Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39302e302f32342d3234203d3e20323636323630.roa
File:                     3139322e3134302e39302e302f32342d3234203d3e20323636323630.roa (raw, json)
Hash identifier:          MgrLG9YtaZwbLSZPgg00vv9sDM4tVMnd/5qPnM7CfzU=
Subject key identifier:   B1:28:05:E9:AE:B0:91:8A:AF:B0:79:A2:8F:55:CE:89:11:72:7E:49
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       05F7E10A7F231B5D9D02AA82CCBF457EE9487CCC
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39302e302f32342d3234203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:38 +0000
ROA not before:           Tue 09 Jan 2024 14:14:38 +0000
ROA not after:            Tue 07 Jan 2025 14:19:38 +0000
asID:                     266260
IP address blocks:        192.140.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f7:e1:0a:7f:23:1b:5d:9d:02:aa:82:cc:bf:45:7e:e9:48:7c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:38 2024 GMT
            Not After : Jan  7 14:19:38 2025 GMT
        Subject: CN=B12805E9AEB0918AAFB079A28F55CE8911727E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:bb:d8:90:42:53:ad:ee:ce:16:83:33:0b:
                    46:3b:68:ae:05:3c:a9:4f:11:fc:85:3d:e3:75:9d:
                    e4:4e:30:d8:e9:d6:6d:90:84:3a:b4:bb:d9:96:ce:
                    85:78:cf:9a:a4:b5:df:87:f7:f4:eb:8f:f5:97:1c:
                    e7:a8:29:54:16:87:d0:18:98:61:11:03:2f:3c:86:
                    4d:16:3e:01:80:5a:94:75:c7:58:35:f0:e7:ee:65:
                    9d:8a:1b:5c:6e:e4:c2:71:20:d3:19:6d:40:46:74:
                    0e:35:85:2f:95:4c:97:9c:cf:eb:f2:93:24:70:16:
                    82:0f:39:4d:a3:c8:cf:7a:cc:70:85:16:a9:ed:54:
                    ec:f6:ad:2c:1a:94:c4:1a:7f:cd:26:d7:18:3d:cd:
                    bf:ba:b3:a7:38:da:b6:27:82:4b:83:a2:3d:4f:ca:
                    0d:8e:e0:91:d5:d5:24:ae:b1:3d:52:98:e7:24:f3:
                    e6:1c:90:df:9c:42:cb:ab:91:2b:4d:0d:f4:91:58:
                    2d:67:5f:95:6b:a0:ca:92:4f:a9:bc:8d:78:58:e4:
                    32:7d:db:39:27:5e:fe:14:f6:4c:39:08:58:e8:1a:
                    48:93:f7:df:f9:c7:ac:3a:a3:9a:50:97:fa:e6:3d:
                    7e:83:21:7e:80:ba:b3:6e:4e:b1:a6:8a:8f:3b:df:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:05:E9:AE:B0:91:8A:AF:B0:79:A2:8F:55:CE:89:11:72:7E:49
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39302e302f32342d3234203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:99:a5:bc:24:0f:98:6f:85:aa:45:9c:2c:0e:5a:83:fa:2e:
         f3:ad:59:ad:dc:c5:00:ac:bc:ac:b8:6e:21:cb:1a:52:eb:c9:
         28:a5:ea:09:21:8f:7a:4e:99:09:1a:8e:97:45:a9:f9:64:f6:
         3d:82:4a:12:00:c4:ab:0b:e3:4c:b9:fb:c4:57:7d:87:b3:26:
         21:53:f2:81:9d:7f:1d:a0:24:68:0c:2c:4b:87:29:30:45:62:
         44:9d:cb:87:d0:c3:98:93:fd:c4:2b:be:cb:ad:e8:93:70:b5:
         c1:28:0e:0a:56:99:71:1d:0d:fd:2c:15:4f:b0:80:1c:fe:ea:
         73:18:50:38:3b:b3:6a:bf:35:48:44:eb:4e:f3:97:36:f8:ca:
         43:3f:4b:15:23:00:4c:59:e6:a5:31:77:20:4a:a2:42:6b:84:
         05:2d:3b:82:80:4e:f7:56:27:26:ef:b6:64:da:a3:9e:96:6a:
         56:5a:7f:af:6d:cf:16:52:41:ec:cb:6d:93:9c:fc:7a:df:1e:
         09:7e:4b:17:60:7a:a1:6e:34:2d:3a:eb:05:cb:9a:e9:80:a0:
         04:7d:97:56:5e:b8:0e:59:bd:ef:1c:29:e6:da:52:f7:5d:14:
         e2:0c:6a:12:e2:eb:f6:9d:00:fa:2e:fe:6e:3e:4d:c7:b9:cd:
         49:67:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:22 2025 by rpki-client