Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36362e302f32332d3233203d3e20323730333537.roa
File:                     3139302e38392e36362e302f32332d3233203d3e20323730333537.roa (raw, json)
Hash identifier:          5fHMYCMbTe0lFqwhfZu8/YPfxm5YoPIhc4fsOQ6jq2Q=
Subject key identifier:   11:89:80:57:3C:45:0A:AA:5D:04:7F:E9:E1:7C:CE:A7:6C:FF:66:F6
Certificate issuer:       /CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
Certificate serial:       323FF1CC0EEBE13416616A9CADFF6048B4E616C8
Authority key identifier: D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36362e302f32332d3233203d3e20323730333537.roa
Signing time:             Sat 01 Apr 2023 01:50:39 +0000
ROA not before:           Sat 01 Apr 2023 01:45:39 +0000
ROA not after:            Sat 30 Mar 2024 01:50:39 +0000
asID:                     270357
IP address blocks:        190.89.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3f:f1:cc:0e:eb:e1:34:16:61:6a:9c:ad:ff:60:48:b4:e6:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0007A315A719A6DDE741D79D0E9C1C81EE35566
        Validity
            Not Before: Apr  1 01:45:39 2023 GMT
            Not After : Mar 30 01:50:39 2024 GMT
        Subject: CN=118980573C450AAA5D047FE9E17CCEA76CFF66F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:91:06:3b:f1:b1:bf:69:86:47:2a:d0:f9:
                    a8:3d:7e:8e:0d:8b:5f:84:7e:ed:b7:fe:21:c2:a9:
                    63:d2:fa:19:56:46:f6:8a:04:1f:52:31:8e:1a:c6:
                    7b:1b:f3:77:ba:27:8c:66:ed:1a:1d:a5:39:6b:e8:
                    0a:be:bc:a4:e0:44:94:49:4a:cd:0d:33:34:67:38:
                    c0:ff:1c:da:7c:1e:7c:bc:fe:25:c7:fc:38:4e:d5:
                    23:42:5c:72:60:15:e1:61:de:8f:67:40:0a:a9:69:
                    d6:e3:f7:20:b9:93:0d:d7:00:5f:24:86:09:35:ef:
                    8b:e3:43:b2:4f:f7:ff:4a:b2:1b:ee:32:62:a5:b6:
                    52:5c:31:42:35:79:51:fb:61:e0:ce:68:5b:18:77:
                    a2:bc:f5:30:ce:3c:d6:1d:96:91:5c:9d:08:e2:a9:
                    7c:84:a2:4f:21:f9:96:81:f0:aa:ee:51:58:75:83:
                    c9:83:4c:eb:3c:02:4c:74:1a:6f:5d:3e:3c:16:93:
                    ff:46:80:18:dd:15:e2:50:82:dc:ba:35:f6:4f:fb:
                    cc:7f:1f:05:df:56:37:16:fb:d9:4f:f9:97:de:d9:
                    9e:91:b2:8c:d8:61:5a:f4:fa:45:8f:d2:70:bd:3b:
                    5b:a0:aa:5f:35:ed:8d:a8:e6:a2:56:d2:af:64:2e:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:80:57:3C:45:0A:AA:5D:04:7F:E9:E1:7C:CE:A7:6C:FF:66:F6
            X509v3 Authority Key Identifier:
                keyid:D0:00:7A:31:5A:71:9A:6D:DE:74:1D:79:D0:E9:C1:C8:1E:E3:55:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0007A315A719A6DDE741D79D0E9C1C81EE35566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMMakkBJAeS3g4fC4AL9a6ZJgxMZmEBusYFZEKnJLYCY/0/3139302e38392e36362e302f32332d3233203d3e20323730333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:06:a0:76:12:e5:46:5e:16:80:8e:3d:26:1d:1d:cb:b9:4e:
         11:1b:4b:45:1c:e6:69:7a:86:c2:44:b3:31:18:4f:89:6c:cc:
         af:e0:31:65:c0:04:f6:db:8c:2f:0c:70:f6:be:b5:88:c2:33:
         25:42:21:01:a0:4f:e5:59:d9:1f:a4:d3:9c:2a:62:c3:f4:16:
         f6:e8:34:2e:74:2b:df:b5:e0:92:6b:c5:e4:4c:ef:17:f2:8b:
         14:ee:30:5d:32:44:eb:68:38:42:68:aa:cd:7e:31:d0:63:11:
         39:9c:a2:cc:7a:d4:74:eb:ec:6b:1e:20:97:96:fd:d1:31:04:
         69:89:b3:31:ff:48:ee:5b:a3:f8:dc:6c:c1:de:58:5d:0d:e0:
         7b:a6:21:dc:51:82:71:e4:50:d7:7c:00:8e:ed:1c:fb:1f:dd:
         ed:57:11:66:9c:1f:0e:20:e7:c1:96:c8:9a:a4:f5:53:a0:d4:
         af:43:ec:ef:4c:a7:b0:ba:ac:5c:37:c5:d6:60:b0:59:57:62:
         eb:cf:7a:7f:8c:6c:38:50:62:10:03:aa:3a:e4:cd:d9:32:d2:
         69:6e:3d:7a:d6:3a:38:76:4e:22:54:f8:04:32:68:bd:08:b0:
         84:33:78:13:5c:3b:31:81:4d:59:a0:8c:c4:d8:19:94:f7:8e:
         09:98:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org