Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          8degmMaIeOksBotMcMwHDwtktiEhjNkDo3vX/OAS000=
Subject key identifier:   1D:DA:92:4C:14:27:32:51:F1:4E:03:C5:5A:10:72:A7:D2:BC:4D:6E
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       6BDA2DEA77545AD04E777D4CCA1C8F2DDA6DA1E9
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:09 +0000
ROA not before:           Tue 05 Mar 2024 19:48:09 +0000
ROA not after:            Tue 04 Mar 2025 19:53:09 +0000
asID:                     270375
IP address blocks:        190.89.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:2d:ea:77:54:5a:d0:4e:77:7d:4c:ca:1c:8f:2d:da:6d:a1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:09 2024 GMT
            Not After : Mar  4 19:53:09 2025 GMT
        Subject: CN=1DDA924C14273251F14E03C55A1072A7D2BC4D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:95:fb:bb:9d:c4:ab:f4:03:fb:e7:28:83:
                    5b:88:c0:fe:d0:3f:3f:08:06:6c:92:3a:2f:de:bc:
                    4d:cb:d6:97:89:26:3d:1d:96:7f:af:49:25:cf:17:
                    c6:09:73:65:3d:15:21:50:35:16:68:be:28:c3:1b:
                    e4:0d:43:78:0f:f5:5c:95:56:c1:36:94:2f:66:09:
                    cb:cc:92:2c:0d:8c:81:62:98:99:83:0f:6f:7c:8f:
                    65:c7:f8:bb:5a:3c:c2:bb:b4:ba:43:c7:07:4e:12:
                    d0:4a:d6:7e:66:7b:3a:45:22:6d:4e:88:47:05:f7:
                    ca:4b:f5:1b:32:ea:56:3f:c6:66:56:a7:ed:1e:02:
                    76:4d:0a:47:26:f7:8b:1f:72:4f:b9:46:84:24:23:
                    d8:02:e2:03:1c:d4:b8:39:1f:b9:e3:a1:c6:f9:9d:
                    f1:d9:65:99:33:4a:56:8e:a6:74:4f:5b:5f:a2:db:
                    17:c9:58:a7:6d:34:65:09:ea:ae:93:24:95:06:93:
                    3d:d6:e9:e8:08:29:37:ea:09:4e:b6:4f:77:d9:53:
                    bf:0a:c9:32:bf:b3:8e:b2:44:5e:57:7f:04:72:b2:
                    b0:dd:f0:b8:aa:a3:02:ed:55:96:49:67:01:70:d4:
                    55:86:3f:c4:d1:14:bb:de:e5:bf:13:28:d0:fc:bf:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:92:4C:14:27:32:51:F1:4E:03:C5:5A:10:72:A7:D2:BC:4D:6E
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:83:9c:00:1a:ff:a9:48:38:72:bb:1c:23:ae:c1:01:7d:05:
         a4:cc:a9:a0:1a:75:d2:4f:47:77:1d:88:26:1b:81:69:f7:b2:
         df:fd:94:be:b3:0c:53:96:b1:42:e3:78:b7:a6:61:42:16:8e:
         c8:5d:c5:0c:32:79:a7:dd:20:ba:13:14:64:3f:d0:82:25:b1:
         eb:6e:22:dc:eb:03:00:ec:9e:68:5a:9e:d3:4d:a5:4c:bf:6c:
         08:ab:87:68:48:82:1e:2c:43:81:4e:88:48:04:3e:85:dc:5f:
         34:c9:3a:f4:c6:6d:0c:3d:12:c4:04:da:29:67:5d:6e:da:aa:
         9b:fc:2d:9b:ab:da:25:1a:34:a3:8c:00:d6:df:24:6d:74:f3:
         ab:1c:97:41:bb:35:ca:f3:e8:bd:56:00:a8:aa:85:03:b9:d3:
         3b:23:72:8f:46:0a:b0:ac:f9:67:77:41:fa:cc:b1:6b:16:de:
         9f:3d:82:01:57:01:ad:b5:b2:76:8f:fa:46:c2:b0:43:c6:84:
         a7:06:92:a1:a8:66:41:20:e3:ee:21:55:d0:d4:a5:35:0e:5e:
         9e:54:04:70:1d:01:9b:66:cc:55:a6:56:b0:87:4e:b7:44:66:
         1c:c3:aa:5f:65:56:48:1e:3b:a5:1f:1a:e2:3a:80:02:5e:e7:
         0e:7d:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org