Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          NoRVazIrd8HvY8MMelkTuHeYyvHz4e1kzNdqoACoHRU=
Subject key identifier:   26:78:D6:E0:9C:52:3C:BF:B5:A1:E6:E7:0C:51:C3:27:0F:BE:5E:56
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       429CE7E611D7E23C374572204E8A687A111ABF24
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
Signing time:             Thu 06 Mar 2025 13:20:06 +0000
ROA not before:           Thu 06 Mar 2025 13:15:06 +0000
ROA not after:            Thu 05 Mar 2026 13:20:06 +0000
asID:                     270375
IP address blocks:        190.89.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:e7:e6:11:d7:e2:3c:37:45:72:20:4e:8a:68:7a:11:1a:bf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Mar  6 13:15:06 2025 GMT
            Not After : Mar  5 13:20:06 2026 GMT
        Subject: CN=2678D6E09C523CBFB5A1E6E70C51C3270FBE5E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:6a:24:fd:5e:87:96:9d:bf:a0:62:09:4e:
                    89:97:b2:a8:ec:d9:d9:23:92:42:fd:ae:3a:b6:46:
                    6a:38:78:aa:a2:81:70:ae:10:52:90:af:dc:ea:2e:
                    af:51:05:3e:21:7c:26:7e:7e:d3:30:0e:09:c0:5b:
                    17:a8:cb:ce:99:09:fa:f4:ec:e1:36:7b:f6:27:e7:
                    02:11:80:d0:f0:35:20:b2:4d:67:65:f7:5f:97:39:
                    c7:2e:83:af:4d:f8:13:2c:54:ac:a0:67:af:4f:aa:
                    63:f2:e9:22:12:79:af:87:87:15:43:20:3e:01:96:
                    88:4d:99:c2:b2:76:a7:df:dd:58:81:03:1b:51:12:
                    85:22:f1:05:5e:34:e2:ce:01:47:ca:f8:6b:2d:01:
                    74:63:83:a3:a8:8e:34:2e:fc:6e:67:04:5e:b0:7e:
                    d2:00:67:73:1c:5b:1a:dd:3b:db:ec:04:44:da:f8:
                    01:cb:30:41:ba:94:7c:f7:04:e7:39:56:92:51:3c:
                    6f:35:f3:41:cc:d8:86:a6:16:aa:c0:97:d7:8e:aa:
                    73:15:b9:21:d6:03:0e:0e:cb:51:9b:0b:42:2f:38:
                    ad:30:c2:ae:27:1e:7c:6e:53:19:36:20:25:9f:e6:
                    ad:8c:6d:ed:2a:ed:f1:ab:7f:a2:8d:af:25:31:2e:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:D6:E0:9C:52:3C:BF:B5:A1:E6:E7:0C:51:C3:27:0F:BE:5E:56
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:bb:29:da:00:cf:ba:d1:46:80:d1:4c:01:73:45:ee:06:
         75:0d:65:ef:6e:9e:8e:ce:c6:b3:61:e5:e1:5b:2b:44:4b:61:
         5a:3d:85:fa:0f:1d:03:22:d8:f9:ed:7f:c1:a1:06:2a:2d:39:
         e2:0d:a4:20:15:0a:b6:7e:6d:8f:bb:4d:57:89:0e:08:4b:da:
         43:c8:07:6a:e7:0b:02:9e:52:fa:6a:51:96:5a:4d:15:51:78:
         33:cb:63:28:48:00:7a:f9:25:89:a8:bc:06:c1:b5:8c:8b:10:
         2d:a5:8f:cb:5c:47:71:c0:5c:41:c4:df:a7:4f:09:90:51:ba:
         b7:64:ea:b2:10:3b:08:8d:c3:6c:cb:23:9d:7d:e3:9f:9b:03:
         74:ac:22:e8:e2:af:2f:5f:17:90:4a:69:62:58:0f:10:38:42:
         cb:cf:2b:f9:6f:2a:ab:9e:40:e4:00:e7:d6:7b:39:c7:6c:0f:
         62:8c:55:2f:00:b0:be:15:32:f2:88:20:63:6f:fb:0f:c5:60:
         7a:26:e7:bd:95:54:ed:36:66:ab:16:07:c3:a0:33:12:59:1b:
         c4:e5:91:d5:1f:19:1c:93:9c:9c:21:82:24:b0:ae:9e:0a:a1:
         70:e4:9f:a4:fa:55:8a:12:8b:58:af:b8:b3:07:3d:d3:23:67:
         0d:99:a7:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQpzn5hHX4jw3RXIgTopoehEavyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5RTIxOTdGREFBRTRBMkU5M0JDMjU4RTI1OEE1RDJD
MDIzQjIwNDAeFw0yNTAzMDYxMzE1MDZaFw0yNjAzMDUxMzIwMDZaMDMxMTAvBgNV
BAMTKDI2NzhENkUwOUM1MjNDQkZCNUExRTZFNzBDNTFDMzI3MEZCRTVFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Emok/V6Hlp2/oGIJTomXsqjs
2dkjkkL9rjq2Rmo4eKqigXCuEFKQr9zqLq9RBT4hfCZ+ftMwDgnAWxeoy86ZCfr0
7OE2e/Yn5wIRgNDwNSCyTWdl91+XOccug69N+BMsVKygZ69PqmPy6SISea+HhxVD
ID4BlohNmcKydqff3ViBAxtREoUi8QVeNOLOAUfK+GstAXRjg6OojjQu/G5nBF6w
ftIAZ3McWxrdO9vsBETa+AHLMEG6lHz3BOc5VpJRPG8180HM2IamFqrAl9eOqnMV
uSHWAw4Oy1GbC0IvOK0wwq4nHnxuUxk2ICWf5q2Mbe0q7fGrf6KNryUxLl33AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJnjW4JxSPL+1oebnDFHDJw++XlYwHwYDVR0j
BBgwFoAUcp4hl/2q5KLpO8JY4lil0sAjsgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXR3VzhDNDJGWU50d1dGcGh1N2F3RDFwUzV4NFplTG5rREFtR1lwd0pY
cUIvMS83MjlFMjE5N0ZEQUFFNEEyRTkzQkMyNThFMjU4QTVEMkMwMjNCMjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyOUUyMTk3RkRBQUU0QTJF
OTNCQzI1OEUyNThBNUQyQzAyM0IyMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V0d1c4QzQyRllOdHdXRnBodTdhd0QxcFM1eDRaZUxua0RBbUdZcHdKWHFCLzEv
MzEzOTMwMmUzODM5MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZ8wDQYJKoZIhvcNAQELBQADggEBAD5quyna
AM+60UaA0UwBc0XuBnUNZe9uno7OxrNh5eFbK0RLYVo9hfoPHQMi2Pntf8GhBiot
OeINpCAVCrZ+bY+7TVeJDghL2kPIB2rnCwKeUvpqUZZaTRVReDPLYyhIAHr5JYmo
vAbBtYyLEC2lj8tcR3HAXEHE36dPCZBRurdk6rIQOwiNw2zLI51945+bA3SsIuji
ry9fF5BKaWJYDxA4QsvPK/lvKqueQOQA59Z7OcdsD2KMVS8AsL4VMvKIIGNv+w/F
YHom572VVO02ZqsWB8OgMxJZG8TlkdUfGRyTnJwhgiSwrp4KoXDkn6T6VYoSi1iv
uLMHPdMjZw2Zp1E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:59:16 2025 by rpki-client