Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          i/2SNwLHQFt5kKQUj5Kdb18mP2jbiOaHgXkKmcvg3vA=
Subject key identifier:   B1:59:59:C0:59:66:F8:B8:75:A6:D7:74:F3:8D:5E:F3:E7:F3:6D:FF
Certificate issuer:       /CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
Certificate serial:       2421ED28B1D90CAB987865A6B901DE9482C9F486
Authority key identifier: EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
Signing time:             Tue 16 May 2023 14:11:17 +0000
ROA not before:           Tue 16 May 2023 14:06:17 +0000
ROA not after:            Tue 14 May 2024 14:11:17 +0000
asID:                     270375
IP address blocks:        190.89.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:21:ed:28:b1:d9:0c:ab:98:78:65:a6:b9:01:de:94:82:c9:f4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903
        Validity
            Not Before: May 16 14:06:17 2023 GMT
            Not After : May 14 14:11:17 2024 GMT
        Subject: CN=B15959C05966F8B875A6D774F38D5EF3E7F36DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:a2:dc:95:b2:43:4a:ac:d3:1b:4c:ab:b5:
                    90:ff:48:8c:ea:e9:67:ef:6c:76:6f:61:d1:ca:ec:
                    2a:11:70:0b:90:f5:c3:f0:33:e8:10:4e:e1:4b:9a:
                    ef:48:b4:c6:a4:ee:3e:16:91:c2:cf:1c:ef:12:34:
                    db:5f:cc:c9:47:1f:7d:75:0a:23:45:c9:45:2b:cd:
                    fe:ff:23:67:c1:1c:17:66:66:b2:e8:62:d7:98:a7:
                    71:d5:89:2d:45:db:b2:f2:1b:2b:29:29:96:f5:f8:
                    30:a7:9c:52:72:3b:db:5d:ca:35:4d:8e:df:4e:8a:
                    b3:3c:5f:e7:0b:64:38:4d:5d:54:f0:a1:e7:cf:93:
                    e1:65:15:ea:8b:ff:8b:dd:22:db:31:6a:84:84:e0:
                    05:ef:f1:43:4a:aa:45:ed:7f:86:64:ae:da:2e:9e:
                    43:29:85:81:cd:1a:de:24:a6:7d:ef:41:65:6e:8b:
                    5e:c7:1a:69:de:ae:a7:ca:18:f1:d5:bb:9b:6c:3c:
                    7f:86:d6:bf:bc:93:26:bc:05:55:80:ce:bf:2d:b7:
                    f5:05:92:4e:37:51:b7:cc:be:fe:6e:3b:6b:44:59:
                    ae:95:bf:70:bb:0a:0e:38:03:52:1c:7b:d7:00:fe:
                    c0:d4:b5:85:58:ec:eb:36:5b:ee:f8:43:5d:6d:99:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:59:C0:59:66:F8:B8:75:A6:D7:74:F3:8D:5E:F3:E7:F3:6D:FF
            X509v3 Authority Key Identifier:
                keyid:EE:11:EB:5B:E8:9E:5E:D3:D4:30:0D:CC:DE:C1:E4:0A:D0:EE:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE11EB5BE89E5ED3D4300DCCDEC1E40AD0EEE903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/2/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:05:c9:6e:c6:64:85:b9:39:ef:a5:77:93:1f:37:9d:c6:
         57:82:36:84:cb:83:ff:75:9c:57:6b:63:29:a8:37:1e:7c:c6:
         62:ad:8d:9c:0e:55:de:17:52:5c:1a:c5:2b:05:c2:c1:56:11:
         73:5e:9a:ab:2c:0a:b9:a1:f9:db:ba:5c:c4:f4:6b:b8:2f:60:
         d2:d2:ef:d1:2a:c7:fc:4b:01:30:e3:5f:13:b3:6e:d1:6c:aa:
         2a:4b:45:98:79:73:92:cf:59:21:b7:3a:bd:2c:68:3a:74:df:
         56:50:f4:17:af:15:fe:79:ac:58:2f:1a:cb:d6:13:a3:20:8e:
         d4:eb:5b:bf:3f:4e:9c:ae:c1:e0:0f:54:85:62:30:a5:33:9e:
         ba:cc:ea:9b:a2:1e:72:dd:5b:76:af:f4:af:39:d4:a7:ea:86:
         2e:d0:c4:3f:21:18:80:8c:43:a8:51:0e:df:84:ec:b8:55:b4:
         3b:a2:69:14:6d:a7:27:d6:83:6a:33:36:c0:05:2b:d3:0b:3b:
         ff:b3:71:b7:37:be:f7:2d:47:93:78:ca:68:af:41:36:d1:46:
         99:4f:b4:c3:77:4a:79:f0:e9:79:54:c7:0d:6b:df:41:8e:1d:
         1c:ef:a4:fe:a0:eb:c1:67:04:3b:d1:28:35:59:01:01:9a:14:
         88:66:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org