Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          oorrbUZYLOmbnbNY9j+u7EF/F2AAM5AgDATEPSz1RRU=
Subject key identifier:   55:D2:E0:E4:02:A7:58:10:20:B5:5E:EF:79:B0:A8:F5:12:1A:75:5C
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       5B1A40E831A52D7DDFC7025999E979478A0D1CEB
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:36 +0000
ROA not before:           Mon 01 Jul 2024 19:19:36 +0000
ROA not after:            Mon 30 Jun 2025 19:24:36 +0000
asID:                     28165
IP address blocks:        191.240.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1a:40:e8:31:a5:2d:7d:df:c7:02:59:99:e9:79:47:8a:0d:1c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:36 2024 GMT
            Not After : Jun 30 19:24:36 2025 GMT
        Subject: CN=55D2E0E402A7581020B55EEF79B0A8F5121A755C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:cf:00:24:26:40:f4:ca:c6:7d:84:a1:5d:
                    b6:f8:31:43:8a:c4:9b:df:75:96:3d:7f:d1:71:e3:
                    2f:d8:b5:1a:19:fe:c0:62:1c:ad:37:15:b1:77:18:
                    49:44:cc:71:4f:35:91:86:fe:33:95:aa:c8:81:0f:
                    0d:02:9f:08:91:91:04:e9:b1:b0:80:85:52:8c:0a:
                    58:92:ab:8a:12:e4:4c:5a:18:78:9f:9b:cf:7b:a9:
                    04:4a:69:85:6b:2a:d8:3e:85:21:c9:d3:21:85:79:
                    fb:3a:44:4c:b7:98:9a:d1:1a:0c:08:58:13:cd:ce:
                    9e:f2:19:92:dc:b2:83:b1:9d:bf:85:61:09:8b:84:
                    8a:3c:b0:76:96:0f:fe:ac:17:0c:31:b9:3c:c3:11:
                    8c:c2:91:43:32:f3:7d:2d:0f:1b:cf:b7:43:f7:e9:
                    d0:7b:d3:21:e4:62:0b:e3:c2:b1:d2:3f:fc:81:04:
                    44:a7:e5:29:49:11:e3:4b:97:fe:6a:54:5f:c4:c4:
                    2a:36:4c:f2:1a:69:f5:ec:58:28:44:e0:b2:b9:3f:
                    b6:ab:a6:df:b9:45:0e:b5:e2:cc:43:f0:82:f5:07:
                    17:86:6d:9d:e2:75:38:d1:ad:ab:32:8d:7c:41:2c:
                    e1:30:6c:36:ae:1c:e6:40:1c:5a:97:38:f1:0c:b3:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:E0:E4:02:A7:58:10:20:B5:5E:EF:79:B0:A8:F5:12:1A:75:5C
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3134342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:59:39:a0:11:e0:00:4f:a4:02:7c:58:e1:5d:29:2f:48:
         98:cf:e1:00:d7:bc:f3:42:5b:6e:ab:bf:82:a6:09:63:bb:0f:
         64:62:ca:94:7a:5e:83:b4:6f:4d:e2:d9:6d:8e:eb:d5:db:1b:
         65:26:e4:1a:bf:e3:a5:17:4c:37:08:34:aa:f1:af:24:f6:d0:
         0e:1d:76:a1:92:da:67:3c:36:87:57:b9:64:74:41:e6:0e:e4:
         d6:ea:0e:6e:a7:81:70:ff:7a:2d:20:38:ed:e7:7a:05:c4:dd:
         7d:38:64:d7:c8:f6:3a:92:c0:70:81:f9:58:22:2a:7d:6a:d5:
         94:af:32:83:73:6a:00:d2:60:18:08:1d:6a:24:4f:36:7f:8f:
         68:10:6f:a4:bf:05:a7:7c:95:86:0a:79:c9:2f:51:58:90:e6:
         55:7a:00:09:3d:b6:c7:33:e9:3d:58:8d:53:68:a0:fe:3c:de:
         19:25:08:18:fd:3b:4f:d3:7c:77:af:50:2c:87:af:cc:81:e5:
         e0:87:ac:3d:95:e8:9a:ee:84:d4:62:78:3b:a8:96:69:4c:79:
         49:c3:5a:cd:84:77:16:00:35:d1:1a:99:0a:24:f8:aa:27:21:
         73:07:17:c5:11:7d:c6:92:76:9d:b3:03:cb:54:18:c4:bb:ea:
         e7:8c:5b:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWxpA6DGlLX3fxwJZmel5R4oNHOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTE5MzZaFw0yNTA2MzAxOTI0MzZaMDMxMTAvBgNV
BAMTKDU1RDJFMEU0MDJBNzU4MTAyMEI1NUVFRjc5QjBBOEY1MTIxQTc1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTs88AJCZA9MrGfYShXbb4MUOK
xJvfdZY9f9Fx4y/YtRoZ/sBiHK03FbF3GElEzHFPNZGG/jOVqsiBDw0CnwiRkQTp
sbCAhVKMCliSq4oS5ExaGHifm897qQRKaYVrKtg+hSHJ0yGFefs6REy3mJrRGgwI
WBPNzp7yGZLcsoOxnb+FYQmLhIo8sHaWD/6sFwwxuTzDEYzCkUMy830tDxvPt0P3
6dB70yHkYgvjwrHSP/yBBESn5SlJEeNLl/5qVF/ExCo2TPIaafXsWChE4LK5P7ar
pt+5RQ614sxD8IL1BxeGbZ3idTjRrasyjXxBLOEwbDauHOZAHFqXOPEMs9TLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVdLg5AKnWBAgtV7vebCo9RIadVwwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8JAwDQYJKoZIhvcNAQELBQADggEBABycWTmg
EeAAT6QCfFjhXSkvSJjP4QDXvPNCW26rv4KmCWO7D2RiypR6XoO0b03i2W2O69Xb
G2Um5Bq/46UXTDcINKrxryT20A4ddqGS2mc8NodXuWR0QeYO5NbqDm6ngXD/ei0g
OO3negXE3X04ZNfI9jqSwHCB+VgiKn1q1ZSvMoNzagDSYBgIHWokTzZ/j2gQb6S/
Bad8lYYKeckvUViQ5lV6AAk9tscz6T1YjVNooP483hklCBj9O0/TfHevUCyHr8yB
5eCHrD2V6JruhNRieDuolmlMeUnDWs2EdxYANdEamQok+KonIXMHF8URfcaSdp2z
A8tUGMS76ueMWwc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:05:49 2025 by rpki-client