Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233392e302f32342d3234203d3e20323730383233.roa
File:                     3139302e3132302e3233392e302f32342d3234203d3e20323730383233.roa (raw, json)
Hash identifier:          P8ZgrSk2zUgzzXWA74GBFdgTqdlp1qgSTtzm8cKJDhc=
Subject key identifier:   A9:B0:DC:51:DF:97:84:AD:91:7E:8E:F2:94:B5:92:A6:72:AD:9C:7C
Certificate issuer:       /CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Certificate serial:       0A0CF0DB26DFA9E665131E4055432E5D5C944FD0
Authority key identifier: 4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233392e302f32342d3234203d3e20323730383233.roa
Signing time:             Sat 03 Feb 2024 17:44:53 +0000
ROA not before:           Sat 03 Feb 2024 17:39:53 +0000
ROA not after:            Sat 01 Feb 2025 17:44:53 +0000
asID:                     270823
IP address blocks:        190.120.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0c:f0:db:26:df:a9:e6:65:13:1e:40:55:43:2e:5d:5c:94:4f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
        Validity
            Not Before: Feb  3 17:39:53 2024 GMT
            Not After : Feb  1 17:44:53 2025 GMT
        Subject: CN=A9B0DC51DF9784AD917E8EF294B592A672AD9C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:9f:6b:b9:e7:6b:dd:57:d2:55:67:d6:1f:
                    22:89:87:a5:54:a9:80:bb:3b:41:27:08:c6:a0:0b:
                    d4:c3:f0:bc:16:2e:80:d2:aa:da:c4:3f:4f:35:11:
                    de:9d:0d:c7:06:2f:b5:b7:a7:70:f6:18:fe:5e:f3:
                    9a:26:72:b2:6d:b3:10:fa:93:5b:f2:11:b7:f8:52:
                    92:12:95:98:9a:65:09:9c:26:76:c4:d6:7f:b7:ff:
                    f1:da:9d:53:17:5b:9b:6a:43:10:9b:21:c8:cb:c7:
                    08:e0:1e:cf:8b:ed:a1:6e:f2:e3:1a:52:35:6a:8f:
                    f4:b3:ec:90:d8:6b:99:8f:57:4e:92:34:c5:aa:b4:
                    30:63:d0:cc:a0:d9:62:b5:13:90:70:9c:53:9d:d3:
                    79:be:f6:fb:b0:cd:8e:cf:6e:60:22:32:fd:02:27:
                    cc:87:c3:fe:22:a3:5d:94:db:b9:22:bd:5e:77:7e:
                    40:d9:98:af:fe:c7:6e:e7:f8:58:23:dc:29:e7:c2:
                    04:1c:7e:b6:18:e8:00:b6:1c:87:c1:6f:a8:0e:01:
                    12:f9:93:28:25:94:8d:e4:99:29:d8:fe:10:31:71:
                    a1:f8:37:0d:3d:1b:ec:9e:0d:5e:c1:0b:0d:3a:7a:
                    62:14:24:dd:67:07:f4:d8:49:44:af:83:5f:a7:03:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:DC:51:DF:97:84:AD:91:7E:8E:F2:94:B5:92:A6:72:AD:9C:7C
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233392e302f32342d3234203d3e20323730383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:7a:11:39:5e:4b:68:38:62:e7:fb:1c:21:61:73:fa:db:
         f7:fa:ef:cd:b4:ba:0d:e1:08:a5:c1:a7:7a:0f:cc:10:53:0e:
         53:3f:e8:7a:b6:60:06:8e:71:91:94:b1:e6:01:4a:b9:4e:30:
         19:b2:5e:81:15:2c:ff:db:33:70:fc:f9:22:0c:41:18:df:d5:
         99:e1:99:ec:d6:9e:61:80:96:71:9d:01:1b:a7:a5:fc:5d:51:
         e5:b9:db:11:7c:6d:ff:f4:67:79:4d:03:3c:78:e4:10:74:40:
         b8:70:2d:c8:2d:13:1d:0a:80:df:71:fa:2b:87:99:10:29:37:
         b8:8f:c1:f7:7b:98:39:88:9a:00:f5:93:aa:64:cb:28:46:db:
         68:8e:92:d5:30:43:70:bc:34:a0:4e:ab:58:66:49:4a:40:50:
         d8:22:ca:3b:54:9e:a5:62:fb:ba:41:57:6d:2d:8a:6d:30:bd:
         eb:3e:62:3c:5b:38:20:53:d0:66:a8:62:58:f8:28:59:9b:a3:
         f7:5f:20:a8:b6:12:82:7c:72:e3:49:3b:0a:53:74:81:dd:6c:
         cb:7a:65:47:50:2d:c7:5a:be:fd:9a:96:89:aa:b2:0a:95:7a:
         49:6f:1d:70:72:c3:49:2f:11:65:c7:90:b1:ec:fe:ec:6b:a2:
         f7:01:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org