Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa (raw, json)
Hash identifier:          yJXD2UwFDnIkIaKGQydP0SOzURQmXZpLQuF9OydDfbQ=
Subject key identifier:   72:5A:7E:5C:0C:0E:9E:C0:75:C4:0A:D0:B6:4F:D2:25:4C:BB:AA:62
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       20534DF261B449E0FF3C1DE5B77961E9CEE5361D
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:09 +0000
ROA not before:           Tue 05 Mar 2024 19:48:09 +0000
ROA not after:            Tue 04 Mar 2025 19:53:09 +0000
asID:                     270375
IP address blocks:        190.89.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:4d:f2:61:b4:49:e0:ff:3c:1d:e5:b7:79:61:e9:ce:e5:36:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:09 2024 GMT
            Not After : Mar  4 19:53:09 2025 GMT
        Subject: CN=725A7E5C0C0E9EC075C40AD0B64FD2254CBBAA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:09:0d:b3:48:72:3e:2b:86:e9:c2:ee:af:
                    88:a6:99:ef:65:a7:e4:02:8c:80:be:89:44:cc:6a:
                    c8:59:02:c5:a2:b1:5a:ff:a1:08:01:5e:bf:80:25:
                    58:77:9f:c9:21:6c:83:df:8a:f1:44:fd:23:d9:06:
                    06:34:20:d4:84:16:12:ba:25:36:c7:9e:70:5f:8c:
                    e4:7a:f8:fd:50:f1:2d:51:2d:f6:4b:1b:00:cc:9b:
                    75:b4:26:7c:71:7f:69:b5:ef:ba:45:2e:e6:72:a9:
                    c1:b2:a6:59:43:18:a3:32:ab:b3:92:c4:de:c5:5e:
                    8b:74:fb:8c:92:77:c3:2c:07:85:96:94:00:3e:22:
                    02:db:a9:09:c6:bc:05:5c:f3:6a:32:61:8f:14:49:
                    a5:4c:bc:a9:2a:6c:43:8a:fc:09:f4:a1:cf:09:17:
                    eb:f4:4b:f8:a7:4c:03:46:a3:1e:af:d4:70:8b:99:
                    aa:64:2f:82:31:e4:fc:90:e6:37:f5:4f:63:ab:fb:
                    a6:aa:34:58:d3:dc:0b:2c:e6:fc:4f:92:02:21:c6:
                    99:4c:b7:aa:37:a7:3d:18:b4:9c:91:1c:c7:d6:a7:
                    33:31:f6:30:a0:8e:38:50:77:01:b0:fe:ed:2c:e5:
                    5f:22:41:e8:25:7a:67:b9:4f:70:1f:18:b0:53:c9:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:7E:5C:0C:0E:9E:C0:75:C4:0A:D0:B6:4F:D2:25:4C:BB:AA:62
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:df:86:8f:50:c1:f1:16:be:c2:1e:ad:58:93:34:4b:95:
         c3:6a:3d:46:9f:26:23:98:a5:f6:0e:44:2b:89:3d:73:eb:3b:
         2e:50:3b:5d:83:6f:78:e4:17:0c:04:82:ed:97:95:52:19:98:
         dc:cd:40:ae:63:21:d9:31:af:e0:94:a0:1d:de:ef:d5:8d:62:
         cc:95:10:40:60:69:ed:84:de:f4:c3:c3:c8:21:8f:cb:68:7a:
         e4:c4:0b:30:75:d5:d1:59:3e:95:a5:61:e4:53:fe:e5:60:4f:
         c5:6b:95:6c:04:82:5b:ba:3f:62:0a:12:71:5c:c0:ab:8a:f0:
         f0:51:67:94:5e:d6:57:ed:8a:9a:60:10:f2:4d:b7:8b:de:59:
         55:f4:83:c9:2a:27:d7:47:49:32:58:17:87:b1:7b:08:49:3f:
         85:17:1d:34:58:2a:2c:52:33:6e:d0:81:f8:0f:85:e9:28:a1:
         3e:82:ca:d6:53:ee:5d:a4:5d:b2:53:8f:5f:dd:2b:c8:cd:79:
         30:57:8f:66:2a:04:58:af:5c:c9:a2:0a:ea:f9:7a:aa:51:6f:
         61:e5:d5:e6:e1:3c:42:09:09:be:a1:89:2e:3e:e4:f7:fd:6d:
         a7:69:4b:b5:82:1e:53:e0:50:0b:aa:62:59:88:d4:24:2f:79:
         6b:2b:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org