Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36352e302f32342d3234203d3e20323730333537.roa
File:                     3139302e38392e36352e302f32342d3234203d3e20323730333537.roa (raw, json)
Hash identifier:          oPJ1lw27QstzaVOtex97R/++Ox/yXimMBSI7l0kxUhw=
Subject key identifier:   06:43:44:7E:B1:44:B8:36:B4:88:54:53:12:18:A8:6A:BF:93:DC:DD
Certificate issuer:       /CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
Certificate serial:       743D377A9585A08E658DD4484ED04E1C7C5A54C6
Authority key identifier: D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36352e302f32342d3234203d3e20323730333537.roa
Signing time:             Sat 01 Apr 2023 01:49:55 +0000
ROA not before:           Sat 01 Apr 2023 01:44:55 +0000
ROA not after:            Sat 30 Mar 2024 01:49:55 +0000
asID:                     270357
IP address blocks:        190.89.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3d:37:7a:95:85:a0:8e:65:8d:d4:48:4e:d0:4e:1c:7c:5a:54:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
        Validity
            Not Before: Apr  1 01:44:55 2023 GMT
            Not After : Mar 30 01:49:55 2024 GMT
        Subject: CN=0643447EB144B836B48854531218A86ABF93DCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:66:3e:ba:17:ed:b7:1c:26:13:41:e5:df:
                    ee:39:92:9d:69:5c:15:e6:38:46:2c:1a:1b:72:d7:
                    26:1f:2d:ce:ef:cb:40:ed:45:de:42:c3:79:ec:8d:
                    52:5c:32:40:1e:73:6e:d1:65:eb:43:31:84:9a:0c:
                    92:33:ef:a9:92:7b:67:27:aa:16:a0:eb:f9:12:4d:
                    9f:9a:49:07:a5:73:c8:3e:a2:e9:c3:39:35:d0:84:
                    13:9b:94:27:19:e9:5f:65:90:7c:c5:88:34:a4:ac:
                    f0:a6:f5:95:28:c5:77:4b:fe:cc:41:a6:29:35:de:
                    c2:1f:c8:9b:b1:02:01:82:c6:8f:72:4e:7b:88:1b:
                    04:53:da:a8:32:c9:a7:df:08:49:44:58:e7:8b:e1:
                    6e:4d:8a:70:42:f2:7d:b5:4b:91:46:72:5f:92:9f:
                    01:3c:f5:93:f3:c6:7f:e8:30:bd:0f:5c:c1:61:c3:
                    1c:ea:78:06:ef:b8:d8:41:3b:76:d0:15:0a:06:72:
                    fb:ec:5d:de:ef:66:3c:42:7f:2f:f6:91:7a:ef:ff:
                    27:48:2d:70:e7:ee:1b:46:6e:44:56:c9:85:e2:83:
                    c4:57:4b:23:06:79:9f:52:2d:6a:3c:53:34:20:a7:
                    0b:ef:82:44:82:62:0a:f4:68:ae:bf:35:4e:d0:68:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:44:7E:B1:44:B8:36:B4:88:54:53:12:18:A8:6A:BF:93:DC:DD
            X509v3 Authority Key Identifier:
                keyid:D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36352e302f32342d3234203d3e20323730333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ac:33:f0:ac:d3:f8:c3:8f:25:49:17:fd:92:78:cb:86:1c:
         49:83:e6:d4:e8:09:19:0b:cd:3f:92:c9:ef:9a:d7:01:1a:7f:
         d3:b5:75:64:9d:15:e7:1d:37:bc:70:92:6a:fa:40:eb:eb:4e:
         e6:d1:99:70:36:d3:53:32:37:ec:1f:e1:4a:66:90:96:5b:3c:
         aa:6e:b8:f3:dd:97:df:a2:2c:ce:c9:c5:fb:a9:d8:c6:81:f8:
         a2:8b:bd:60:73:c7:12:08:e4:92:61:79:c3:63:13:f0:4f:73:
         df:ac:de:84:4b:a2:91:3a:ca:f2:e2:73:bc:e8:7a:2a:4c:e3:
         13:9d:00:65:1f:8b:aa:a4:d2:fc:47:1a:62:f1:e4:32:65:1b:
         b1:66:0e:d2:dd:37:16:28:c5:e8:86:8f:32:e3:9b:65:17:a1:
         5b:24:15:5a:89:2e:b8:90:c1:8f:a4:5a:83:82:8b:e1:b3:31:
         e8:e9:d9:82:64:1b:d3:38:a4:ce:fa:5b:6a:73:0e:2e:d6:9f:
         96:d4:26:28:94:2d:23:14:80:0a:06:a1:55:0d:ad:65:13:89:
         cd:63:a5:23:1e:ed:6d:29:47:66:e6:d2:b1:cd:db:e7:8c:a0:
         68:10:bb:71:5e:fa:0f:0f:7e:c5:45:bf:6b:17:1d:52:3b:a0:
         46:73:db:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdD03epWFoI5ljdRITtBOHHxaVMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwMDdBMzE1QTcxOUE2RERFNzQxRDc5RDBFOUMxQzgx
RUUzNTU2NjAeFw0yMzA0MDEwMTQ0NTVaFw0yNDAzMzAwMTQ5NTVaMDMxMTAvBgNV
BAMTKDA2NDM0NDdFQjE0NEI4MzZCNDg4NTQ1MzEyMThBODZBQkY5M0RDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYmY+uhfttxwmE0Hl3+45kp1p
XBXmOEYsGhty1yYfLc7vy0DtRd5Cw3nsjVJcMkAec27RZetDMYSaDJIz76mSe2cn
qhag6/kSTZ+aSQelc8g+ounDOTXQhBOblCcZ6V9lkHzFiDSkrPCm9ZUoxXdL/sxB
pik13sIfyJuxAgGCxo9yTnuIGwRT2qgyyaffCElEWOeL4W5NinBC8n21S5FGcl+S
nwE89ZPzxn/oML0PXMFhwxzqeAbvuNhBO3bQFQoGcvvsXd7vZjxCfy/2kXrv/ydI
LXDn7htGbkRWyYXig8RXSyMGeZ9SLWo8UzQgpwvvgkSCYgr0aK6/NU7QaK6xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBkNEfrFEuDa0iFRTEhioar+T3N0wHwYDVR0j
BBgwFoAU0AB6MVpxmm3edB150OnByB7jVWYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1NYWtrQkpBZVMzZzRmQzRBTDlhNlpKZ3hNWm1FQnVzWUZaRUtuSkxZ
Q1kvMC9EMDAwN0EzMTVBNzE5QTZEREU3NDFENzlEMEU5QzFDODFFRTM1NTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMDA3QTMxNUE3MTlBNkRE
RTc0MUQ3OUQwRTlDMUM4MUVFMzU1NjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTWFra0JKQWVTM2c0ZkM0QUw5YTZaSmd4TVptRUJ1c1lGWkVLbkpMWUNZLzAv
MzEzOTMwMmUzODM5MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvllBMA0GCSqGSIb3DQEBCwUAA4IBAQDCrDPwrNP4
w48lSRf9knjLhhxJg+bU6AkZC80/ksnvmtcBGn/TtXVknRXnHTe8cJJq+kDr607m
0ZlwNtNTMjfsH+FKZpCWWzyqbrjz3ZffoizOycX7qdjGgfiii71gc8cSCOSSYXnD
YxPwT3PfrN6ES6KROsry4nO86HoqTOMTnQBlH4uqpNL8Rxpi8eQyZRuxZg7S3TcW
KMXoho8y45tlF6FbJBVaiS64kMGPpFqDgovhszHo6dmCZBvTOKTO+ltqcw4u1p+W
1CYolC0jFIAKBqFVDa1lE4nNY6UjHu1tKUdm5tKxzdvnjKBoELtxXvoPD37FRb9r
Fx1SO6BGc9tg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org