Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32332d3233203d3e20323730333730.roa
File:                     3139302e38392e3135302e302f32332d3233203d3e20323730333730.roa (raw, json)
Hash identifier:          pGf7BMc3ZRIzvwCVOFGB7vJ5HLj5OAvm7Q4cW8XX77U=
Subject key identifier:   21:3B:A9:00:B4:E8:A5:84:01:BF:82:47:3F:46:E9:60:24:0D:74:40
Certificate issuer:       /CN=EB5873551A077ABDCD5FA2D438D18A347FF865B9
Certificate serial:       0D2940F480E98EECB21311424BA0091A21A74316
Authority key identifier: EB:58:73:55:1A:07:7A:BD:CD:5F:A2:D4:38:D1:8A:34:7F:F8:65:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32332d3233203d3e20323730333730.roa
Signing time:             Mon 20 Feb 2023 08:37:06 +0000
ROA not before:           Mon 20 Feb 2023 08:32:06 +0000
ROA not after:            Mon 19 Feb 2024 08:37:06 +0000
asID:                     270370
IP address blocks:        190.89.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:29:40:f4:80:e9:8e:ec:b2:13:11:42:4b:a0:09:1a:21:a7:43:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5873551A077ABDCD5FA2D438D18A347FF865B9
        Validity
            Not Before: Feb 20 08:32:06 2023 GMT
            Not After : Feb 19 08:37:06 2024 GMT
        Subject: CN=213BA900B4E8A58401BF82473F46E960240D7440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:40:58:bb:a9:d0:fd:5a:b9:c3:75:2e:6b:
                    ae:75:25:b5:31:27:f7:be:6d:95:74:a2:ad:94:ed:
                    21:2f:60:0d:f5:af:91:98:33:10:e7:9e:2f:13:89:
                    19:bd:e7:0f:b9:63:1e:07:e6:e1:7b:2f:bd:49:42:
                    cf:a5:4e:65:be:ee:17:74:fa:ff:11:36:8c:ec:25:
                    4d:71:cf:c6:be:7d:70:db:a7:34:72:1b:65:47:9c:
                    03:8c:58:ba:b7:2f:02:f0:d7:ed:71:46:a9:b0:56:
                    29:99:43:8f:6e:98:29:47:17:71:9d:3d:3a:b2:62:
                    ef:df:95:cc:8b:79:a2:31:6f:d4:0c:c6:f5:18:f8:
                    81:2c:95:26:fd:a6:d4:97:d3:fb:14:3d:fe:6c:96:
                    eb:ea:cc:86:2d:1d:58:8c:5e:ce:ad:a9:04:5d:3c:
                    39:19:7b:32:6b:8a:45:73:b4:e9:18:77:30:d2:d1:
                    f7:ed:83:96:84:98:d0:2b:2a:ff:d4:0f:f4:43:0f:
                    17:08:f5:5c:fa:5b:34:27:e1:d7:51:4e:84:b9:c3:
                    7f:ab:84:72:83:20:31:be:73:c3:dd:ea:b6:38:21:
                    fb:25:e3:06:43:a8:0f:03:d8:60:b3:ff:a2:b8:b4:
                    bd:32:49:98:d0:61:0d:74:a4:2a:61:36:2b:21:b8:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:A9:00:B4:E8:A5:84:01:BF:82:47:3F:46:E9:60:24:0D:74:40
            X509v3 Authority Key Identifier:
                keyid:EB:58:73:55:1A:07:7A:BD:CD:5F:A2:D4:38:D1:8A:34:7F:F8:65:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB5873551A077ABDCD5FA2D438D18A347FF865B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32332d3233203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:c6:ce:78:99:17:30:23:e5:f3:16:11:86:af:98:7e:27:60:
         8a:ee:79:8f:5b:a9:ea:1b:95:36:e3:08:37:47:e9:67:0d:15:
         fc:47:ee:ed:3b:4a:31:a8:59:19:de:80:04:31:c9:2e:48:54:
         58:7f:59:c4:92:81:d7:f6:97:65:80:c0:bd:be:73:c8:68:4b:
         b7:e3:8b:d9:ab:7a:24:bd:44:4f:ca:d4:ce:33:ce:56:73:64:
         58:cd:77:18:79:ad:87:a9:6f:f5:0e:f7:ad:72:3c:61:3e:e7:
         cf:4b:23:3b:41:ba:55:69:bb:b2:85:ec:0d:05:8c:1b:6e:b4:
         63:2f:42:23:7a:6c:14:1d:de:2e:49:70:71:9b:b8:3f:bb:8e:
         ce:1e:11:23:73:61:9a:db:87:f2:2c:f7:41:ef:ed:28:84:2c:
         02:7c:2f:7e:35:ce:fc:15:af:c7:99:66:db:bf:6e:aa:a8:fe:
         9e:f8:20:41:e2:b0:77:a4:f4:0b:29:d0:56:c3:45:77:b2:08:
         c6:6b:1e:7f:4c:b2:0e:14:f6:b1:75:3f:4d:79:c1:e4:2d:e6:
         70:df:77:00:fd:fe:a8:49:0e:9e:cd:ff:b2:27:3a:a0:43:49:
         24:70:8f:9b:6f:4e:d4:b3:ef:d8:5d:82:8f:6a:ea:8b:da:a6:
         6e:3d:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org