Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3139312e362e33322e302f32302d3332203d3e20323632323838.roa
File:                     3139312e362e33322e302f32302d3332203d3e20323632323838.roa (raw, json)
Hash identifier:          mF/sSN4DHZ3O/Rt9f+CZPmA6YMEuHwcGSvHx/kxR7Hs=
Subject key identifier:   91:C4:B2:E6:05:EF:9C:06:12:01:25:76:B1:8F:72:92:9E:B0:E5:B1
Certificate issuer:       /CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
Certificate serial:       272EC4C60AA9AA0E8984DCBA2026509CE71E7D5E
Authority key identifier: B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3139312e362e33322e302f32302d3332203d3e20323632323838.roa
Signing time:             Sat 27 May 2023 13:07:07 +0000
ROA not before:           Sat 27 May 2023 13:02:07 +0000
ROA not after:            Sat 25 May 2024 13:07:07 +0000
asID:                     262288
IP address blocks:        191.6.32.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:c4:c6:0a:a9:aa:0e:89:84:dc:ba:20:26:50:9c:e7:1e:7d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
        Validity
            Not Before: May 27 13:02:07 2023 GMT
            Not After : May 25 13:07:07 2024 GMT
        Subject: CN=91C4B2E605EF9C0612012576B18F72929EB0E5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:78:30:37:18:2c:49:60:0e:a7:4b:c3:a6:
                    d6:3f:69:5a:f1:e6:63:eb:e2:fc:a8:97:fc:e5:ee:
                    ae:4e:5b:40:c3:27:d4:b2:75:c7:68:4b:18:b5:35:
                    2c:ee:7f:55:63:2e:64:94:81:a0:3d:ad:42:0b:c7:
                    bb:6e:7f:38:ef:15:a7:23:86:b8:d4:de:65:36:b0:
                    f6:72:c8:4d:67:82:e6:23:fe:bb:7f:e5:5f:a4:05:
                    65:b6:2c:f8:17:fd:bb:5c:53:b0:3f:25:71:a5:bc:
                    5c:0b:6c:a7:b7:69:ba:5f:cf:0e:0f:b6:ca:eb:5f:
                    e5:19:ae:7f:bb:21:16:53:fe:c6:ca:01:9d:5f:9c:
                    c8:6a:91:16:e5:78:7e:73:ab:50:4b:a4:3d:80:ad:
                    58:30:d0:56:a0:3d:0f:79:40:86:9e:f1:3d:da:8d:
                    c0:cf:23:be:5a:d1:8c:15:9c:14:68:05:11:b0:da:
                    29:e5:fc:ef:b7:fb:df:4d:6a:2c:6f:d5:96:c7:9e:
                    b5:b8:03:5a:96:f9:b4:e3:45:66:55:61:76:d7:bf:
                    6a:00:6b:9a:4a:e2:ba:9f:3f:b8:ed:c5:c6:a7:11:
                    7a:7d:d0:f4:32:e8:34:12:e4:a4:63:31:2c:fb:74:
                    ff:c7:c7:ae:2f:75:c4:a1:8d:8c:45:45:05:79:77:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:B2:E6:05:EF:9C:06:12:01:25:76:B1:8F:72:92:9E:B0:E5:B1
            X509v3 Authority Key Identifier:
                keyid:B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3139312e362e33322e302f32302d3332203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:03:ba:e9:17:20:8e:f8:9c:47:54:71:b1:41:e0:3a:b1:80:
         91:7c:ad:58:17:b6:9d:27:b4:15:33:69:cd:ea:08:ff:40:62:
         4b:33:56:c9:ee:7f:7b:70:f0:f2:f7:46:e8:62:83:48:78:6b:
         d5:bf:25:6d:0d:ea:27:00:ef:ee:97:5d:f6:53:37:44:bb:cc:
         71:d8:9b:2c:a9:e7:d8:20:82:6f:64:fe:31:fc:56:ee:dd:bc:
         59:2d:b0:99:77:62:d5:a6:db:34:00:ea:62:61:9b:c5:4c:0e:
         cd:1e:ec:fb:05:40:de:c9:dd:f2:c0:c5:a0:56:c9:f8:38:7f:
         02:52:31:73:e3:0e:80:6c:08:94:e0:8c:55:7a:3b:2b:f1:f5:
         af:d1:e4:13:5e:fc:c3:ed:ad:71:00:48:65:75:87:48:c6:47:
         8d:ba:06:86:0a:08:e5:13:94:0f:b0:06:16:45:a6:0b:61:96:
         03:63:27:92:9f:53:57:91:06:c1:0e:f4:8f:45:21:1d:5f:89:
         5e:0f:01:b3:d2:9f:a0:32:ba:e0:23:71:f4:e9:ed:1c:cc:fb:
         91:49:7b:40:89:2b:97:84:a4:d5:84:7f:34:dc:97:51:9a:a1:
         8e:ea:43:c4:b2:fc:5f:70:36:2a:2a:06:13:98:64:c0:2c:e4:
         9d:e9:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org