Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32322d3232203d3e20323730333537.roa
File:                     3139302e38392e36342e302f32322d3232203d3e20323730333537.roa (raw, json)
Hash identifier:          DjeauFvi6JsSwLLFRFtHHFB3bBwiGhUsZTzpOd089mc=
Subject key identifier:   B4:AD:DB:56:FE:D2:5C:C3:2A:EA:1D:DD:92:F8:79:9A:AA:ED:0C:CC
Certificate issuer:       /CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
Certificate serial:       6B4039A016882196A9923292FEE93224C48A3478
Authority key identifier: D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32322d3232203d3e20323730333537.roa
Signing time:             Sat 01 Apr 2023 01:44:26 +0000
ROA not before:           Sat 01 Apr 2023 01:39:26 +0000
ROA not after:            Sat 30 Mar 2024 01:44:26 +0000
asID:                     270357
IP address blocks:        190.89.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:40:39:a0:16:88:21:96:a9:92:32:92:fe:e9:32:24:c4:8a:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
        Validity
            Not Before: Apr  1 01:39:26 2023 GMT
            Not After : Mar 30 01:44:26 2024 GMT
        Subject: CN=B4ADDB56FED25CC32AEA1DDD92F8799AAAED0CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:aa:6a:16:4e:f1:ee:34:fa:16:30:45:5e:
                    b5:8c:e7:7a:2d:a1:55:fe:44:98:8f:33:1a:e0:58:
                    1b:be:7f:22:80:47:be:f3:93:32:3f:95:ce:22:8b:
                    d6:77:0d:93:16:27:19:44:03:d3:a2:ce:4e:63:ae:
                    eb:20:8c:da:c6:de:81:bf:17:fc:c1:1a:a7:06:0a:
                    25:18:c2:f0:dc:7c:de:1f:ff:c2:70:93:8a:30:53:
                    ed:45:1d:11:9b:55:7e:f4:9f:79:4d:fb:83:6e:75:
                    c3:b5:c1:46:17:cc:fb:ea:fd:f9:06:27:d6:97:af:
                    07:92:d4:2e:37:a1:a6:52:ed:ce:44:17:02:18:61:
                    d5:d2:49:32:46:0a:0b:61:9e:52:23:6f:d2:29:51:
                    b4:ad:c5:76:42:08:27:1b:22:cd:3c:0e:04:f9:be:
                    14:54:6c:8f:fd:3c:e0:b6:66:5b:83:10:f9:a4:aa:
                    b8:6b:cb:64:55:26:de:01:a7:ce:5c:68:80:47:75:
                    b3:88:65:5a:f2:bc:fe:d8:d7:9e:4b:b5:20:4a:d7:
                    0b:88:10:f2:3c:88:ad:8b:7f:fd:19:81:0e:35:6b:
                    1e:67:a7:7a:82:39:63:ee:15:c6:0a:55:74:e4:52:
                    e5:af:35:b2:35:ee:7b:88:bb:3d:b9:48:93:84:49:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:DB:56:FE:D2:5C:C3:2A:EA:1D:DD:92:F8:79:9A:AA:ED:0C:CC
            X509v3 Authority Key Identifier:
                keyid:D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32322d3232203d3e20323730333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:9b:de:c6:74:c3:eb:e3:25:79:a3:f4:1a:fb:f4:ed:f6:cf:
         26:17:fb:fa:e9:08:4a:f3:a1:06:61:11:3c:2e:a5:40:d4:05:
         fa:95:4f:3d:50:6a:99:36:56:0a:3c:a8:47:77:c6:e9:ec:9f:
         ed:1f:55:85:49:75:8f:63:20:64:94:b4:0a:60:ea:f2:0a:23:
         15:01:76:e3:8c:af:3b:50:1a:1a:47:78:93:84:c0:e8:45:24:
         50:8d:fb:e2:51:1f:62:a8:51:ba:fd:d9:c2:94:9c:f2:b6:10:
         92:fe:e2:61:9a:09:62:c7:98:13:20:7a:d7:59:dc:dd:94:70:
         a4:fb:56:d5:31:e4:ca:aa:c8:05:d1:6e:38:26:64:56:ec:41:
         5a:56:17:69:aa:6d:16:7d:7e:3e:ae:37:56:b1:06:9a:8f:07:
         0e:2b:b9:dc:d3:2c:46:2c:91:63:1a:29:21:cc:0e:6f:5f:4c:
         6b:e2:10:3e:25:c5:87:dd:a1:75:f8:ec:be:dc:a4:32:de:62:
         27:eb:ef:73:b1:79:43:f1:96:2a:93:84:d8:91:2f:cd:a6:f1:
         f4:ba:1e:d8:5b:a0:b9:89:91:1a:ed:8b:31:00:3f:76:9f:b6:
         97:3b:91:6e:dd:3c:c6:6a:c1:91:26:1d:65:76:68:5c:12:37:
         6e:b4:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org