Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3234203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32322d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          UQqBaCpoGMyyNh5B3tv6rVhdOYkll7vHLMfgx8ymJi0=
Subject key identifier:   1F:B0:A0:C1:3D:62:24:4E:6A:B6:43:C4:F4:2A:DB:C5:B0:7B:59:4A
Certificate issuer:       /CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
Certificate serial:       0F6D916800B85BA402921EF9420CA341F905EC75
Authority key identifier: EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3234203d3e20323730333735.roa
Signing time:             Tue 16 May 2023 13:44:28 +0000
ROA not before:           Tue 16 May 2023 13:39:28 +0000
ROA not after:            Tue 14 May 2024 13:44:28 +0000
asID:                     270375
IP address blocks:        190.89.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:91:68:00:b8:5b:a4:02:92:1e:f9:42:0c:a3:41:f9:05:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
        Validity
            Not Before: May 16 13:39:28 2023 GMT
            Not After : May 14 13:44:28 2024 GMT
        Subject: CN=1FB0A0C13D62244E6AB643C4F42ADBC5B07B594A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:2e:c5:17:9b:24:95:8a:5a:31:5e:ec:fb:
                    6d:15:10:4f:3c:c0:d9:87:0a:65:1b:77:52:35:6e:
                    70:b6:52:ac:f9:f8:b5:b5:42:01:47:6d:80:84:58:
                    89:4f:59:e0:ee:7b:5d:68:63:62:8b:53:5b:84:cd:
                    f5:39:e7:4b:9f:0b:8b:d2:02:a5:fd:c4:e2:77:5c:
                    c7:ef:8e:1e:32:dd:03:a1:f9:4b:2f:bb:88:c9:76:
                    3b:c8:9d:23:78:80:c3:bc:8c:6b:f6:cf:93:3e:5e:
                    e7:89:d0:82:78:2a:74:8b:81:71:df:8f:54:17:2a:
                    ed:f9:13:68:1f:40:3c:17:44:7c:29:aa:67:40:d2:
                    3d:ab:9f:1e:3d:e6:44:67:77:14:d4:5a:52:4c:6c:
                    c2:92:16:fb:37:91:14:65:ab:34:03:cf:17:8c:7d:
                    28:f8:94:c4:04:ba:78:a6:f1:5e:24:b0:68:1c:99:
                    e6:33:a5:be:16:1c:a4:b4:e7:6f:81:38:e5:11:76:
                    a6:5a:93:16:f5:12:67:07:1c:ff:2c:42:a1:1a:ac:
                    b8:64:2f:c1:99:c8:c5:ee:9c:15:8b:3d:f8:a0:c3:
                    71:b3:56:7d:82:0e:6d:13:bf:bb:e8:93:7b:d7:fa:
                    ef:18:de:ec:3a:33:87:45:42:3c:b4:81:b4:33:30:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B0:A0:C1:3D:62:24:4E:6A:B6:43:C4:F4:2A:DB:C5:B0:7B:59:4A
            X509v3 Authority Key Identifier:
                keyid:EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135362e302f32322d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:2d:fb:67:52:f6:cb:22:ea:69:1e:8c:3a:1d:31:0d:f4:
         07:89:ed:ce:b9:2e:95:bb:bf:bc:66:06:15:e3:ea:00:fd:0a:
         44:8b:3a:36:35:b5:ea:68:6f:90:6f:22:71:1c:53:d4:59:d0:
         4e:22:1e:f2:dc:26:b8:ce:1f:d2:b7:63:ce:fa:e2:81:2f:1f:
         12:bf:ff:19:1d:d2:5f:b8:92:81:c8:5a:12:b3:e2:a4:ce:5d:
         6a:1e:33:90:ef:a6:3d:7b:88:26:c0:f7:11:75:0c:7a:38:d9:
         9e:38:26:f6:c1:64:b7:b5:dc:b8:d9:0a:34:90:27:8f:95:47:
         ae:fd:4b:c9:d7:c0:4f:e5:92:48:0f:e4:6e:42:71:4f:1a:24:
         80:d6:0e:07:a9:49:08:cb:4d:52:e3:07:4c:88:5e:7e:2f:25:
         2e:ca:4e:0f:82:bf:91:93:16:44:29:71:9c:ee:54:d1:1f:5e:
         0c:22:9e:b8:21:f2:3b:ab:1a:92:52:71:1f:3e:c1:f6:06:1f:
         07:bf:69:a8:17:2c:46:47:72:df:fd:b6:1a:6e:31:8f:f7:26:
         e2:91:bd:f2:d0:e0:df:84:0b:c2:3e:6d:46:4c:63:ba:8b:8e:
         02:d2:78:dc:d5:40:22:ae:99:f5:38:ad:ae:b2:6f:d4:01:f0:
         98:50:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org