Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38392e302f32342d3234203d3e20323636323630.roa
File:                     3139322e3134302e38392e302f32342d3234203d3e20323636323630.roa (raw, json)
Hash identifier:          70JN3ME4aY2kV+PgH2MvpmMwKLjtzaekgHFdfrHu6+8=
Subject key identifier:   62:A3:1A:D6:F1:97:65:E0:EA:98:DD:BD:A7:07:3F:40:2E:36:CF:97
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       27883CFD854E92B03BEA2A7DF15775638F9A668E
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38392e302f32342d3234203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:34 +0000
ROA not before:           Tue 09 Jan 2024 14:14:34 +0000
ROA not after:            Tue 07 Jan 2025 14:19:34 +0000
asID:                     266260
IP address blocks:        192.140.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:88:3c:fd:85:4e:92:b0:3b:ea:2a:7d:f1:57:75:63:8f:9a:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:34 2024 GMT
            Not After : Jan  7 14:19:34 2025 GMT
        Subject: CN=62A31AD6F19765E0EA98DDBDA7073F402E36CF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:68:26:8e:3d:ef:7e:94:64:f0:24:06:b9:
                    78:52:f5:e7:fd:ca:93:23:3d:00:62:bd:f7:d3:92:
                    c1:00:ff:08:bb:da:73:18:23:5d:a6:20:53:ff:f0:
                    a6:c5:88:d1:0f:d9:28:9f:f5:38:b2:30:e6:07:a3:
                    29:cf:a4:39:38:8c:7b:34:ed:fa:db:2d:cc:33:69:
                    a6:21:10:c7:c9:bd:0d:38:63:55:4f:19:35:50:9b:
                    a2:41:b4:39:2b:97:f9:73:38:7d:5d:b1:ec:50:09:
                    e3:74:bc:6b:cb:6e:94:45:dc:1b:a9:d3:a8:ec:d3:
                    9b:11:e2:8c:9e:40:57:2e:ce:85:05:63:97:7e:28:
                    bb:38:1f:c8:cf:ef:c0:28:cf:80:b7:96:6b:15:fb:
                    d4:6b:ba:2d:a9:6f:a9:e3:b9:f2:13:a0:fb:cb:d8:
                    18:9e:7d:5f:64:c0:2c:b0:fc:38:fb:94:f2:6d:8a:
                    03:db:26:7d:46:ac:84:17:83:5e:b0:da:85:d9:e2:
                    8a:0e:65:80:85:9d:50:19:82:9d:ef:cc:45:12:ac:
                    a0:60:c2:fa:55:fb:f6:e8:c7:8b:5a:51:1c:64:b1:
                    7f:c2:76:a5:4c:9b:3a:bf:e8:e5:84:4f:d9:62:5e:
                    48:b2:83:1a:0f:3e:88:27:dc:ac:ab:c3:57:7c:e2:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:1A:D6:F1:97:65:E0:EA:98:DD:BD:A7:07:3F:40:2E:36:CF:97
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38392e302f32342d3234203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:95:3e:08:65:64:ea:79:ae:93:4f:fa:52:aa:be:ef:a3:9f:
         c1:f8:a0:e1:a1:de:cb:52:b9:9b:2d:5a:0f:ae:e2:44:62:6c:
         a3:ea:2b:df:e6:b2:6d:1b:ef:83:d9:c1:82:e1:25:55:41:ca:
         46:4b:2b:30:6d:f3:f9:5a:d9:d5:8f:41:99:8e:1b:03:09:80:
         d5:78:8f:09:40:ae:cf:31:a5:d8:83:f4:ce:47:db:7b:51:4a:
         be:d1:ff:e7:40:12:f6:dc:a3:87:b5:4c:7a:ed:9c:2d:39:83:
         cb:13:4e:b1:b5:d6:f9:94:59:84:c5:24:7d:b2:62:f2:59:a4:
         b5:f4:57:ba:30:96:e2:69:57:d3:4f:96:99:a3:11:2b:64:74:
         de:7d:85:bc:83:78:65:97:9b:d9:41:3b:f9:74:b8:64:7f:8e:
         b5:84:10:2c:6a:a7:ab:70:5d:8e:6e:6f:72:16:48:95:82:3d:
         62:26:46:1a:49:13:11:16:39:5b:03:01:e2:f5:f0:5e:fd:af:
         59:43:b4:97:9d:a5:c0:86:d1:90:ca:e9:33:90:23:74:59:46:
         8f:92:32:b1:39:ce:21:40:4c:13:d9:62:8a:69:ac:c3:3d:00:
         62:64:ef:84:39:db:ad:5f:d8:dc:b9:b8:c9:fa:b1:d2:98:ea:
         d9:fa:b1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org