Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa (raw, json)
Hash identifier:          Dk74B2BT4kX4rRambZRMb8DbTaj+tMPNHqmXsOLPkOo=
Subject key identifier:   2E:AF:9E:81:84:FB:9E:FF:22:F9:CE:D4:AC:1C:7C:D5:32:D3:7E:B7
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       37AE947B7717E89543BEEC4D391BFAE42BAFC83B
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa
Signing time:             Thu 06 Mar 2025 13:20:06 +0000
ROA not before:           Thu 06 Mar 2025 13:15:06 +0000
ROA not after:            Thu 05 Mar 2026 13:20:06 +0000
asID:                     270375
IP address blocks:        190.89.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ae:94:7b:77:17:e8:95:43:be:ec:4d:39:1b:fa:e4:2b:af:c8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Mar  6 13:15:06 2025 GMT
            Not After : Mar  5 13:20:06 2026 GMT
        Subject: CN=2EAF9E8184FB9EFF22F9CED4AC1C7CD532D37EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:23:55:a0:19:dd:88:14:81:75:82:d8:d8:
                    2c:a8:b7:e5:02:b6:e4:69:be:ff:2d:f0:6c:73:27:
                    e1:43:a0:69:37:f9:df:fe:c4:91:05:02:59:44:ba:
                    d8:0c:33:5f:aa:f6:6f:5a:7b:26:dd:20:be:43:03:
                    19:be:c7:c9:76:65:cc:0a:f9:c6:51:2a:3a:4d:e0:
                    e3:da:6e:4d:5e:dc:21:fb:0d:e2:98:8b:f2:fd:cb:
                    88:f5:ec:de:63:e6:4b:fb:7c:e9:1e:e4:3e:4d:6f:
                    e5:0a:40:35:fd:f3:c4:80:d0:45:93:fa:23:0f:47:
                    97:4a:4c:32:76:89:ba:91:7f:d7:4d:cf:cd:35:02:
                    0c:53:f1:18:4c:5c:67:f6:fb:67:e4:63:20:cd:e6:
                    39:5d:e0:c4:62:4e:8a:ba:d7:8e:1e:bf:7c:08:33:
                    01:aa:6a:8a:3c:87:85:c3:90:92:72:24:46:ac:0d:
                    bb:1c:ff:39:fb:68:76:2c:a0:84:1b:db:e3:4a:45:
                    a0:60:dd:2b:42:46:8c:4f:61:f8:ee:c8:31:0e:d0:
                    94:0d:c9:fa:86:41:77:61:8f:e3:b2:f4:fa:82:26:
                    2c:cd:ff:d1:c9:0d:1a:27:2f:89:9c:a1:06:6c:69:
                    96:fb:fd:e7:74:77:bb:a6:d5:fe:70:54:74:1a:ab:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AF:9E:81:84:FB:9E:FF:22:F9:CE:D4:AC:1C:7C:D5:32:D3:7E:B7
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:be:f3:a3:f6:db:a8:af:19:77:ff:b5:22:07:6a:27:8e:fe:
         97:d0:d5:73:c5:68:0e:a6:fa:39:a1:0f:1c:3a:23:c3:e3:c1:
         37:e8:ec:5f:8a:93:64:ac:75:f7:c8:9e:62:7a:75:9d:6b:f0:
         e3:e4:f4:dd:8d:09:3d:fd:a1:d8:26:a4:f2:c0:a2:30:4b:1a:
         e5:a0:86:21:14:dc:f6:b2:52:cf:65:1c:ac:dc:f5:3a:4e:92:
         0d:f8:28:d0:01:f2:2a:5d:ee:db:46:82:cc:73:5b:4e:64:b0:
         08:d2:9b:b1:fb:d4:11:16:9b:a0:d7:bc:71:14:94:0e:86:c1:
         b2:07:c6:7b:91:68:08:37:30:c4:a1:c9:0c:84:1a:f8:37:e8:
         bb:72:12:eb:b8:e5:8e:8a:9b:f1:9c:69:f6:59:a2:d7:0f:a8:
         a8:ad:ba:6d:33:80:45:44:ed:8c:83:39:f0:52:fb:7e:f2:89:
         86:cf:b0:3a:e6:83:5c:2a:ab:71:b9:73:0d:67:75:c6:ce:0c:
         31:6c:15:2d:d0:ef:bb:fa:58:74:24:f1:69:78:b6:93:f2:59:
         25:c2:ae:dd:02:7a:91:f6:8c:33:6c:7a:7e:6b:63:64:2a:c9:
         50:9a:ba:8c:44:70:7c:00:c3:c4:ec:48:41:ad:d2:a3:14:b8:
         e3:6d:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:51:57 2025 by rpki-client