Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa
File:                     3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa (raw, json)
Hash identifier:          5i4Waln85xNJPx8EJB/3fO5xWltxIIQiK+gCZkDmGsY=
Subject key identifier:   EF:34:D8:9B:CF:6F:4D:A8:62:D0:DF:5A:78:F7:69:DF:AA:99:2F:42
Certificate issuer:       /CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
Certificate serial:       38150A9E6DCEA7196156928CEF2F469D89957B9B
Authority key identifier: EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa
Signing time:             Tue 16 May 2023 14:11:17 +0000
ROA not before:           Tue 16 May 2023 14:06:17 +0000
ROA not after:            Tue 14 May 2024 14:11:17 +0000
asID:                     270375
IP address blocks:        190.89.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:0a:9e:6d:ce:a7:19:61:56:92:8c:ef:2f:46:9d:89:95:7b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
        Validity
            Not Before: May 16 14:06:17 2023 GMT
            Not After : May 14 14:11:17 2024 GMT
        Subject: CN=EF34D89BCF6F4DA862D0DF5A78F769DFAA992F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:d4:38:93:a8:64:c6:13:6b:ed:b5:d2:29:
                    ca:ab:a6:41:9e:fa:20:dd:dc:36:26:2a:53:b2:0f:
                    c1:00:d0:b1:33:9d:dc:6c:0d:d5:f0:0c:9e:8e:98:
                    ca:69:9a:3f:ec:85:85:43:f0:37:b7:24:dc:79:fd:
                    6c:20:6d:87:af:42:20:74:87:a2:82:1d:e7:03:b5:
                    b7:2e:ac:89:74:d2:63:be:57:42:dd:72:68:99:2d:
                    c2:4f:e9:ea:16:60:af:7f:04:a9:f8:10:de:5c:c0:
                    91:ee:eb:d6:0f:1b:a1:ed:06:b2:42:7b:b8:7c:02:
                    41:b6:a5:32:1e:4a:a9:4e:91:7e:be:8f:d2:a2:f7:
                    d3:c8:df:75:c1:9e:c2:78:30:1c:bd:60:81:e5:6a:
                    1e:c7:48:70:9e:88:04:bf:0f:08:83:f1:75:17:1f:
                    6b:08:53:85:ed:7b:0b:15:d2:be:25:80:b0:2e:77:
                    a3:28:39:9b:f0:05:5d:90:b0:09:78:1f:b6:81:d9:
                    32:7d:69:69:b8:75:61:93:d8:0f:65:a9:6a:95:9a:
                    ac:be:b0:d4:d2:22:15:30:bb:39:82:7f:e8:fe:32:
                    8d:f7:d0:2a:5c:50:85:d6:af:a4:31:01:35:19:a3:
                    19:9e:c6:99:03:07:bb:37:62:cf:83:60:4e:32:ef:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:D8:9B:CF:6F:4D:A8:62:D0:DF:5A:78:F7:69:DF:AA:99:2F:42
            X509v3 Authority Key Identifier:
                keyid:EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135382e302f32332d3233203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:65:59:c5:61:73:3e:70:4d:ce:73:01:ea:5e:69:ce:c7:
         ab:a9:b3:d5:e9:9c:01:ea:f2:5a:b7:3d:7b:c1:d7:25:07:85:
         d1:c9:9f:39:e9:80:c2:3d:a3:e0:32:e8:4c:91:23:09:f4:2f:
         d2:a9:a8:59:7e:03:4a:c1:62:29:99:34:33:d7:2b:85:4f:1b:
         96:8d:ac:a9:e3:d3:45:ae:6d:91:21:be:5b:2b:ee:84:74:40:
         92:4d:f1:11:c9:57:11:0d:51:d0:4d:6d:8b:87:61:e6:32:2d:
         d6:c1:7e:9f:c5:35:e0:9a:37:fb:49:8e:76:75:d3:b9:34:b8:
         74:bd:40:e8:ac:d4:e8:ef:bb:2a:e0:a3:bb:5e:0c:16:c8:4a:
         89:34:40:a3:ae:bc:60:89:84:17:2b:ea:ce:bd:b3:e6:2e:1f:
         e7:f2:21:94:8b:0d:79:c7:f6:56:16:19:b4:32:d9:09:58:2b:
         f9:5c:7b:f1:5d:1b:e0:41:cd:4c:f1:b6:38:39:0e:81:3e:c5:
         26:5d:6d:f4:25:aa:80:2d:39:98:8b:51:cb:41:11:be:a9:58:
         d2:1b:07:ae:87:23:1f:72:37:9e:35:f3:cb:63:bc:68:f0:52:
         b8:77:c2:bc:71:91:d2:44:0f:d5:68:76:60:16:de:b8:65:02:
         57:ed:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org