Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa (raw, json)
Hash identifier:          4RhY1flO1ywFSktA6ecsgRoK0QUTJ5/IbdySglAHPA0=
Subject key identifier:   8A:1E:89:95:14:4F:0F:51:BC:6D:D4:CF:70:BE:A7:04:2B:86:00:C0
Certificate issuer:       /CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
Certificate serial:       578EB8736CFA9CC049D338773A1CD8FFE77FBA53
Authority key identifier: EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
Signing time:             Tue 16 May 2023 14:11:17 +0000
ROA not before:           Tue 16 May 2023 14:06:17 +0000
ROA not after:            Tue 14 May 2024 14:11:17 +0000
asID:                     270375
IP address blocks:        190.89.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8e:b8:73:6c:fa:9c:c0:49:d3:38:77:3a:1c:d8:ff:e7:7f:ba:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
        Validity
            Not Before: May 16 14:06:17 2023 GMT
            Not After : May 14 14:11:17 2024 GMT
        Subject: CN=8A1E8995144F0F51BC6DD4CF70BEA7042B8600C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:a5:4f:eb:ca:4f:7d:0d:e5:61:91:14:3d:
                    df:41:7c:ce:91:a9:3e:8d:39:c3:24:95:81:df:7a:
                    66:21:04:43:c0:7b:a7:65:18:50:b4:27:84:79:50:
                    f0:50:e5:dd:5a:ba:8f:1e:ad:f5:fc:01:21:55:b6:
                    a1:1b:2f:13:44:39:a5:7f:2f:45:fe:ac:67:78:ec:
                    ac:bb:0d:69:4e:e6:43:37:52:a8:1a:ba:62:b7:7b:
                    53:5e:b2:cf:9b:50:ff:ac:4f:6d:f0:11:c1:10:7e:
                    8e:45:80:d4:fd:48:ea:43:5e:6a:7a:0f:5b:fc:3f:
                    24:5b:28:c0:d1:b0:16:82:ce:59:ec:e3:6e:a7:11:
                    0d:e3:9a:a3:53:62:25:e9:c0:83:57:a8:00:4a:24:
                    3f:88:f2:7d:04:ea:b8:5e:eb:e7:12:58:c4:7d:63:
                    31:8a:8f:5d:41:2f:da:fb:ac:19:09:5b:c7:41:15:
                    bf:28:71:5d:d2:42:69:c4:7b:a0:17:e0:61:ff:9a:
                    d4:4b:4f:a7:39:89:85:6d:f3:0d:8b:44:47:c2:57:
                    98:39:00:38:4d:f9:3a:1c:92:a2:30:20:9d:1d:63:
                    2e:b3:9e:60:10:b2:8f:0c:b9:a7:b0:4a:b9:ee:69:
                    b6:9a:85:d4:f5:7b:36:bb:40:7b:b4:0a:f9:cc:38:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:89:95:14:4F:0F:51:BC:6D:D4:CF:70:BE:A7:04:2B:86:00:C0
            X509v3 Authority Key Identifier:
                keyid:EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:4f:74:1f:42:10:9c:18:93:39:0a:d8:87:12:f4:b4:5c:
         a8:43:20:95:da:09:b9:16:75:8d:35:83:a9:55:9f:85:f0:79:
         0b:e8:c3:97:f4:cf:f5:96:47:f8:e2:53:e3:5d:a3:a3:05:63:
         24:08:5b:e7:c2:16:b1:5e:ed:41:04:ce:31:bc:fa:f3:36:c4:
         eb:f9:82:22:d5:7e:8d:cf:56:d1:6e:e2:a9:ad:a0:d7:d5:2d:
         6b:6f:4e:eb:5b:da:77:e3:2f:82:08:d7:56:b0:bf:fd:06:f5:
         32:f4:2d:a3:a4:03:9e:81:89:9e:05:47:73:35:14:7e:40:f3:
         cd:e4:b2:9e:10:93:e8:63:fa:f6:bd:2f:9d:b1:dc:be:25:34:
         11:60:c8:b2:c9:60:f7:6d:4d:ee:aa:b7:36:04:00:32:19:34:
         5b:2f:49:3d:d0:f1:48:41:44:62:fd:ad:5a:0a:47:7c:8a:35:
         f0:f0:e4:2a:8a:0d:d4:f0:69:90:60:84:1d:9d:e3:6d:a0:77:
         09:31:3e:b6:0e:7f:09:76:1e:e1:af:22:ef:bc:3a:93:86:01:
         bf:7b:3f:32:78:f9:71:96:29:85:ee:08:17:5a:24:bf:7e:22:
         a0:8c:d8:bb:8c:63:ad:34:11:d7:50:ce:38:94:79:2d:0f:f3:
         c6:23:ae:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV464c2z6nMBJ0zh3OhzY/+d/ulMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxMUVCNUJFODlFNUVEM0Q0MzAwRENDREVDMUU0MEFE
MEVFRTkwMzAeFw0yMzA1MTYxNDA2MTdaFw0yNDA1MTQxNDExMTdaMDMxMTAvBgNV
BAMTKDhBMUU4OTk1MTQ0RjBGNTFCQzZERDRDRjcwQkVBNzA0MkI4NjAwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnaVP68pPfQ3lYZEUPd9BfM6R
qT6NOcMklYHfemYhBEPAe6dlGFC0J4R5UPBQ5d1auo8erfX8ASFVtqEbLxNEOaV/
L0X+rGd47Ky7DWlO5kM3UqgaumK3e1Ness+bUP+sT23wEcEQfo5FgNT9SOpDXmp6
D1v8PyRbKMDRsBaCzlns426nEQ3jmqNTYiXpwINXqABKJD+I8n0E6rhe6+cSWMR9
YzGKj11BL9r7rBkJW8dBFb8ocV3SQmnEe6AX4GH/mtRLT6c5iYVt8w2LREfCV5g5
ADhN+TockqIwIJ0dYy6znmAQso8MuaewSrnuabaahdT1eza7QHu0CvnMOJNTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUih6JlRRPD1G8bdTPcL6nBCuGAMAwHwYDVR0j
BBgwFoAU7hHrW+ieXtPUMA3M3sHkCtDu6QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXR3VzhDNDJGWU50d1dGcGh1N2F3RDFwUzV4NFplTG5rREFtR1lwd0pY
cUIvMi9FRTExRUI1QkU4OUU1RUQzRDQzMDBEQ0NERUMxRTQwQUQwRUVFOTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFMTFFQjVCRTg5RTVFRDNE
NDMwMERDQ0RFQzFFNDBBRDBFRUU5MDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V0d1c4QzQyRllOdHdXRnBodTdhd0QxcFM1eDRaZUxua0RBbUdZcHdKWHFCLzIv
MzEzOTMwMmUzODM5MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+WZwwDQYJKoZIhvcNAQELBQADggEBAJmMT3Qf
QhCcGJM5CtiHEvS0XKhDIJXaCbkWdY01g6lVn4XweQvow5f0z/WWR/jiU+Ndo6MF
YyQIW+fCFrFe7UEEzjG8+vM2xOv5giLVfo3PVtFu4qmtoNfVLWtvTutb2nfjL4II
11awv/0G9TL0LaOkA56BiZ4FR3M1FH5A883ksp4Qk+hj+va9L52x3L4lNBFgyLLJ
YPdtTe6qtzYEADIZNFsvST3Q8UhBRGL9rVoKR3yKNfDw5CqKDdTwaZBghB2d422g
dwkxPrYOfwl2HuGvIu+8OpOGAb97PzJ4+XGWKYXuCBdaJL9+IqCM2LuMY600EddQ
zjiUeS0P88YjrqE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org