Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32332d3233203d3e20323730333730.roa
File:                     3139302e38392e3134382e302f32332d3233203d3e20323730333730.roa (raw, json)
Hash identifier:          v7UujLKbGX0D/dHyAp6XoGI6S+GBfFsaPohUWTROl4k=
Subject key identifier:   0A:32:02:53:F8:27:1D:A7:2D:FC:D9:50:D9:F0:D5:FA:8E:45:35:E2
Certificate issuer:       /CN=EB5873551A077ABDCD5FA2D438D18A347FF865B9
Certificate serial:       0FBB5273D5248199DED999C4C455FA7E32E328B5
Authority key identifier: EB:58:73:55:1A:07:7A:BD:CD:5F:A2:D4:38:D1:8A:34:7F:F8:65:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32332d3233203d3e20323730333730.roa
Signing time:             Mon 20 Feb 2023 08:36:48 +0000
ROA not before:           Mon 20 Feb 2023 08:31:48 +0000
ROA not after:            Mon 19 Feb 2024 08:36:48 +0000
asID:                     270370
IP address blocks:        190.89.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bb:52:73:d5:24:81:99:de:d9:99:c4:c4:55:fa:7e:32:e3:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5873551A077ABDCD5FA2D438D18A347FF865B9
        Validity
            Not Before: Feb 20 08:31:48 2023 GMT
            Not After : Feb 19 08:36:48 2024 GMT
        Subject: CN=0A320253F8271DA72DFCD950D9F0D5FA8E4535E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:0a:df:e9:82:05:8f:ca:df:dd:64:59:c9:
                    ce:47:45:2b:95:ad:56:22:1c:5a:06:ff:c2:00:fd:
                    68:04:4d:4e:4d:78:a4:90:23:46:1a:2e:b3:08:e4:
                    a4:10:77:52:36:69:df:8b:6c:0d:be:d8:be:ac:c2:
                    c7:de:cc:12:91:b0:0c:e2:87:78:42:d6:fc:87:26:
                    d7:ad:3d:bc:df:29:43:6e:25:93:e5:cd:62:50:3b:
                    6f:0b:de:c1:24:67:a2:b5:17:d6:4e:93:28:09:1d:
                    2e:2a:f7:cf:89:c0:24:f3:a7:8c:cc:1c:c4:b2:08:
                    5c:63:0c:73:89:ec:56:c2:ba:84:55:a5:1e:40:01:
                    19:87:30:ba:9e:04:d3:39:2f:81:2a:41:e0:bc:d8:
                    d7:bc:9e:4b:d1:36:91:05:f9:15:16:fb:b7:3d:94:
                    3a:97:0d:85:7a:f1:6a:d8:93:a3:b3:18:f0:0e:03:
                    41:10:7b:b8:19:4e:a1:6e:34:85:c6:1c:b0:dc:a0:
                    b7:69:0a:e6:70:43:b0:69:15:5f:58:a6:26:69:f0:
                    dc:40:05:51:fa:4c:0c:3a:88:12:03:60:ac:38:a5:
                    c7:ba:24:ed:67:bf:4f:09:ca:e1:71:cc:ea:f2:98:
                    6f:f7:02:2e:99:a4:e3:48:b2:ef:f3:31:62:86:bc:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:32:02:53:F8:27:1D:A7:2D:FC:D9:50:D9:F0:D5:FA:8E:45:35:E2
            X509v3 Authority Key Identifier:
                keyid:EB:58:73:55:1A:07:7A:BD:CD:5F:A2:D4:38:D1:8A:34:7F:F8:65:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32332d3233203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:54:d6:24:cf:0e:be:4e:5f:f2:f9:ba:f3:fa:d6:c2:12:40:
         a4:82:39:a1:ec:41:4b:66:8c:c4:2d:6d:60:aa:11:44:21:01:
         8c:0d:e2:e9:79:5b:e8:98:4f:cb:74:c8:76:4f:59:6b:9d:cc:
         78:8a:8a:9b:e5:a8:ee:6a:7a:40:7e:00:c0:cc:5c:36:80:83:
         92:4f:49:0f:0f:43:a4:fc:18:b6:e3:10:1a:61:73:35:4c:0c:
         81:3c:5d:37:6e:56:6f:31:d5:d6:f0:54:9f:9e:71:f2:bf:37:
         c4:25:99:ae:c9:1f:5d:f3:b3:5d:a3:0b:c2:c5:3c:72:32:0f:
         a9:79:f3:27:1d:48:82:e4:40:b6:c7:ee:f9:3e:fe:f8:16:b4:
         7c:b3:a1:cf:10:85:8b:cd:20:bf:06:ea:e1:c9:d1:e2:8a:34:
         ea:62:90:06:aa:63:3c:7a:46:1b:de:e4:12:c7:0d:34:54:5b:
         2f:cf:c3:47:59:3d:e1:59:cc:32:4e:1a:ea:3a:02:f6:e0:8c:
         ac:54:7d:96:9c:ae:74:94:cb:ef:31:f4:c1:fe:8d:d0:9b:86:
         41:3a:a4:c6:00:b5:2a:62:31:1e:c2:eb:8d:87:86:b4:35:aa:
         be:2e:d5:64:70:01:21:b5:16:c4:fe:d3:ca:ee:2b:ad:dc:e3:
         dd:5a:18:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD7tSc9UkgZne2ZnExFX6fjLjKLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI1ODczNTUxQTA3N0FCRENENUZBMkQ0MzhEMThBMzQ3
RkY4NjVCOTAeFw0yMzAyMjAwODMxNDhaFw0yNDAyMTkwODM2NDhaMDMxMTAvBgNV
BAMTKDBBMzIwMjUzRjgyNzFEQTcyREZDRDk1MEQ5RjBENUZBOEU0NTM1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwlArf6YIFj8rf3WRZyc5HRSuV
rVYiHFoG/8IA/WgETU5NeKSQI0YaLrMI5KQQd1I2ad+LbA2+2L6swsfezBKRsAzi
h3hC1vyHJtetPbzfKUNuJZPlzWJQO28L3sEkZ6K1F9ZOkygJHS4q98+JwCTzp4zM
HMSyCFxjDHOJ7FbCuoRVpR5AARmHMLqeBNM5L4EqQeC82Ne8nkvRNpEF+RUW+7c9
lDqXDYV68WrYk6OzGPAOA0EQe7gZTqFuNIXGHLDcoLdpCuZwQ7BpFV9YpiZp8NxA
BVH6TAw6iBIDYKw4pce6JO1nv08JyuFxzOrymG/3Ai6ZpONIsu/zMWKGvI+/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCjICU/gnHact/NlQ2fDV+o5FNeIwHwYDVR0j
BBgwFoAU61hzVRoHer3NX6LUONGKNH/4ZbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMC9FQjU4NzM1NTFBMDc3QUJEQ0Q1RkEyRDQzOEQxOEEzNDdGRjg2NUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCNTg3MzU1MUEwNzdBQkRD
RDVGQTJENDM4RDE4QTM0N0ZGODY1QjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzAv
MzEzOTMwMmUzODM5MmUzMTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG+WZQwDQYJKoZIhvcNAQELBQADggEBABNU1iTP
Dr5OX/L5uvP61sISQKSCOaHsQUtmjMQtbWCqEUQhAYwN4ul5W+iYT8t0yHZPWWud
zHiKipvlqO5qekB+AMDMXDaAg5JPSQ8PQ6T8GLbjEBphczVMDIE8XTduVm8x1dbw
VJ+ecfK/N8Qlma7JH13zs12jC8LFPHIyD6l58ycdSILkQLbH7vk+/vgWtHyzoc8Q
hYvNIL8G6uHJ0eKKNOpikAaqYzx6Rhve5BLHDTRUWy/Pw0dZPeFZzDJOGuo6Avbg
jKxUfZacrnSUy+8x9MH+jdCbhkE6pMYAtSpiMR7C642HhrQ1qr4u1WRwASG1FsT+
08ruK63c491aGLo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org