Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa
File:                     3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa (raw, json)
Hash identifier:          zGlhATnHlooT1GgKhi2qIlS6sqeqpXnxF8N2fYDTyGU=
Subject key identifier:   39:E1:5A:9B:C3:DC:A3:C4:12:3D:6A:A3:A8:FE:72:64:50:7E:B2:DE
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       02465FF7580171947A3625922E3E83EB49EB2D4A
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:08 +0000
ROA not before:           Tue 05 Mar 2024 19:48:08 +0000
ROA not after:            Tue 04 Mar 2025 19:53:08 +0000
asID:                     270375
IP address blocks:        190.89.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:5f:f7:58:01:71:94:7a:36:25:92:2e:3e:83:eb:49:eb:2d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:08 2024 GMT
            Not After : Mar  4 19:53:08 2025 GMT
        Subject: CN=39E15A9BC3DCA3C4123D6AA3A8FE7264507EB2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:57:cb:a0:b1:75:fd:12:41:57:1b:fd:e5:
                    bb:3a:a0:07:98:d1:c0:79:d8:5c:e0:71:4c:65:7c:
                    da:6e:36:d4:b5:15:cd:f1:fa:57:b3:98:36:0f:04:
                    ab:c9:35:14:2f:04:c8:a3:e1:ba:72:01:4b:1e:1f:
                    a1:92:57:66:30:47:4b:cb:fb:84:db:87:6f:3f:ea:
                    47:d2:1f:ed:54:a5:89:d8:5b:a6:50:bb:b9:7d:9d:
                    fb:3b:65:fe:5b:c0:ed:f0:97:cc:7c:28:a9:c7:e4:
                    d0:4b:f9:89:53:de:87:41:0f:cb:e9:4e:a8:c7:06:
                    28:7b:8b:8f:38:71:9f:ac:83:20:28:b9:24:c5:e3:
                    e2:24:19:04:36:74:5d:94:68:18:38:06:78:3a:8f:
                    bd:15:06:6c:02:a5:0a:da:5f:3f:c9:69:68:69:87:
                    32:67:37:ad:fa:a7:fb:e6:06:e1:5c:19:c5:8d:6f:
                    ef:ff:b0:46:f3:d9:b8:33:74:78:80:fa:6b:6a:37:
                    1f:c4:46:b2:91:87:a8:09:01:a7:e9:de:64:08:05:
                    89:77:e9:9c:8e:8e:23:e5:de:d9:a2:aa:59:26:d4:
                    71:7f:7e:7d:98:dd:e6:14:b5:e0:7f:f6:e2:1b:30:
                    32:ec:9e:af:9e:8a:c1:54:3f:62:a0:84:f9:d3:86:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:5A:9B:C3:DC:A3:C4:12:3D:6A:A3:A8:FE:72:64:50:7E:B2:DE
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:24:f1:65:30:5f:f5:ae:70:1c:12:5c:e9:ce:fc:98:55:
         0c:84:f7:1d:08:aa:f8:b2:66:be:ec:db:c7:be:70:5c:08:e9:
         d8:1e:5e:74:dd:3f:44:bc:b2:2d:ce:94:52:c7:90:6b:a8:a5:
         f7:e2:50:45:ac:f0:fa:b1:ba:75:36:52:47:f3:31:32:40:80:
         9d:3e:d5:aa:c5:b2:11:0a:38:68:bc:42:eb:cc:c6:6b:fd:9a:
         e0:24:96:de:34:f8:99:2f:42:48:bc:5f:6a:94:be:20:44:08:
         70:2d:65:c4:bd:bf:e2:03:c3:8d:a6:ac:ab:56:36:24:72:d4:
         0f:f5:d3:87:68:15:1c:a4:3b:21:81:38:10:3d:3d:09:c5:ea:
         8b:f7:ec:b1:44:63:1e:e0:a4:9c:1c:ff:4c:a3:c6:12:78:b3:
         5c:df:fc:25:c2:8d:68:f4:ba:ec:b8:6b:9c:28:f6:4d:c4:b8:
         d4:18:cb:24:fa:8e:57:74:25:dd:03:d0:dd:eb:38:25:b2:cd:
         8e:a8:0a:2d:66:35:54:58:90:fb:2e:bb:bb:5c:ec:78:59:1d:
         f6:dc:0c:e8:16:dd:1f:6d:d9:d8:12:81:37:68:64:90:7b:cd:
         4a:17:26:0b:cf:3e:93:71:db:39:6d:e1:f9:15:23:ac:9d:46:
         d9:03:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org