Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135372e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135372e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          rGHS0NxAf9es0H1vx/qcg4oN074GmYJwaahg13uGoHQ=
Subject key identifier:   82:82:40:38:11:AE:5C:B7:3F:AF:A8:40:4A:13:04:7C:A8:8A:FA:CF
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       40A6A54844F07708A7FE70ACDC3D2EE7738CF676
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135372e302f32342d3234203d3e20323730333735.roa
Signing time:             Wed 03 Apr 2024 01:02:58 +0000
ROA not before:           Wed 03 Apr 2024 00:57:58 +0000
ROA not after:            Wed 02 Apr 2025 01:02:58 +0000
asID:                     270375
IP address blocks:        190.89.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a6:a5:48:44:f0:77:08:a7:fe:70:ac:dc:3d:2e:e7:73:8c:f6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Apr  3 00:57:58 2024 GMT
            Not After : Apr  2 01:02:58 2025 GMT
        Subject: CN=8282403811AE5CB73FAFA8404A13047CA88AFACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:51:a8:ad:a5:89:ba:43:8a:5b:97:24:ea:
                    a3:f7:44:6b:7b:aa:78:0d:19:66:fd:94:a4:cc:bf:
                    1b:4d:71:e3:c0:06:d4:00:b9:69:ae:33:75:2e:c5:
                    40:2b:70:43:e3:91:38:f2:6d:d6:08:f5:60:e8:d4:
                    87:52:9b:a6:51:27:2e:5e:3e:ba:b3:b6:47:56:f5:
                    1f:6b:a4:7d:f3:a5:48:93:5c:7d:ff:df:22:fc:ae:
                    e1:4e:d2:c6:15:bd:84:ea:cd:a1:89:b5:81:4a:e5:
                    09:ee:1f:f5:f8:c6:9b:9d:5b:e5:12:a5:5c:1b:df:
                    06:a2:1f:5c:84:60:69:92:6c:29:47:9a:39:f1:9a:
                    14:cc:d1:16:0e:69:85:3f:b7:4a:e0:23:27:84:76:
                    8e:22:43:cc:1f:ef:02:82:12:9f:96:9f:66:2d:d1:
                    88:66:05:ba:6d:af:a6:49:6a:35:54:86:4c:2e:f4:
                    2d:8d:05:d2:7a:91:58:e8:8b:a2:99:e5:a8:50:8f:
                    b1:1d:03:b8:59:2c:80:be:90:15:52:1d:f2:98:2a:
                    dd:93:00:03:7a:2e:77:f8:e9:19:60:ec:80:9b:67:
                    a2:6b:67:f0:eb:4e:93:fe:89:9e:78:ef:6d:25:d0:
                    fd:c7:18:0e:d7:87:00:2c:3f:19:6d:f3:df:4b:d3:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:82:40:38:11:AE:5C:B7:3F:AF:A8:40:4A:13:04:7C:A8:8A:FA:CF
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135372e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:9a:87:66:ba:c3:ce:16:c6:d4:b4:19:36:53:a4:dd:1c:
         89:54:c4:cc:a6:ac:89:8e:ae:90:2a:25:00:ce:04:11:4e:1b:
         31:05:10:2c:ea:27:e4:19:b5:50:c9:8b:ed:90:75:6d:90:02:
         a0:4b:a9:19:94:c2:49:79:83:64:47:2f:8f:57:69:65:fa:d5:
         87:fc:ea:ed:20:7d:8f:fc:66:ae:16:db:f0:e8:3f:87:37:70:
         b8:eb:4c:c9:73:65:e0:22:78:2c:3c:72:01:a8:0a:e5:f5:bb:
         18:0b:b1:20:5a:31:fa:31:b7:86:3b:49:97:de:c7:b0:56:ee:
         69:9c:f3:a5:95:0d:35:7b:de:fb:50:26:cb:bc:53:ff:35:75:
         f1:09:0f:40:ec:33:25:15:be:83:91:f6:5b:7f:af:79:7f:38:
         34:a6:1c:65:76:df:fb:f1:7c:20:27:90:fb:43:29:98:d0:f9:
         94:77:98:64:80:4e:85:a5:cf:7f:c8:cf:8d:ac:ee:90:df:7d:
         00:12:e4:10:e5:fe:e5:ba:25:67:ba:24:61:ca:30:e0:22:55:
         75:5a:bf:16:df:98:e8:c8:f5:38:c7:ad:10:27:f2:95:b9:6c:
         87:fa:45:7c:49:ac:a7:29:ad:52:7c:f0:7d:1b:06:af:c3:c4:
         cd:4c:49:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQKalSETwdwin/nCs3D0u53OM9nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0Q0Y0MTQzN0MwQUM4NzQzRUY4Njc5QzM2MDI3N0M3
NDk3QUJGQzAeFw0yNDA0MDMwMDU3NThaFw0yNTA0MDIwMTAyNThaMDMxMTAvBgNV
BAMTKDgyODI0MDM4MTFBRTVDQjczRkFGQTg0MDRBMTMwNDdDQTg4QUZBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzVGoraWJukOKW5ck6qP3RGt7
qngNGWb9lKTMvxtNcePABtQAuWmuM3UuxUArcEPjkTjybdYI9WDo1IdSm6ZRJy5e
PrqztkdW9R9rpH3zpUiTXH3/3yL8ruFO0sYVvYTqzaGJtYFK5QnuH/X4xpudW+US
pVwb3waiH1yEYGmSbClHmjnxmhTM0RYOaYU/t0rgIyeEdo4iQ8wf7wKCEp+Wn2Yt
0YhmBbptr6ZJajVUhkwu9C2NBdJ6kVjoi6KZ5ahQj7EdA7hZLIC+kBVSHfKYKt2T
AAN6Lnf46Rlg7ICbZ6JrZ/DrTpP+iZ54720l0P3HGA7XhwAsPxlt899L01ydAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgoJAOBGuXLc/r6hAShMEfKiK+s8wHwYDVR0j
BBgwFoAUTUz0FDfArIdD74Z5w2AnfHSXq/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXR3VzhDNDJGWU50d1dGcGh1N2F3RDFwUzV4NFplTG5rREFtR1lwd0pY
cUIvMC80RDRDRjQxNDM3QzBBQzg3NDNFRjg2NzlDMzYwMjc3Qzc0OTdBQkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRENENGNDE0MzdDMEFDODc0
M0VGODY3OUMzNjAyNzdDNzQ5N0FCRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V0d1c4QzQyRllOdHdXRnBodTdhd0QxcFM1eDRaZUxua0RBbUdZcHdKWHFCLzAv
MzEzOTMwMmUzODM5MmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZ0wDQYJKoZIhvcNAQELBQADggEBAAvimodm
usPOFsbUtBk2U6TdHIlUxMymrImOrpAqJQDOBBFOGzEFECzqJ+QZtVDJi+2QdW2Q
AqBLqRmUwkl5g2RHL49XaWX61Yf86u0gfY/8Zq4W2/DoP4c3cLjrTMlzZeAieCw8
cgGoCuX1uxgLsSBaMfoxt4Y7SZfex7BW7mmc86WVDTV73vtQJsu8U/81dfEJD0Ds
MyUVvoOR9lt/r3l/ODSmHGV23/vxfCAnkPtDKZjQ+ZR3mGSAToWlz3/Iz42s7pDf
fQAS5BDl/uW6JWe6JGHKMOAiVXVavxbfmOjI9TjHrRAn8pW5bIf6RXxJrKcprVJ8
8H0bBq/DxM1MSRI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:36 2025 by rpki-client