto+Sod3Acoe3LtezDu8aPaoQSD36i/f7lcfoStx1Zav3
b1eRhCOeXlVVqbHKMKg8QFVJf7T0PlsEeD0hPAIMhUreiNWGA3slz6N89/9cwk2M
EkIb13J7Q1gbVX65MTSLfHMrJDIwPsDdDQH0FXM2IWXcFQG0Fbu3krEgGMGXsOrC
NttU0s3DLFv9UHVKJCsfpHXYicAZaZ78yhEw6K4MlydePIeE4P2pmyaCS7BP82Wq
ONk9V9QDwkd+8hOmm6Cb7RNRiDsiHl0vs+vhvtXJpeUyk5RGB7wuPi5Pug2LWhza
G5haad2iNQZI
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:12 2025 by rpki-client