Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa
File:                     3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          bPAUor+TzSc3BXMl37RjPp5SDod1559iqswHpWXSuIA=
Subject key identifier:   6A:92:7B:62:FA:12:8F:A9:A2:E8:08:2B:C7:0C:47:AD:1E:FF:69:C0
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       6261691866301A504A1B00455BCBF2C3DEC5C823
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:15:20 +0000
ROA not before:           Sat 30 Mar 2024 14:10:20 +0000
ROA not after:            Sat 29 Mar 2025 14:15:20 +0000
asID:                     262491
IP address blocks:        168.90.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:61:69:18:66:30:1a:50:4a:1b:00:45:5b:cb:f2:c3:de:c5:c8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:10:20 2024 GMT
            Not After : Mar 29 14:15:20 2025 GMT
        Subject: CN=6A927B62FA128FA9A2E8082BC70C47AD1EFF69C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:ff:16:a8:73:02:19:4e:fb:71:63:ac:d2:
                    d5:bf:be:70:30:f3:dc:c7:58:a1:ac:48:14:10:ca:
                    e6:63:07:70:75:19:02:b8:7d:b0:97:60:e6:ad:cc:
                    82:03:e7:52:5d:02:9d:d3:fa:20:18:fa:9b:81:22:
                    3b:81:7b:d2:e6:31:b7:f6:85:77:1a:ac:9e:2c:d1:
                    a7:38:cc:eb:5a:0f:d7:5f:ac:68:d3:27:ea:c8:5b:
                    06:50:e5:a5:91:f7:42:2c:d5:30:bc:07:0e:49:1a:
                    9e:1b:07:ce:67:06:c7:cf:92:3e:f2:5c:db:3b:b3:
                    ff:03:35:0a:ac:ec:fa:1a:b0:e1:c4:f2:a4:a4:76:
                    a9:3d:17:5a:6c:1f:2e:98:ff:79:40:83:ce:b4:c2:
                    c3:63:d1:d9:9d:76:07:9c:7f:f1:55:9b:44:7f:27:
                    53:e9:71:2e:45:60:f0:c8:9d:4e:83:79:c7:91:ac:
                    d6:4b:c2:a2:06:e5:bd:71:96:e0:e5:3c:bd:28:12:
                    83:60:a6:11:ce:0f:49:56:76:e1:23:50:11:7b:fd:
                    96:23:0d:f0:98:7c:ea:80:73:97:bf:ce:ce:e5:58:
                    e6:cd:14:49:45:32:16:ff:de:91:33:da:34:14:c8:
                    00:1d:b4:ae:63:75:44:cb:3d:ce:e6:bc:c4:87:73:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:7B:62:FA:12:8F:A9:A2:E8:08:2B:C7:0C:47:AD:1E:FF:69:C0
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:f5:4b:ac:69:07:27:26:19:cc:ef:93:0a:25:93:26:4f:
         0c:4e:a1:92:2d:1a:cd:5a:77:d0:1c:2a:38:1c:e0:67:19:87:
         68:a0:6f:4b:75:91:0d:26:5e:cf:c3:90:64:fd:27:9c:a9:2c:
         98:35:f6:bc:37:79:14:e3:57:eb:98:49:4f:aa:a7:de:b7:96:
         7a:b1:d2:ac:79:0f:a9:22:65:e1:b0:fd:f1:22:51:31:a5:60:
         01:5a:fb:d1:14:45:3d:bb:74:4e:1b:a8:eb:7e:9b:64:7a:43:
         d1:a5:5d:49:be:c8:4c:10:3e:c3:0f:16:55:41:e2:f0:d7:34:
         b9:10:49:8a:49:6a:c3:45:3d:a1:b7:31:eb:dd:8d:61:fd:4f:
         f7:13:61:5f:f7:8b:c7:19:28:47:e9:d5:f3:1b:90:b9:4e:77:
         f7:52:28:08:1e:cf:63:b2:e3:18:c3:b3:85:f8:8d:30:44:6e:
         81:14:f9:0a:f4:1b:60:0f:0f:85:3a:68:85:52:86:17:2c:39:
         38:57:e1:d4:5a:bb:82:f1:51:1e:5e:d5:c0:c0:73:0a:30:32:
         1b:b8:84:39:d6:95:08:0e:bc:94:9a:6e:03:89:17:bd:59:c6:
         12:e7:b8:af:54:f5:e8:be:07:d3:17:33:05:27:ff:0b:de:0e:
         19:32:35:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYmFpGGYwGlBKGwBFW8vyw97FyCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE2NjE0MkQ2MDE0QTdEREYxMjc4M0YwODhGMTRGN0Yx
QjNBQzlEQzAeFw0yNDAzMzAxNDEwMjBaFw0yNTAzMjkxNDE1MjBaMDMxMTAvBgNV
BAMTKDZBOTI3QjYyRkExMjhGQTlBMkU4MDgyQkM3MEM0N0FEMUVGRjY5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzP8WqHMCGU77cWOs0tW/vnAw
89zHWKGsSBQQyuZjB3B1GQK4fbCXYOatzIID51JdAp3T+iAY+puBIjuBe9LmMbf2
hXcarJ4s0ac4zOtaD9dfrGjTJ+rIWwZQ5aWR90Is1TC8Bw5JGp4bB85nBsfPkj7y
XNs7s/8DNQqs7PoasOHE8qSkdqk9F1psHy6Y/3lAg860wsNj0dmddgecf/FVm0R/
J1PpcS5FYPDInU6DeceRrNZLwqIG5b1xluDlPL0oEoNgphHOD0lWduEjUBF7/ZYj
DfCYfOqAc5e/zs7lWObNFElFMhb/3pEz2jQUyAAdtK5jdUTLPc7mvMSHczFHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUapJ7YvoSj6mi6AgrxwxHrR7/acAwHwYDVR0j
BBgwFoAU2mYULWAUp93xJ4PwiPFPfxs6ydwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdSdEtCS3hTUDViUUZtbkM1OHlaUkJOdDZHNVhMTXkxQXdtMk5RNmRu
dk4vMC9EQTY2MTQyRDYwMTRBN0RERjEyNzgzRjA4OEYxNEY3RjFCM0FDOURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RBNjYxNDJENjAxNEE3RERG
MTI3ODNGMDg4RjE0RjdGMUIzQUM5REMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3UnRLQkt4U1A1YlFGbW5DNTh5WlJCTnQ2RzVYTE15MUF3bTJOUTZkbnZOLzAv
MzEzNjM4MmUzOTMwMmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWrQwDQYJKoZIhvcNAQELBQADggEBAD2w9Uus
aQcnJhnM75MKJZMmTwxOoZItGs1ad9AcKjgc4GcZh2igb0t1kQ0mXs/DkGT9J5yp
LJg19rw3eRTjV+uYSU+qp963lnqx0qx5D6kiZeGw/fEiUTGlYAFa+9EURT27dE4b
qOt+m2R6Q9GlXUm+yEwQPsMPFlVB4vDXNLkQSYpJasNFPaG3MevdjWH9T/cTYV/3
i8cZKEfp1fMbkLlOd/dSKAgez2Oy4xjDs4X4jTBEboEU+Qr0G2APD4U6aIVShhcs
OThX4dRau4LxUR5e1cDAcwowMhu4hDnWlQgOvJSabgOJF71ZxhLnuK9U9ei+B9MX
MwUn/wveDhkyNRE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org