Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          WQT+P9PRSKIg+6wDQlSRKhERblgmJx3co/6kBDVpm9I=
Subject key identifier:   69:D3:8B:05:76:71:A2:6F:54:9C:91:8E:58:97:65:BE:EB:AC:FE:AB
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       15D816BCD4CB4C5E8B42F34329FF5435C56FEF31
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa
Signing time:             Tue 09 Apr 2024 14:19:13 +0000
ROA not before:           Tue 09 Apr 2024 14:14:13 +0000
ROA not after:            Tue 08 Apr 2025 14:19:13 +0000
asID:                     270375
IP address blocks:        190.89.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:16:bc:d4:cb:4c:5e:8b:42:f3:43:29:ff:54:35:c5:6f:ef:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Apr  9 14:14:13 2024 GMT
            Not After : Apr  8 14:19:13 2025 GMT
        Subject: CN=69D38B057671A26F549C918E589765BEEBACFEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:62:0d:9c:ec:0f:8a:af:dc:95:85:5c:39:
                    d1:24:62:fb:a0:f2:11:61:c9:2a:c0:46:18:33:f3:
                    d4:e6:85:72:50:fc:63:36:f1:18:d7:24:d7:d2:0e:
                    44:77:ff:cd:90:24:f2:f0:e7:2d:3a:41:3a:43:a7:
                    2b:3f:64:e6:47:d5:db:dd:2c:a9:d3:ce:2a:14:54:
                    4e:29:49:71:c3:c6:5b:de:bc:33:76:f6:ee:66:01:
                    8f:78:fc:ed:50:9e:98:82:c8:78:87:a8:05:f4:c5:
                    53:1e:7e:77:3a:93:bc:64:0b:96:f3:79:ee:2e:7f:
                    75:72:df:51:74:76:ae:2c:51:d1:72:60:19:dc:98:
                    3a:9b:56:b8:9b:d9:4c:17:f1:c8:7e:0e:bd:88:32:
                    a9:e3:a6:38:5d:78:25:31:5f:2e:b4:f8:8d:6b:94:
                    0e:06:c7:a1:17:48:a7:76:4d:bd:29:31:c6:c8:2e:
                    fe:71:9f:9b:cc:f4:eb:8d:75:94:20:d3:e4:57:08:
                    a4:cd:7b:40:64:e6:05:a2:0f:4a:6d:93:f9:4b:66:
                    9b:09:51:5a:bd:ee:50:67:7b:84:a5:a5:fa:3c:2d:
                    af:79:98:28:a0:62:be:8a:a9:ac:a5:c4:e2:7d:5c:
                    1e:a8:cb:7f:73:07:92:4c:cb:d0:67:31:c5:48:e7:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:8B:05:76:71:A2:6F:54:9C:91:8E:58:97:65:BE:EB:AC:FE:AB
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:d7:fc:15:a6:7d:6f:26:96:11:85:0d:f8:78:1c:c1:03:82:
         92:9d:9e:80:0b:2b:e0:a6:5f:96:3e:29:a5:df:39:07:6e:6f:
         63:5d:4e:da:03:f0:b5:1e:c0:a0:04:0f:88:b7:33:e4:eb:24:
         d7:d2:a2:15:e8:b0:97:fa:9c:a9:36:1d:48:cb:02:63:0c:5a:
         01:84:89:0f:f7:26:c3:5d:aa:87:e0:4e:38:aa:f5:bd:ab:75:
         cf:a6:65:bb:4d:05:0f:cf:80:d4:b5:45:50:5e:c4:79:54:bc:
         6b:f0:1a:fe:04:f5:a5:89:54:b9:f5:1a:9b:95:bc:e0:d3:1e:
         c6:03:69:04:1f:64:7f:b4:f0:12:06:66:f9:c9:c2:55:5a:46:
         32:7d:12:ef:5e:75:0c:6a:80:f6:3d:d8:70:c5:55:dc:51:db:
         bf:10:b3:34:ef:d5:fa:3d:9d:72:42:41:13:93:75:19:ee:70:
         94:3f:9e:e8:73:38:2c:a6:5b:08:b5:66:17:2f:b4:68:f3:f0:
         7b:2a:11:5b:37:49:60:44:1b:c5:f8:b3:ad:1c:47:81:82:d4:
         5e:94:f9:7d:00:c4:37:f0:94:db:46:37:00:e9:ef:ca:46:32:
         66:7e:03:03:b8:48:58:14:f4:56:13:61:a6:8b:63:ab:c9:bf:
         e4:e3:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:22 2024 by rpki-client on console.sobornost.net