Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32332d3233203d3e20323730333537.roa
File:                     3139302e38392e36342e302f32332d3233203d3e20323730333537.roa (raw, json)
Hash identifier:          ZyjGWj6cS5GOVh6ZpZoyfWNbEoMVGqmNq8NuorTKOQs=
Subject key identifier:   52:69:5B:E6:E4:49:CB:62:8A:02:95:97:4B:20:DF:15:50:9E:51:C2
Certificate issuer:       /CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
Certificate serial:       5270517F4B5C70A1348B0AA1456AFCF7463C4487
Authority key identifier: D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32332d3233203d3e20323730333537.roa
Signing time:             Sat 01 Apr 2023 01:44:26 +0000
ROA not before:           Sat 01 Apr 2023 01:39:26 +0000
ROA not after:            Sat 30 Mar 2024 01:44:26 +0000
asID:                     270357
IP address blocks:        190.89.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:51:7f:4b:5c:70:a1:34:8b:0a:a1:45:6a:fc:f7:46:3c:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
        Validity
            Not Before: Apr  1 01:39:26 2023 GMT
            Not After : Mar 30 01:44:26 2024 GMT
        Subject: CN=52695BE6E449CB628A0295974B20DF15509E51C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:d4:10:63:3e:28:b1:89:86:9f:d6:b2:87:
                    10:1f:17:0a:f3:48:50:0c:fc:5e:6c:07:63:85:2e:
                    0d:0c:a5:65:8e:73:86:5f:0d:7b:77:88:cd:d9:d0:
                    55:7e:ad:41:04:fd:bc:2c:0b:18:ec:20:01:e2:db:
                    35:cb:74:cb:f2:d4:17:2e:2f:27:f9:de:cf:dc:68:
                    77:5f:d2:a5:a5:b5:5a:09:9a:03:4b:60:4f:c7:a9:
                    f2:15:a8:db:b4:c7:1d:13:13:8a:9a:ef:33:fc:17:
                    0d:5f:f7:e1:32:da:07:f5:c3:6e:90:f4:6a:38:66:
                    3b:3c:fb:0c:ee:b5:a7:17:bf:1c:dd:b2:bc:ab:03:
                    82:45:e4:76:a5:9e:3b:74:ec:54:e9:76:e7:b7:2e:
                    54:3d:ef:72:a8:c9:22:cd:99:aa:9b:9a:e1:34:82:
                    23:53:d2:19:11:47:3e:db:f7:84:76:32:f4:87:4c:
                    ba:b8:e6:7c:83:93:79:93:d3:3d:43:8e:8a:87:d6:
                    79:8f:87:ef:b1:da:37:9a:7a:f2:9a:63:02:cb:99:
                    ae:ca:db:1a:46:00:84:da:56:c8:1d:dd:6e:23:2f:
                    04:79:1b:25:01:2b:14:aa:68:55:3f:f1:e8:81:5e:
                    0b:3c:d0:d5:bf:e2:11:57:63:c1:f7:f6:45:af:4d:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:69:5B:E6:E4:49:CB:62:8A:02:95:97:4B:20:DF:15:50:9E:51:C2
            X509v3 Authority Key Identifier:
                keyid:D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36342e302f32332d3233203d3e20323730333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:e0:56:7c:f9:af:f3:4b:95:14:ee:eb:b3:fc:51:cf:13:0b:
         08:c4:a7:b2:76:ea:07:aa:9b:1b:a2:5c:7f:1d:46:44:38:57:
         a5:3d:6b:d7:3d:31:77:9d:37:b7:9c:66:aa:37:4e:11:8e:72:
         73:84:a1:3d:49:ac:ec:a9:b6:91:af:2b:b1:2a:01:fe:27:d9:
         65:30:6a:36:6c:05:bd:10:f1:56:5e:76:12:35:ef:da:8e:c1:
         39:b5:4c:9a:a9:fb:d5:c2:f5:4e:98:ea:50:88:0e:15:e1:f1:
         83:df:d2:55:0f:dd:7f:05:95:62:d2:df:0e:4a:9f:0c:7d:91:
         16:37:90:48:04:d1:0b:65:5d:2e:df:d1:7a:b7:c9:d9:09:bb:
         61:98:cd:de:cb:57:12:89:82:8c:a8:a3:3e:4b:fd:dc:62:b3:
         1e:08:85:34:36:ba:57:ff:c7:9a:ed:54:1c:f1:b2:be:cf:ff:
         71:ae:3e:4e:08:fc:14:a6:5a:b7:9a:29:b6:25:2c:6a:90:0c:
         02:b7:3f:7c:ee:e3:9b:cf:60:27:d3:bf:f9:b2:dc:01:75:65:
         34:e7:18:0b:c1:21:ac:8a:5a:f5:93:e5:57:1f:10:36:b5:01:
         4a:9f:18:ec:db:ed:2a:43:6c:6f:08:b3:59:7b:76:23:8c:21:
         20:f4:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org