Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38312e302f32342d3234203d3e20323632363132.roa
File:                     3139312e3234322e38312e302f32342d3234203d3e20323632363132.roa (raw, json)
Hash identifier:          +uiQGXEBRzLooLCwdMTEOlQbltib5iXwHtuFuS+LhlY=
Subject key identifier:   22:1A:E0:15:6B:1A:09:84:83:F5:17:76:8C:5C:7E:80:7A:EB:B6:B4
Certificate issuer:       /CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
Certificate serial:       0D040557C321D1486084DB507111B392D7CEC9C8
Authority key identifier: A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38312e302f32342d3234203d3e20323632363132.roa
Signing time:             Sat 24 Dec 2022 16:49:16 +0000
ROA not before:           Sat 24 Dec 2022 16:44:16 +0000
ROA not after:            Sat 23 Dec 2023 16:49:16 +0000
asID:                     262612
IP address blocks:        191.242.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:04:05:57:c3:21:d1:48:60:84:db:50:71:11:b3:92:d7:ce:c9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
        Validity
            Not Before: Dec 24 16:44:16 2022 GMT
            Not After : Dec 23 16:49:16 2023 GMT
        Subject: CN=221AE0156B1A098483F517768C5C7E807AEBB6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:c0:5f:5f:4a:16:8c:40:05:ab:88:a5:dc:
                    2c:7b:96:b9:94:d8:33:e0:df:52:7b:78:5e:53:2e:
                    72:55:b3:6f:4a:5c:8f:16:b5:43:29:a2:91:51:51:
                    64:45:0b:97:2e:ad:b6:a8:54:d7:99:04:97:c3:08:
                    ef:41:21:e4:9d:57:53:65:73:ca:79:43:fa:14:cf:
                    9e:ea:8d:3a:ba:09:4e:a5:9b:0a:ac:fb:4b:a6:06:
                    33:db:07:a1:cc:16:12:e7:3c:cb:82:b6:b4:0a:11:
                    d3:50:a2:5e:c7:f9:f8:b1:13:bb:29:45:e3:f0:dd:
                    e8:03:9a:00:79:25:c7:e3:64:bf:13:c6:d2:04:10:
                    f3:b9:78:bb:21:f7:20:d0:19:05:98:3b:fe:b0:0a:
                    81:d7:ce:37:b6:9e:5b:6c:6c:4c:61:c3:2e:00:1f:
                    ab:05:a2:15:1c:a5:29:4e:09:45:6f:4e:fa:60:54:
                    b2:0c:77:23:10:6e:58:95:f9:ec:bd:3b:39:52:34:
                    c5:8b:7a:59:8c:72:70:ee:2f:e8:7c:5e:ee:c7:a2:
                    68:65:54:ef:7a:61:2e:d9:c9:bd:84:0a:3a:1c:fb:
                    64:2c:da:9b:03:b6:02:15:ff:e0:57:38:41:bf:6a:
                    66:29:6a:f2:69:a5:df:0c:eb:b0:3c:47:10:db:73:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:E0:15:6B:1A:09:84:83:F5:17:76:8C:5C:7E:80:7A:EB:B6:B4
            X509v3 Authority Key Identifier:
                keyid:A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38312e302f32342d3234203d3e20323632363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:b7:f6:1b:cc:97:b7:20:de:aa:bd:ab:d6:46:fc:47:21:
         28:88:fb:49:38:06:a0:2e:cc:d4:44:ec:30:52:b5:fd:25:4e:
         0a:ee:bc:a3:36:5e:b0:25:aa:2b:76:b1:29:fb:e8:a1:64:41:
         be:86:f1:83:e3:0c:ac:60:2f:86:90:f3:f0:2a:41:30:bb:ff:
         d9:d6:96:f5:d7:7f:d7:9d:79:bb:fa:f6:fb:67:dd:02:7d:6b:
         0b:78:a3:ff:2c:bc:da:df:e9:60:1b:47:ad:2c:d6:75:5f:96:
         6e:2d:fc:62:50:04:56:47:be:47:cc:4f:9d:26:f2:43:83:13:
         d8:bf:b1:dc:73:d9:74:38:d5:c3:25:45:26:cf:14:a6:d5:72:
         02:a6:18:63:49:95:89:e4:18:cb:58:36:88:5b:40:81:58:38:
         b6:4a:44:53:7d:39:fb:cc:b3:30:bf:49:d2:10:90:8f:b1:19:
         f2:03:33:22:53:b1:5a:cd:2c:b5:c4:3a:d2:72:04:97:ec:6e:
         b2:18:eb:6c:8c:9e:86:24:9d:b5:1f:bf:30:8f:64:b3:07:44:
         a5:e9:c7:8d:86:d8:45:d6:54:d5:12:dd:3a:68:a0:0a:07:8d:
         ce:56:40:fd:59:1b:f6:39:1a:02:03:9d:26:1b:34:fa:8b:ae:
         35:57:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org