Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/3138392e39312e3134342e302f32302d3234203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32302d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          TDKMFzpK5tuiL2WvI6dXf/2GxX4uhQ2CMn2UlZsTLak=
Subject key identifier:   90:43:37:C1:EA:77:67:1F:DF:A5:C8:85:B7:CB:BE:8D:6C:59:5B:79
Certificate issuer:       /CN=EBB6E559FC85ED8E862D6358A687201B26E68182
Certificate serial:       2F443F7308481668000A81356BBF394AECB103C6
Authority key identifier: EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/3138392e39312e3134342e302f32302d3234203d3e20323634343835.roa
Signing time:             Thu 04 Apr 2024 09:08:40 +0000
ROA not before:           Thu 04 Apr 2024 09:03:40 +0000
ROA not after:            Thu 03 Apr 2025 09:08:40 +0000
asID:                     264485
IP address blocks:        189.91.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:44:3f:73:08:48:16:68:00:0a:81:35:6b:bf:39:4a:ec:b1:03:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB6E559FC85ED8E862D6358A687201B26E68182
        Validity
            Not Before: Apr  4 09:03:40 2024 GMT
            Not After : Apr  3 09:08:40 2025 GMT
        Subject: CN=904337C1EA77671FDFA5C885B7CBBE8D6C595B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:ce:98:59:2d:1c:5f:c9:97:bf:24:04:37:
                    45:c8:fc:f0:b8:9d:c9:d4:59:4d:65:30:35:01:00:
                    2b:2e:a7:b6:7d:c6:03:f8:8b:41:bb:7a:b4:98:20:
                    38:72:7a:3f:7b:3e:fe:b3:62:6a:dd:47:87:99:54:
                    e8:6b:a0:a4:31:ca:20:0e:1f:7a:ed:0f:53:9d:19:
                    7f:63:d3:c5:87:cf:ca:1c:25:12:63:44:2b:88:c8:
                    55:f9:4d:67:29:97:c7:40:17:98:3a:3d:66:13:d8:
                    e5:43:de:82:fd:3e:d8:c7:7a:25:99:d0:41:89:20:
                    f3:1c:c2:de:bf:90:b2:ff:13:84:ee:60:2b:fd:21:
                    51:73:e3:34:8c:a3:d5:36:e3:5b:ef:f8:85:98:15:
                    cb:48:c3:69:a5:ff:93:3d:b6:94:3a:8d:8b:8a:23:
                    6d:ee:91:e4:e0:48:a9:ca:e7:aa:70:e6:f2:ae:13:
                    85:78:47:93:20:ce:e0:55:30:ab:28:2c:d4:60:58:
                    ac:26:32:6f:11:4b:1a:de:cf:0b:5e:9a:6d:74:35:
                    6b:7b:4c:b1:3f:23:20:1e:04:8c:81:35:ed:02:36:
                    3c:2a:80:c4:f5:32:95:24:a6:d2:b5:a1:e1:86:a0:
                    1c:92:fa:c4:a4:c7:29:18:5b:d8:6e:31:28:fc:e7:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:37:C1:EA:77:67:1F:DF:A5:C8:85:B7:CB:BE:8D:6C:59:5B:79
            X509v3 Authority Key Identifier:
                keyid:EB:B6:E5:59:FC:85:ED:8E:86:2D:63:58:A6:87:20:1B:26:E6:81:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/EBB6E559FC85ED8E862D6358A687201B26E68182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB6E559FC85ED8E862D6358A687201B26E68182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/1/3138392e39312e3134342e302f32302d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:34:9f:eb:a2:ee:e4:8c:30:c6:39:d3:27:19:b7:89:73:
         cf:09:62:6b:f7:db:c1:b6:f3:39:cd:36:53:01:13:b1:5d:34:
         59:e7:21:f7:83:5e:66:d7:13:cd:c6:c1:eb:b5:9a:7e:59:75:
         23:85:6d:1f:b0:cb:d4:3d:2f:20:ff:b0:6e:5a:05:a1:df:9f:
         7f:af:c0:70:7d:d9:ad:7b:c3:bc:88:e3:be:33:48:44:1f:45:
         9e:20:1b:6c:07:1e:b1:a1:b5:63:e5:6e:0e:a5:e2:32:e2:17:
         a3:9a:6e:cb:4e:13:de:49:46:12:6e:cf:19:ab:1c:0f:98:50:
         ee:6a:b5:87:de:61:2c:c4:19:a1:0d:bf:28:a5:64:83:cf:a5:
         3e:56:5b:ce:33:37:e6:f3:97:45:ff:d4:d3:9e:48:88:13:ab:
         68:99:53:d9:95:c9:a8:48:ab:4f:44:aa:2a:63:dd:cd:2d:eb:
         af:0b:49:df:fa:64:98:38:55:89:02:14:70:2c:06:79:04:8d:
         7b:5a:f8:4b:43:62:72:ea:ff:49:f8:58:5d:92:a3:67:54:2b:
         79:d3:56:36:3c:3f:63:c3:a8:5b:bf:ca:51:79:2f:c1:2e:6a:
         2d:18:18:ac:04:b0:e5:ec:53:f1:cb:7d:64:5a:d6:5f:ee:23:
         b7:95:6d:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL0Q/cwhIFmgACoE1a785SuyxA8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCNkU1NTlGQzg1RUQ4RTg2MkQ2MzU4QTY4NzIwMUIy
NkU2ODE4MjAeFw0yNDA0MDQwOTAzNDBaFw0yNTA0MDMwOTA4NDBaMDMxMTAvBgNV
BAMTKDkwNDMzN0MxRUE3NzY3MUZERkE1Qzg4NUI3Q0JCRThENkM1OTVCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprM6YWS0cX8mXvyQEN0XI/PC4
ncnUWU1lMDUBACsup7Z9xgP4i0G7erSYIDhyej97Pv6zYmrdR4eZVOhroKQxyiAO
H3rtD1OdGX9j08WHz8ocJRJjRCuIyFX5TWcpl8dAF5g6PWYT2OVD3oL9PtjHeiWZ
0EGJIPMcwt6/kLL/E4TuYCv9IVFz4zSMo9U241vv+IWYFctIw2ml/5M9tpQ6jYuK
I23ukeTgSKnK56pw5vKuE4V4R5MgzuBVMKsoLNRgWKwmMm8RSxrezwtemm10NWt7
TLE/IyAeBIyBNe0CNjwqgMT1MpUkptK1oeGGoByS+sSkxykYW9huMSj8551fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkEM3wep3Zx/fpciFt8u+jWxZW3kwHwYDVR0j
BBgwFoAU67blWfyF7Y6GLWNYpocgGybmgYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMS9FQkI2RTU1OUZDODVFRDhFODYyRDYzNThBNjg3MjAxQjI2RTY4MTgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQjZFNTU5RkM4NUVEOEU4
NjJENjM1OEE2ODcyMDFCMjZFNjgxODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzEv
MzEzODM5MmUzOTMxMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9W5AwDQYJKoZIhvcNAQELBQADggEBAG+TNJ/r
ou7kjDDGOdMnGbeJc88JYmv328G28znNNlMBE7FdNFnnIfeDXmbXE83Gweu1mn5Z
dSOFbR+wy9Q9LyD/sG5aBaHfn3+vwHB92a17w7yI474zSEQfRZ4gG2wHHrGhtWPl
bg6l4jLiF6OabstOE95JRhJuzxmrHA+YUO5qtYfeYSzEGaENvyilZIPPpT5WW84z
N+bzl0X/1NOeSIgTq2iZU9mVyahIq09Eqipj3c0t668LSd/6ZJg4VYkCFHAsBnkE
jXta+EtDYnLq/0n4WF2So2dUK3nTVjY8P2PDqFu/ylF5L8Euai0YGKwEsOXsU/HL
fWRa1l/uI7eVbf0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org