Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa (raw, json)
Hash identifier:          FUYtoeSPaZPYE5KuON1EMPSVr7qZF8FyXyM2olDp+9c=
Subject key identifier:   DA:AA:92:DD:5D:B6:D8:22:30:D9:BE:69:8F:F8:66:E1:58:8B:8B:A0
Certificate issuer:       /CN=6A954DCA8F132488386154F00954CB12AE07DEF6
Certificate serial:       3578D13605F8C6BDB7E685FF476A83DCB338B062
Authority key identifier: 6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa
Signing time:             Tue 22 Aug 2023 15:25:36 +0000
ROA not before:           Tue 22 Aug 2023 15:20:36 +0000
ROA not after:            Tue 20 Aug 2024 15:25:36 +0000
asID:                     266256
IP address blocks:        192.140.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:d1:36:05:f8:c6:bd:b7:e6:85:ff:47:6a:83:dc:b3:38:b0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Validity
            Not Before: Aug 22 15:20:36 2023 GMT
            Not After : Aug 20 15:25:36 2024 GMT
        Subject: CN=DAAA92DD5DB6D82230D9BE698FF866E1588B8BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:65:8a:4d:69:71:36:d4:30:d0:19:35:1e:
                    1a:2b:d3:9e:33:27:d0:b0:22:d1:f2:54:fa:95:51:
                    ec:3d:d6:dd:f8:7a:f1:34:9a:c5:75:1c:a7:40:5d:
                    c3:b7:f1:f3:92:3f:48:2f:02:19:b5:7b:0a:65:aa:
                    cd:8a:79:d4:0e:84:6a:41:c1:9a:02:61:67:90:c1:
                    b9:49:d0:6f:c7:67:28:c4:f3:0f:23:b7:b5:e4:d3:
                    ed:d0:e4:67:07:15:42:e6:ff:88:12:c0:78:ed:9c:
                    57:80:3b:77:38:b1:6c:f4:93:d7:0d:9f:5c:1f:7f:
                    a1:3e:40:d0:22:4b:f0:e2:b6:2e:99:36:f3:17:56:
                    cc:12:68:b9:ef:09:15:8b:36:31:3d:93:9c:7c:ca:
                    5a:26:77:ef:42:8c:a2:01:32:0f:76:cb:ad:57:b5:
                    f5:e6:0b:1a:95:ed:90:0b:b2:57:e1:f3:36:06:3a:
                    c9:6b:9f:f4:7c:1b:09:2f:49:62:54:b0:f6:ec:4e:
                    cb:82:cf:2c:30:ce:d4:dc:cb:4f:a6:5b:bc:80:98:
                    6e:41:30:a6:56:35:17:71:20:4a:02:a2:d6:35:ab:
                    f0:d1:89:a0:ec:cf:0c:ad:46:97:9a:e8:1d:a1:24:
                    5f:0c:1b:2c:c2:91:3c:1b:9b:cf:db:e7:49:ed:46:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:92:DD:5D:B6:D8:22:30:D9:BE:69:8F:F8:66:E1:58:8B:8B:A0
            X509v3 Authority Key Identifier:
                keyid:6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:49:e1:36:e0:31:d8:d8:76:f1:25:bf:04:e5:58:ff:75:
         c4:ea:ef:9c:c0:28:07:13:d5:d5:b2:43:95:8d:eb:b6:18:04:
         79:00:56:46:16:65:fc:70:31:3d:87:16:4f:99:e6:f3:3f:c9:
         ed:45:b6:72:ee:c7:54:07:42:f0:00:5a:6f:43:c4:48:49:11:
         02:10:92:8e:e7:c5:a0:93:85:4b:9a:cb:c5:8d:95:7d:86:a5:
         a2:a9:ec:73:97:d0:c1:99:ba:ff:30:09:cc:d4:da:64:2b:c2:
         4d:3e:0b:8f:0e:9a:74:78:3a:11:79:ca:63:c8:51:9b:30:06:
         e6:12:2c:58:cb:d7:a1:54:e2:6c:ce:f0:d3:fb:1d:a5:de:12:
         54:82:67:1a:cf:37:0a:2a:bd:c6:95:17:95:0f:74:fc:17:82:
         c6:39:97:d8:3d:14:11:6c:29:b0:ad:91:8b:eb:56:cb:64:ad:
         bb:1e:d1:20:0a:ca:dd:86:36:67:e8:76:59:91:fb:7f:95:ac:
         26:31:84:8c:af:b7:b6:b6:9e:37:a7:b3:da:de:1b:e0:41:01:
         bc:4f:4e:32:19:b6:6e:ae:49:8e:53:1b:2f:50:c1:b1:28:a5:
         77:95:61:7f:5d:de:6d:ec:87:bd:e3:fa:de:ad:d3:3e:90:44:
         38:ef:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org