Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          u2VmcyyH9Sw6CLthl3nIN0rKaQiEFyMNXozUhbl/pxU=
Subject key identifier:   45:D9:F7:CC:C8:9C:15:CE:6B:04:CE:7F:EC:61:EE:2A:9A:45:48:B9
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1F23F83656BABB11368C772071EB5C55859DAEE5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:26:52 +0000
ROA not before:           Mon 01 Jul 2024 19:21:52 +0000
ROA not after:            Mon 30 Jun 2025 19:26:52 +0000
asID:                     28165
IP address blocks:        200.229.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:23:f8:36:56:ba:bb:11:36:8c:77:20:71:eb:5c:55:85:9d:ae:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:21:52 2024 GMT
            Not After : Jun 30 19:26:52 2025 GMT
        Subject: CN=45D9F7CCC89C15CE6B04CE7FEC61EE2A9A4548B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:20:cf:1e:c6:7f:20:3f:fa:09:1b:69:75:
                    61:0d:d0:4d:cc:72:2b:79:ca:53:fc:d8:88:de:b9:
                    a5:59:d5:81:34:ad:34:99:8e:3a:a9:e1:25:a5:96:
                    46:a1:ca:3f:ea:01:16:d0:e4:17:6d:92:24:ae:ea:
                    28:4c:52:9e:f8:f9:b0:c4:43:b7:88:65:38:77:88:
                    46:1b:64:9b:3f:df:7d:51:b3:29:a2:4f:f2:45:4b:
                    be:4b:f2:d0:0e:5b:87:c5:69:35:6e:d3:dc:63:65:
                    79:97:7f:97:5b:c3:9e:1f:10:94:6e:ba:f1:f8:59:
                    a8:cc:27:8e:21:60:77:6a:7c:60:80:95:4b:b4:03:
                    a7:e7:08:c7:32:f5:bd:84:92:fd:c0:ee:c5:43:2b:
                    9e:4a:68:48:fe:d6:65:97:23:22:16:ce:18:64:5c:
                    57:25:d1:9a:5d:cd:ea:ba:09:68:d1:b2:ba:e5:dc:
                    56:9b:bf:e1:cd:eb:1e:34:46:33:50:73:ce:4e:e8:
                    b0:9c:f2:13:15:7b:d0:1e:c4:2a:16:6c:62:ff:98:
                    8a:f8:ae:3f:dc:d5:18:0e:72:df:2c:af:c2:ee:42:
                    7f:df:33:f5:2f:0a:7d:29:fc:a5:c6:de:07:e6:14:
                    f6:9d:6e:60:ab:0c:44:1f:f5:e8:2e:c1:e7:26:62:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D9:F7:CC:C8:9C:15:CE:6B:04:CE:7F:EC:61:EE:2A:9A:45:48:B9
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3230302e3232392e3232342e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:b6:eb:c0:2a:49:38:b5:df:a6:d8:1a:46:23:7e:37:f3:
         fe:1d:d9:5c:c8:c5:db:28:5d:dd:6e:52:1e:cf:cb:0a:5c:7c:
         95:4f:03:7e:87:66:aa:24:e1:08:84:92:91:1a:c2:38:70:b7:
         f0:8d:8c:c9:44:e9:4f:af:3a:22:ab:92:26:40:3b:75:4f:27:
         c3:90:49:ef:cc:58:11:ba:92:bc:9f:88:07:bd:bf:78:cf:d7:
         83:28:04:60:c4:d6:6d:34:e3:9d:c0:39:c7:8b:9a:10:7d:c8:
         e3:2f:2d:9b:c9:96:9a:00:87:0a:6e:2b:e4:4d:9d:a9:0f:12:
         4f:dc:30:de:c6:45:5c:28:6a:fd:2f:84:4c:66:36:ee:ca:10:
         d3:a9:87:e5:f2:6b:09:4f:13:a7:68:22:76:f8:2d:a4:ae:ab:
         09:4c:c7:38:27:78:ed:70:86:a0:00:85:79:0a:fa:70:81:2c:
         64:ba:fd:d4:75:43:bf:ed:72:eb:14:49:5b:2d:21:ee:fc:63:
         84:f0:9c:03:fe:0b:77:d8:2a:7b:92:51:71:4a:d8:29:cf:fc:
         72:01:2e:28:46:b3:45:9d:56:2f:0a:58:b5:fc:ba:d6:38:3c:
         2a:e7:0e:cd:65:bf:55:16:ef:08:58:fa:65:95:0d:5b:6a:50:
         f1:21:e0:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHyP4Nla6uxE2jHcgcetcVYWdruUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTIxNTJaFw0yNTA2MzAxOTI2NTJaMDMxMTAvBgNV
BAMTKDQ1RDlGN0NDQzg5QzE1Q0U2QjA0Q0U3RkVDNjFFRTJBOUE0NTQ4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVSDPHsZ/ID/6CRtpdWEN0E3M
cit5ylP82IjeuaVZ1YE0rTSZjjqp4SWllkahyj/qARbQ5BdtkiSu6ihMUp74+bDE
Q7eIZTh3iEYbZJs/331RsymiT/JFS75L8tAOW4fFaTVu09xjZXmXf5dbw54fEJRu
uvH4WajMJ44hYHdqfGCAlUu0A6fnCMcy9b2Ekv3A7sVDK55KaEj+1mWXIyIWzhhk
XFcl0Zpdzeq6CWjRsrrl3Fabv+HN6x40RjNQc85O6LCc8hMVe9AexCoWbGL/mIr4
rj/c1RgOct8sr8LuQn/fM/UvCn0p/KXG3gfmFPadbmCrDEQf9eguwecmYg7xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURdn3zMicFc5rBM5/7GHuKppFSLkwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATI5eAwDQYJKoZIhvcNAQELBQADggEBAIJdtuvA
Kkk4td+m2BpGI3438/4d2VzIxdsoXd1uUh7PywpcfJVPA36HZqok4QiEkpEawjhw
t/CNjMlE6U+vOiKrkiZAO3VPJ8OQSe/MWBG6kryfiAe9v3jP14MoBGDE1m00453A
OceLmhB9yOMvLZvJlpoAhwpuK+RNnakPEk/cMN7GRVwoav0vhExmNu7KENOph+Xy
awlPE6doInb4LaSuqwlMxzgneO1whqAAhXkK+nCBLGS6/dR1Q7/tcusUSVstIe78
Y4TwnAP+C3fYKnuSUXFK2CnP/HIBLihGs0WdVi8KWLX8utY4PCrnDs1lv1UW7whY
+mWVDVtqUPEh4Mg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:33 2025 by rpki-client