Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
File:                     3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          Y1pWzYv3AwDRAONEauslXFLlYRSHjbHEivP+Mzrp7Ls=
Subject key identifier:   15:39:40:AF:63:FA:48:40:7C:09:2A:0A:0F:7E:A3:93:30:78:07:A6
Certificate issuer:       /CN=40209EB56DBE9B90721379291AA6F10A592354FB
Certificate serial:       0D7064AE6C370A1D929E6692711AFE328661C1F4
Authority key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 02 Apr 2024 14:16:20 +0000
ROA not before:           Tue 02 Apr 2024 14:11:20 +0000
ROA not after:            Tue 01 Apr 2025 14:16:20 +0000
asID:                     262417
IP address blocks:        168.90.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:70:64:ae:6c:37:0a:1d:92:9e:66:92:71:1a:fe:32:86:61:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Validity
            Not Before: Apr  2 14:11:20 2024 GMT
            Not After : Apr  1 14:16:20 2025 GMT
        Subject: CN=153940AF63FA48407C092A0A0F7EA393307807A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:d7:c3:72:1d:70:ae:07:ae:bc:11:be:de:
                    4c:5f:a2:c0:b0:25:9f:c7:81:c8:6a:9a:89:4f:4c:
                    0a:2d:95:61:5f:d1:94:63:2b:06:ca:4d:38:c2:10:
                    fc:fd:2b:f1:22:19:45:89:41:ac:95:1b:32:7b:ff:
                    91:df:3f:f7:e4:25:ac:b3:a5:07:3e:50:a0:89:18:
                    fd:fd:02:32:85:0f:30:99:a0:a2:49:99:ea:81:b8:
                    e6:0c:1b:38:ee:e4:62:d1:9c:f5:d3:80:0f:fd:ba:
                    8b:cc:6e:6e:f4:23:b6:0e:1d:44:3c:88:cb:96:4d:
                    02:dd:be:73:66:5c:a3:38:69:cf:0a:04:8e:d9:f2:
                    10:65:13:76:8b:20:b5:e6:5d:00:15:e9:e2:9f:d2:
                    04:c8:42:4d:d7:83:24:7e:23:89:13:79:66:fb:78:
                    46:a8:3d:cc:a2:89:88:f0:b3:fc:25:0f:57:1b:7c:
                    7f:1e:a1:7b:59:b6:d4:5b:8f:af:8e:0c:f0:67:91:
                    18:f8:ca:21:41:5b:6b:b1:a3:87:9c:1a:d1:ee:85:
                    87:aa:e0:fc:3d:d8:53:8a:ef:25:67:7a:be:bd:b9:
                    a9:68:19:4c:20:1c:98:b2:79:52:9c:d0:30:55:87:
                    53:61:cf:09:61:b0:f9:aa:93:bc:aa:d8:5b:7e:14:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:40:AF:63:FA:48:40:7C:09:2A:0A:0F:7E:A3:93:30:78:07:A6
            X509v3 Authority Key Identifier:
                keyid:40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:83:58:73:e3:88:5d:f2:0b:c4:c6:51:dd:e9:29:ee:e4:7d:
         c2:63:60:98:bf:be:08:53:c4:8f:e6:20:f6:7d:6b:a3:58:9e:
         29:48:4b:27:85:d5:cf:7d:53:17:da:a0:43:13:84:3f:af:9e:
         72:9a:b2:ee:7a:3b:33:c8:28:99:8e:ca:f7:95:69:9f:e2:38:
         2b:85:fc:10:d9:ff:14:fe:f2:71:54:18:0d:3e:49:8a:95:4b:
         f6:ef:5d:b1:86:73:a8:28:ad:f4:76:56:d7:ee:3d:e8:35:e0:
         ce:83:f0:64:da:13:5c:98:9d:6f:66:cf:cb:e4:d2:76:99:03:
         ce:b1:2e:51:8d:c9:58:5f:f4:d3:19:74:fe:83:1e:c9:9c:a2:
         31:71:90:d5:de:39:93:6c:5e:98:d5:91:1b:d6:b0:1a:65:d1:
         74:58:d8:cc:e1:c5:40:45:69:f2:6e:fc:58:4c:a2:f1:95:a0:
         88:25:15:84:b1:9c:12:eb:96:62:3b:4f:64:9a:be:51:e6:49:
         2f:fb:f9:8e:8e:6e:cc:5f:dd:ee:5a:33:77:86:da:4b:f3:3c:
         a5:5c:ce:d2:d9:2e:52:cb:75:59:24:69:4a:f1:25:f3:b8:f1:
         d2:32:e1:dc:65:c1:d5:c0:56:42:8d:9f:69:13:fe:5a:bb:2e:
         c4:5b:5d:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDXBkrmw3Ch2SnmaScRr+MoZhwfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyMDlFQjU2REJFOUI5MDcyMTM3OTI5MUFBNkYxMEE1
OTIzNTRGQjAeFw0yNDA0MDIxNDExMjBaFw0yNTA0MDExNDE2MjBaMDMxMTAvBgNV
BAMTKDE1Mzk0MEFGNjNGQTQ4NDA3QzA5MkEwQTBGN0VBMzkzMzA3ODA3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFONfDch1wrgeuvBG+3kxfosCw
JZ/HgchqmolPTAotlWFf0ZRjKwbKTTjCEPz9K/EiGUWJQayVGzJ7/5HfP/fkJayz
pQc+UKCJGP39AjKFDzCZoKJJmeqBuOYMGzju5GLRnPXTgA/9uovMbm70I7YOHUQ8
iMuWTQLdvnNmXKM4ac8KBI7Z8hBlE3aLILXmXQAV6eKf0gTIQk3XgyR+I4kTeWb7
eEaoPcyiiYjws/wlD1cbfH8eoXtZttRbj6+ODPBnkRj4yiFBW2uxo4ecGtHuhYeq
4Pw92FOK7yVner69ualoGUwgHJiyeVKc0DBVh1NhzwlhsPmqk7yq2Ft+FOI7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFTlAr2P6SEB8CSoKD36jkzB4B6YwHwYDVR0j
BBgwFoAUQCCetW2+m5ByE3kpGqbxClkjVPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC80MDIwOUVCNTZEQkU5QjkwNzIxMzc5MjkxQUE2RjEwQTU5MjM1NEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwMjA5RUI1NkRCRTlCOTA3
MjEzNzkyOTFBQTZGMTBBNTkyMzU0RkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNjM4MmUzOTMwMmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqFocMA0GCSqGSIb3DQEBCwUAA4IBAQC2g1hz44hd
8gvExlHd6Snu5H3CY2CYv74IU8SP5iD2fWujWJ4pSEsnhdXPfVMX2qBDE4Q/r55y
mrLuejszyCiZjsr3lWmf4jgrhfwQ2f8U/vJxVBgNPkmKlUv2712xhnOoKK30dlbX
7j3oNeDOg/Bk2hNcmJ1vZs/L5NJ2mQPOsS5RjclYX/TTGXT+gx7JnKIxcZDV3jmT
bF6Y1ZEb1rAaZdF0WNjM4cVARWnybvxYTKLxlaCIJRWEsZwS65ZiO09kmr5R5kkv
+/mOjm7MX93uWjN3htpL8zylXM7S2S5Sy3VZJGlK8SXzuPHSMuHcZcHVwFZCjZ9p
E/5auy7EW13D
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org