Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          4mANyNwdY91fsn/p4T9yXeBcTW78WKDYv2lFCvqRhfE=
Subject key identifier:   D0:97:38:2D:7E:A4:99:B5:37:6A:0C:24:A0:FA:6C:80:C2:D1:48:6E
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       7C482FC3378D4CB0A0DCFDEE6A504F9AE4FC703B
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:21:31 +0000
ROA not before:           Mon 01 Jul 2024 19:16:31 +0000
ROA not after:            Mon 30 Jun 2025 19:21:31 +0000
asID:                     28165
IP address blocks:        191.240.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:48:2f:c3:37:8d:4c:b0:a0:dc:fd:ee:6a:50:4f:9a:e4:fc:70:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:16:31 2024 GMT
            Not After : Jun 30 19:21:31 2025 GMT
        Subject: CN=D097382D7EA499B5376A0C24A0FA6C80C2D1486E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:2e:c4:4c:c2:c2:41:bc:1a:2d:96:ad:7f:
                    f0:52:22:a0:4e:f8:31:0f:30:7c:d2:c8:63:2f:23:
                    fe:88:35:50:07:72:e1:75:2a:09:d5:7a:75:57:27:
                    0d:2f:1f:23:39:c2:70:0e:3e:91:87:82:d3:ff:6e:
                    c8:55:b9:4d:ee:d8:32:68:0c:46:36:59:82:50:83:
                    65:9a:6d:b4:84:fc:c4:16:c6:1c:e2:35:7e:ca:c6:
                    db:bd:95:f8:ce:2b:87:65:bf:85:5c:e3:0a:77:0c:
                    5e:4c:88:25:8c:b2:e2:02:a0:a2:ef:1f:5f:03:43:
                    bd:87:69:05:2a:4f:64:e7:2a:dd:7f:38:3f:8a:fd:
                    89:27:aa:2f:38:e0:89:6d:55:c1:ca:05:62:cf:5e:
                    ff:9e:91:d1:66:cc:99:ca:84:4a:10:dd:11:df:52:
                    02:e1:f6:1b:1a:6c:d3:f0:57:7d:b9:0c:42:6a:08:
                    2f:d5:9c:8f:90:dd:63:9d:7d:01:78:ad:f5:93:90:
                    fe:e3:0f:c7:99:67:93:17:c3:ee:74:fd:dc:df:6b:
                    44:bb:5c:3c:96:97:0f:2f:24:01:14:5b:f2:e9:63:
                    36:b2:e3:fa:02:7a:69:29:80:90:e6:df:d2:18:79:
                    cc:1d:9d:67:20:bd:01:7d:cb:18:84:ec:f3:06:3a:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:38:2D:7E:A4:99:B5:37:6A:0C:24:A0:FA:6C:80:C2:D1:48:6E
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:ac:d9:d8:cc:f1:2b:d6:01:81:e7:69:56:ec:61:b8:0e:58:
         ce:db:b0:bd:ea:af:9e:39:cb:c8:c3:14:87:b9:db:a9:fe:87:
         fc:23:19:cd:25:9a:ee:87:6a:22:8d:a1:29:84:54:45:81:06:
         d6:78:ab:cd:a5:e3:f6:cb:e8:72:2d:34:72:af:49:d1:87:a9:
         62:37:66:ea:c8:cc:d0:4c:48:6a:4f:83:6b:c4:9d:36:77:37:
         92:46:87:9b:bb:4d:90:4d:2f:de:43:63:8b:17:b3:b7:ee:b5:
         53:45:d8:22:c9:75:00:d6:9a:3c:a3:e5:ee:2f:24:05:04:c8:
         b5:5d:74:68:39:58:ca:72:be:db:14:b2:06:58:8a:02:42:2b:
         2e:c7:db:69:f6:cb:f7:06:fa:d9:1c:aa:da:2b:db:21:9e:4b:
         2d:e8:b0:41:fd:b7:c8:52:ec:9d:50:e0:a7:6b:57:75:79:33:
         2b:f0:1b:ed:18:1a:72:bc:4c:f7:98:6e:23:47:53:05:71:84:
         b1:2c:b4:ef:fb:61:60:ce:94:6e:4d:b9:84:28:af:f2:84:99:
         29:00:88:d4:b7:35:19:1d:cc:64:cc:b9:62:a7:fd:5a:3d:d1:
         c1:f0:2c:bc:b4:c9:50:71:56:0e:1c:6f:56:27:1e:19:7d:f8:
         39:05:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:28 2025 by rpki-client