Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36372e302f32342d3234203d3e20323636353530.roa
File:                     3139322e3134302e36372e302f32342d3234203d3e20323636353530.roa (raw, json)
Hash identifier:          6tpt5Hye8HIVcSFNzdDuRf3cOaMVvcpHfkOLrbzwKPQ=
Subject key identifier:   E6:01:C3:1B:36:05:9E:0E:60:B5:DE:CB:59:EE:1F:92:A2:98:97:71
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       7898B5B9B3461CFA0470F9D90B9A34F0B92922D6
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36372e302f32342d3234203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:10 +0000
ROA not before:           Mon 10 Jul 2023 13:22:10 +0000
ROA not after:            Mon 08 Jul 2024 13:27:10 +0000
asID:                     266550
IP address blocks:        192.140.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:98:b5:b9:b3:46:1c:fa:04:70:f9:d9:0b:9a:34:f0:b9:29:22:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:10 2023 GMT
            Not After : Jul  8 13:27:10 2024 GMT
        Subject: CN=E601C31B36059E0E60B5DECB59EE1F92A2989771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:10:e5:82:0d:3a:cb:2a:fe:80:11:ee:21:
                    ab:cf:03:58:82:3c:64:c9:1a:d3:31:7b:bc:6c:0a:
                    de:c6:59:ff:a1:7c:f7:ce:87:91:95:17:84:52:5f:
                    8b:be:f5:73:ee:8e:03:6e:29:5f:06:61:23:d7:14:
                    3c:26:3f:0b:04:4f:fa:87:d3:3e:af:08:08:10:e3:
                    8a:01:c0:f9:a9:68:3a:99:fc:98:e9:d7:71:b0:50:
                    66:97:39:f7:17:60:d1:9e:de:55:e8:61:0c:4b:e2:
                    51:fe:61:47:5f:54:a6:4a:56:dc:55:ab:e5:39:b1:
                    ef:cf:e7:62:cf:19:d0:23:7f:80:ec:1e:d5:56:dc:
                    47:c6:b6:e0:8a:6c:a0:9b:f8:2f:44:a3:db:83:91:
                    7d:0c:fa:29:8f:c1:b4:bb:1f:18:78:52:e1:0b:d0:
                    77:df:9b:95:4d:8a:2c:43:8b:c2:44:bc:61:fb:4f:
                    63:f5:d7:6e:e0:19:a4:65:97:9e:b2:53:c9:86:9c:
                    89:7a:93:16:ed:bb:16:d5:d4:c5:a3:ff:1e:d3:ac:
                    98:1e:85:91:0b:fd:3f:00:70:3c:b0:60:38:e2:75:
                    3c:c9:eb:4c:09:49:64:f8:3c:b2:dc:25:63:ae:d6:
                    92:5a:96:58:98:12:8d:96:28:41:6a:58:15:da:2b:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:C3:1B:36:05:9E:0E:60:B5:DE:CB:59:EE:1F:92:A2:98:97:71
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36372e302f32342d3234203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:09:da:14:aa:fa:42:78:fe:c4:5b:cd:74:d9:aa:81:a3:
         08:7d:e7:da:f7:56:25:3d:e1:43:01:98:ea:87:7b:0f:b6:23:
         33:04:52:c4:c9:59:cd:63:c3:b2:62:60:f2:06:0f:83:d2:04:
         1e:44:f1:88:2c:75:48:d3:9c:1e:cd:7d:e7:74:94:12:6a:40:
         34:36:49:dd:3e:b1:31:97:76:bd:22:28:bf:93:94:c8:0d:22:
         9d:31:d2:a9:a5:be:50:9e:7e:21:9a:3f:00:6d:11:ab:7f:9d:
         d2:ae:ef:5e:7f:1b:d3:1e:05:40:ed:7e:55:a7:a1:06:5a:25:
         00:7f:b4:e9:4a:12:a7:f7:61:83:9f:09:8e:9e:8c:3d:18:5b:
         65:37:c1:04:31:b8:11:0a:58:8a:e3:5b:b4:3e:8d:cf:82:ea:
         58:5e:07:02:f2:44:9b:7d:55:4f:18:ff:27:b1:3e:7e:6f:96:
         f4:0e:c1:f8:ab:71:a9:70:f7:da:4d:6a:96:5e:7a:2d:d7:5d:
         89:bc:c5:9b:51:d3:a5:2c:11:ed:50:d8:56:c1:dd:a4:73:98:
         c0:d9:c8:8a:37:fb:26:e8:f3:3c:f3:06:d1:19:b6:75:be:04:
         92:d8:db:51:c1:e4:ed:66:f0:a9:ef:c0:4e:8d:09:2a:a7:d2:
         00:8c:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org