Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39312e302f32342d3234203d3e20323636323630.roa
File:                     3139322e3134302e39312e302f32342d3234203d3e20323636323630.roa (raw, json)
Hash identifier:          xPckCtTZOz6ipD/tLIlcbGBBaWA0oPriIA5Wjb4REKM=
Subject key identifier:   50:61:67:83:9A:AA:3A:65:5A:B0:BF:2A:99:37:7C:F0:E9:D4:9F:81
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       A75DD881568A8E735EE84E80F852967EA7CA31
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39312e302f32342d3234203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:18 +0000
ROA not before:           Tue 09 Jan 2024 14:14:18 +0000
ROA not after:            Tue 07 Jan 2025 14:19:18 +0000
asID:                     266260
IP address blocks:        192.140.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:5d:d8:81:56:8a:8e:73:5e:e8:4e:80:f8:52:96:7e:a7:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:18 2024 GMT
            Not After : Jan  7 14:19:18 2025 GMT
        Subject: CN=506167839AAA3A655AB0BF2A99377CF0E9D49F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:53:b6:3c:3b:ee:28:c4:da:71:79:63:15:
                    07:06:83:94:ad:8c:70:df:f5:f1:8b:0a:c1:1c:28:
                    f2:7d:9d:ea:51:b7:84:fb:48:7d:7a:bb:73:e5:9b:
                    a2:ee:b2:8c:b7:76:4e:e7:05:1d:aa:07:aa:13:77:
                    62:84:56:e6:db:69:12:de:3c:09:58:95:af:79:4a:
                    a5:4b:57:d6:52:2f:54:5e:c9:7e:e3:fe:65:7e:ca:
                    48:4a:4f:9e:3e:bc:a7:6c:7e:e8:f7:8c:ed:e0:32:
                    b6:fc:4b:e6:c9:f5:a7:5f:92:d9:bb:7a:71:39:73:
                    2d:2b:44:8e:53:86:ed:13:88:e5:bd:26:79:0f:0a:
                    ad:cb:36:e9:47:b7:c1:d7:17:86:66:77:6f:11:de:
                    0f:0f:ca:75:37:49:9b:fd:a7:a5:d0:37:00:bb:83:
                    99:25:16:df:82:c4:be:48:9c:72:37:45:bb:8e:e4:
                    02:bd:6a:88:b4:5f:71:b5:bb:c0:fd:68:7e:09:03:
                    18:5d:dd:1e:30:44:c7:ea:b1:56:62:dd:41:5e:26:
                    c7:21:11:3e:ca:b3:c1:0e:85:a8:7c:2d:52:5a:12:
                    fa:e4:21:d2:de:ab:4c:4d:73:a4:c7:36:86:53:2a:
                    ff:64:5a:d5:ba:65:6b:ae:e0:5e:b2:82:2a:3e:c8:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:67:83:9A:AA:3A:65:5A:B0:BF:2A:99:37:7C:F0:E9:D4:9F:81
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e39312e302f32342d3234203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:74:9b:07:f3:3a:46:25:95:fd:2e:1f:ef:ea:f6:c5:77:
         26:f6:7f:df:c2:d6:52:36:07:97:47:07:d1:c7:fb:b9:4d:f9:
         d4:ce:d8:b4:1b:91:cc:2f:f2:f6:9d:4f:74:b7:27:79:c5:d0:
         19:cd:0b:1b:f7:2c:59:8b:24:b7:cf:0f:51:05:e7:e9:c6:a5:
         9a:4a:2e:60:3d:7f:34:20:8f:c7:c4:9c:37:41:59:3f:18:f9:
         08:ac:f2:c6:62:b9:af:4e:bd:08:f1:c9:03:53:36:eb:a9:35:
         7a:82:91:4a:76:7e:4a:83:e1:34:4f:93:cc:d6:a5:28:c1:76:
         5f:f3:08:e7:e6:b2:a7:db:40:ad:81:ad:6e:f2:96:ee:1c:e1:
         9e:b1:15:c6:f1:c5:9f:71:25:c1:99:55:e0:75:cd:98:39:b9:
         3d:e1:4b:44:b2:ef:cf:ae:a2:e5:6a:ac:6e:ea:7c:c4:4b:98:
         d3:bc:a2:ee:21:32:33:06:b0:49:02:a9:80:92:4c:b9:a0:54:
         eb:eb:5e:81:b7:a9:ea:ff:c3:09:a0:f3:ef:75:2c:37:a4:6c:
         98:d1:9d:f9:2d:a8:fd:71:fe:56:5b:d4:ca:b5:a6:6d:29:39:
         6c:65:41:09:39:b4:c7:75:42:d8:c9:d7:10:94:43:16:89:44:
         84:91:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org