Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3234203d3e20323636323630.roa
File:                     3139322e3134302e38382e302f32322d3234203d3e20323636323630.roa (raw, json)
Hash identifier:          XsMY1IpUCRg01bytbQnauw+rImwtv3WVGpAF0MQRvdI=
Subject key identifier:   A8:6B:7E:2D:BD:E1:9A:E3:CD:2C:73:81:D2:93:C0:96:B8:38:12:5D
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       58CDF5C4271A30AB9B4DC80DFEBC12888FF8024A
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3234203d3e20323636323630.roa
Signing time:             Wed 18 Oct 2023 17:42:43 +0000
ROA not before:           Wed 18 Oct 2023 17:37:43 +0000
ROA not after:            Wed 16 Oct 2024 17:42:43 +0000
asID:                     266260
IP address blocks:        192.140.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cd:f5:c4:27:1a:30:ab:9b:4d:c8:0d:fe:bc:12:88:8f:f8:02:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Oct 18 17:37:43 2023 GMT
            Not After : Oct 16 17:42:43 2024 GMT
        Subject: CN=A86B7E2DBDE19AE3CD2C7381D293C096B838125D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:dc:e8:38:b5:c0:5c:b1:9b:49:89:af:41:
                    ab:65:d3:6e:30:7f:a0:4f:0f:5a:10:52:9c:59:1e:
                    5a:50:7f:f7:79:45:b0:3b:34:f5:45:5c:89:dd:bb:
                    bf:09:99:da:38:a4:52:70:47:a8:11:e4:85:d9:78:
                    78:4a:9e:78:d7:8b:60:29:9f:ef:04:5f:50:e4:fa:
                    ca:50:47:ce:fa:3c:f4:e3:d0:10:0b:04:83:72:c7:
                    a8:1e:96:86:58:cd:ea:5c:3c:fd:7f:f1:8c:f0:8c:
                    4e:fc:92:72:c7:7f:1f:c9:63:f8:69:75:a8:04:a0:
                    63:4f:62:ad:fe:f6:0d:1b:41:64:1f:e7:23:dc:be:
                    f4:b0:6d:5a:d2:a0:bd:5e:a3:69:a7:31:76:4a:79:
                    83:ae:b1:4c:83:fd:a5:51:61:2b:3d:70:29:b9:35:
                    cb:2f:13:cf:ad:5e:57:05:3d:c6:96:3a:e3:a2:6c:
                    70:89:83:4f:53:2a:c9:cd:f8:52:ef:95:fa:be:fb:
                    83:8d:98:95:57:3d:98:04:0f:53:66:f9:37:72:db:
                    5f:52:9b:7e:5f:23:9c:79:e2:6f:1f:45:4b:b4:17:
                    82:42:77:56:2b:68:b5:4b:ef:1a:11:60:70:43:36:
                    ad:72:cb:f3:d5:5c:4c:27:49:c6:8d:95:04:7e:47:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:7E:2D:BD:E1:9A:E3:CD:2C:73:81:D2:93:C0:96:B8:38:12:5D
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3234203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:fd:f1:88:26:e4:ae:e8:73:51:25:4a:0c:9a:89:3a:32:
         30:8a:15:0c:fc:af:ec:8c:88:2f:14:64:80:8f:2c:27:22:dc:
         bb:46:74:8e:21:8c:1e:69:a5:48:37:cb:d6:8a:20:f3:9a:11:
         3d:b2:e1:b3:49:e8:d2:c8:b5:84:33:ff:6f:f6:ae:0d:1f:4d:
         fe:73:9d:8b:a8:a4:81:81:b6:32:2d:d9:75:38:f4:44:45:30:
         47:fa:6c:4a:2e:e7:20:1d:74:0a:9f:5e:a6:d0:62:e9:a9:46:
         64:6c:7b:63:a4:8b:83:3f:5f:52:50:ca:d1:e9:1b:5e:d6:3f:
         3a:04:39:ee:59:18:99:5b:b5:5c:98:50:54:56:4c:ab:98:30:
         4b:2b:1c:69:ef:34:b2:2c:3e:ee:76:4f:2b:d2:55:35:9c:53:
         d9:12:a1:95:94:42:5f:4a:11:e9:0f:68:77:8a:fc:80:51:6f:
         5c:3e:4c:20:7c:30:4e:55:42:1d:11:29:bd:54:c0:4e:96:75:
         0c:5a:cd:35:ce:83:4d:b6:e7:a9:81:eb:01:39:e6:7e:c8:39:
         07:92:46:3c:2e:3a:5b:5d:b7:64:96:5d:73:9d:c2:7b:ae:f8:
         98:24:2c:5a:f1:d2:03:8c:74:cf:88:bb:de:1a:29:ba:60:0f:
         cb:d1:13:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWM31xCcaMKubTcgN/rwSiI/4AkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVFRDgyRTI3MUU1OUEzMjg0ODUxRkRDMkREN0RERTkw
NzQ5QkM2NzAeFw0yMzEwMTgxNzM3NDNaFw0yNDEwMTYxNzQyNDNaMDMxMTAvBgNV
BAMTKEE4NkI3RTJEQkRFMTlBRTNDRDJDNzM4MUQyOTNDMDk2QjgzODEyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaydzoOLXAXLGbSYmvQatl024w
f6BPD1oQUpxZHlpQf/d5RbA7NPVFXIndu78Jmdo4pFJwR6gR5IXZeHhKnnjXi2Ap
n+8EX1Dk+spQR876PPTj0BALBINyx6geloZYzepcPP1/8YzwjE78knLHfx/JY/hp
dagEoGNPYq3+9g0bQWQf5yPcvvSwbVrSoL1eo2mnMXZKeYOusUyD/aVRYSs9cCm5
NcsvE8+tXlcFPcaWOuOibHCJg09TKsnN+FLvlfq++4ONmJVXPZgED1Nm+Tdy219S
m35fI5x54m8fRUu0F4JCd1YraLVL7xoRYHBDNq1yy/PVXEwnScaNlQR+R8XfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqGt+Lb3hmuPNLHOB0pPAlrg4El0wHwYDVR0j
BBgwFoAUvu2C4nHlmjKEhR/cLdfd6QdJvGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFAxaDZ1R25IblhDQ002UzNETHlaUE1ScWJmamNwU0dxNkRHV0FqOVp6
cUsvMC9CRUVEODJFMjcxRTU5QTMyODQ4NTFGREMyREQ3RERFOTA3NDlCQzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFRUQ4MkUyNzFFNTlBMzI4
NDg1MUZEQzJERDdEREU5MDc0OUJDNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQMWg2dUduSG5YQ0NNNlMzREx5WlBNUnFiZmpjcFNHcTZER1dBajlaenFLLzAv
MzEzOTMyMmUzMTM0MzAyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjFgwDQYJKoZIhvcNAQELBQADggEBAEz//fGI
JuSu6HNRJUoMmok6MjCKFQz8r+yMiC8UZICPLCci3LtGdI4hjB5ppUg3y9aKIPOa
ET2y4bNJ6NLItYQz/2/2rg0fTf5znYuopIGBtjIt2XU49ERFMEf6bEou5yAddAqf
XqbQYumpRmRse2Oki4M/X1JQytHpG17WPzoEOe5ZGJlbtVyYUFRWTKuYMEsrHGnv
NLIsPu52TyvSVTWcU9kSoZWUQl9KEekPaHeK/IBRb1w+TCB8ME5VQh0RKb1UwE6W
dQxazTXOg02256mB6wE55n7IOQeSRjwuOltdt2SWXXOdwnuu+JgkLFrx0gOMdM+I
u94aKbpgD8vREyA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org