Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32342d3234203d3e20323636323630.roa
File:                     3139322e3134302e38382e302f32342d3234203d3e20323636323630.roa (raw, json)
Hash identifier:          dam7SGf+VbEAk+PsAgaWFrIRE7Kj1hgvZts2OFeehn0=
Subject key identifier:   4C:B4:C0:F9:8D:4C:44:5A:32:B4:93:7F:DD:CF:FD:BB:8F:EC:51:A4
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       78C27D7F939AB1376C39FA5550BA76E6D31AD746
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32342d3234203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:31 +0000
ROA not before:           Tue 09 Jan 2024 14:14:31 +0000
ROA not after:            Tue 07 Jan 2025 14:19:31 +0000
asID:                     266260
IP address blocks:        192.140.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c2:7d:7f:93:9a:b1:37:6c:39:fa:55:50:ba:76:e6:d3:1a:d7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:31 2024 GMT
            Not After : Jan  7 14:19:31 2025 GMT
        Subject: CN=4CB4C0F98D4C445A32B4937FDDCFFDBB8FEC51A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:2d:c1:f9:98:fc:e3:1f:2e:61:21:20:98:
                    30:cb:1c:29:f4:7e:ef:b3:a8:b7:13:3c:68:a4:a0:
                    c3:a3:3b:4c:2d:c5:b2:67:de:aa:32:c8:65:9b:eb:
                    e3:d7:78:43:cd:53:40:c5:ea:a7:4b:97:52:a3:cf:
                    d9:a2:18:f0:7d:e6:b3:2e:d7:81:c2:e9:91:04:5e:
                    c7:3d:46:72:2e:12:cb:ce:51:e3:46:b7:c5:c2:08:
                    93:89:99:6d:b1:c5:93:03:a7:33:a9:65:ee:f0:24:
                    b8:7f:cd:f8:5e:8c:b9:c7:64:e7:4e:ba:ca:a7:2f:
                    15:17:cd:7f:99:e2:87:1a:d2:63:27:a2:e8:fc:8f:
                    36:a7:64:9a:fa:c9:ae:df:33:37:b9:95:18:0e:fa:
                    6d:da:36:5b:4e:a1:5c:ad:4a:00:cb:6c:92:6c:f2:
                    82:06:f4:66:04:df:1b:e6:9a:06:cb:df:89:56:f8:
                    4b:ca:57:c6:a7:27:51:5b:93:7f:95:f3:2a:29:fd:
                    ee:83:39:00:00:bd:6e:fa:b3:1b:c4:07:d2:7c:82:
                    cb:34:4f:ee:74:f6:43:66:f9:41:4a:7d:9f:42:2d:
                    e6:a7:4a:31:53:72:28:43:2a:86:15:da:aa:f8:94:
                    7d:82:96:39:72:57:31:74:84:c7:9e:7b:03:a4:55:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B4:C0:F9:8D:4C:44:5A:32:B4:93:7F:DD:CF:FD:BB:8F:EC:51:A4
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32342d3234203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:55:9a:15:f0:55:e8:5f:57:25:45:3c:a0:4f:0b:41:49:
         5a:b7:c3:dd:17:2a:39:b2:17:78:05:0a:c1:c9:f3:00:5c:65:
         ce:d9:de:df:3b:5e:59:7a:ec:2f:0a:85:dd:f5:b2:00:a2:96:
         80:83:ac:f1:b2:5e:13:92:2d:b9:b5:71:d7:02:6e:0f:a7:1f:
         97:74:07:10:f9:39:4f:1c:9f:9a:97:83:d6:9a:d6:14:86:5e:
         fa:18:79:50:c4:34:a9:7c:6d:9f:27:4c:a7:7d:62:d4:5f:b9:
         78:28:26:80:f2:10:34:37:2d:bb:78:9d:07:33:88:01:c3:29:
         7f:7d:ce:80:88:ca:72:4b:fc:4b:ce:a5:ae:4b:24:b4:e6:d2:
         c4:6e:53:7c:6e:bb:18:1e:a5:25:cf:cf:47:fc:26:0b:3b:df:
         13:94:ff:5a:fc:a9:2a:ae:aa:d4:d4:1a:08:1f:7e:28:df:a0:
         b1:e5:36:58:1b:d1:1e:b5:6d:e8:ca:97:20:a3:63:0c:be:b9:
         35:30:a3:fd:dc:4c:35:88:d2:a1:80:7a:4e:e1:91:c1:86:c8:
         3b:65:e8:37:69:f3:5e:69:27:72:18:71:24:19:53:f8:ae:b6:
         75:88:3c:58:ba:2c:ea:cd:25:8f:a3:6d:f3:4c:7e:af:f9:86:
         5b:50:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org