Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          9VcsB5E1AjlmTUuOHCURmLgsFAtrp8R6FR9qwn6yYx8=
Subject key identifier:   3A:FF:E1:81:50:CE:27:BB:B7:3A:99:70:6B:E2:55:9D:BF:99:28:63
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       760016F6ADDEF189AAD5AA16ACA21F735C96EDEA
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:20:41 +0000
ROA not before:           Mon 01 Jul 2024 19:15:41 +0000
ROA not after:            Mon 30 Jun 2025 19:20:41 +0000
asID:                     28165
IP address blocks:        200.229.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:00:16:f6:ad:de:f1:89:aa:d5:aa:16:ac:a2:1f:73:5c:96:ed:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:15:41 2024 GMT
            Not After : Jun 30 19:20:41 2025 GMT
        Subject: CN=3AFFE18150CE27BBB73A99706BE2559DBF992863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:c9:49:9c:f6:a7:29:89:f1:83:ff:27:47:
                    7c:08:d8:06:60:e2:40:9e:aa:ab:01:1e:f3:1f:98:
                    7c:48:af:13:e0:5c:96:0e:db:e0:9b:3d:d9:ac:c8:
                    88:09:a1:fa:84:c1:48:11:49:aa:fe:3d:fc:be:56:
                    bb:46:65:ef:0c:3c:a8:97:a2:1d:05:1b:5d:55:cb:
                    bd:ef:c8:c9:3a:c6:97:ea:43:e1:62:15:38:5e:3e:
                    b8:fc:5b:2b:5d:3b:8c:d6:64:30:c4:1b:6f:b5:d8:
                    ea:5b:0d:c7:7a:b6:33:cf:d2:95:95:3b:2d:2b:24:
                    0e:99:99:e2:c6:42:81:39:e2:9e:7a:61:5b:f3:3c:
                    05:f6:83:24:8a:95:3a:da:3c:b3:e6:4d:1b:9e:44:
                    86:8f:29:6a:b9:5d:4b:46:50:ae:dc:7c:99:dc:36:
                    33:35:2e:87:ab:be:60:32:e2:27:68:2d:a7:b9:1c:
                    04:8b:e1:43:f5:38:8d:88:0d:f4:a2:1f:75:7a:61:
                    e9:0e:79:29:fd:c6:61:9a:bf:3e:77:08:0e:bf:3c:
                    09:a5:98:32:ca:f0:27:d1:01:01:5c:99:9b:19:6e:
                    94:a6:19:2f:a6:99:ee:95:f1:3a:dd:1e:87:7e:06:
                    76:72:ad:d9:e2:4c:4c:48:93:60:e1:bd:c8:0c:f2:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FF:E1:81:50:CE:27:BB:B7:3A:99:70:6B:E2:55:9D:BF:99:28:63
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:66:b1:78:91:fc:73:6d:ce:ec:eb:65:48:4b:95:83:c3:13:
         e7:93:ae:51:09:ee:8d:d6:c0:70:0a:1a:6a:ab:20:cc:96:7b:
         f7:e8:f5:50:94:b1:79:dc:18:9f:66:24:9e:5e:1d:25:88:01:
         5f:0a:50:71:88:1d:a4:cf:70:59:4e:aa:f8:89:e4:8d:b6:e9:
         d1:46:01:aa:6b:fb:1c:fd:49:8b:3f:ec:d0:65:dd:71:a2:a4:
         f9:12:dd:c4:7a:c8:aa:d7:7d:4e:58:ab:b4:c9:9f:cf:c1:a5:
         53:cf:99:a7:ec:a4:d0:12:4e:5d:c4:c3:a3:10:f0:f9:89:05:
         a4:9e:d1:3c:23:35:04:af:81:2b:51:8c:9c:a9:55:22:c4:7d:
         2b:36:b9:51:08:a0:31:db:b5:1a:93:db:a9:c5:9b:05:e9:ac:
         85:fb:e0:84:8a:4d:7c:a3:d2:1d:e5:b1:27:f5:22:d8:26:e1:
         ee:45:3c:a0:26:54:04:22:ee:78:1f:79:b4:5a:04:15:0f:7d:
         53:fa:f7:24:da:91:ec:7c:50:96:75:06:d0:a3:d6:d2:3f:43:
         e7:c8:4c:cd:f1:7b:b0:74:0a:d6:e9:41:ad:b7:56:7c:51:a4:
         a2:82:7a:90:a3:3e:06:c1:f4:7a:5e:15:82:68:07:da:83:6e:
         6c:98:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:54 2025 by rpki-client