Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e31362e302f32302d3332203d3e20323633353436.roa
File:                     3139312e362e31362e302f32302d3332203d3e20323633353436.roa (raw, json)
Hash identifier:          +0zEP/j9h823Kn4inW3HrV3ZVxr5Cv51FQUdGmBoR1s=
Subject key identifier:   89:F0:85:07:F2:9B:E5:4F:0D:44:9E:63:DA:DA:D8:71:80:85:FF:45
Certificate issuer:       /CN=9696D17A0AA09553DE77DE6DBAAD33755AFE7131
Certificate serial:       5DDE4B53F7C79920FD1B82947CB23F331296E4A9
Authority key identifier: 96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e31362e302f32302d3332203d3e20323633353436.roa
Signing time:             Wed 20 Sep 2023 17:28:24 +0000
ROA not before:           Wed 20 Sep 2023 17:23:24 +0000
ROA not after:            Wed 18 Sep 2024 17:28:24 +0000
asID:                     263546
IP address blocks:        191.6.16.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:de:4b:53:f7:c7:99:20:fd:1b:82:94:7c:b2:3f:33:12:96:e4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9696D17A0AA09553DE77DE6DBAAD33755AFE7131
        Validity
            Not Before: Sep 20 17:23:24 2023 GMT
            Not After : Sep 18 17:28:24 2024 GMT
        Subject: CN=89F08507F29BE54F0D449E63DADAD8718085FF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:b8:5b:bf:ef:2c:da:b8:94:4e:56:d4:4d:
                    47:78:00:65:9a:00:56:5e:a6:c4:52:be:1b:ae:39:
                    66:2e:b0:cc:ec:46:5f:3b:58:c5:f9:05:2b:53:41:
                    71:26:e9:f9:60:63:91:a8:b7:70:01:50:e8:e6:a6:
                    1b:a1:1f:d1:bd:39:12:19:1c:0e:65:c6:e1:e6:07:
                    5f:87:55:38:41:37:6e:02:16:d9:c1:93:28:34:dc:
                    63:ed:a6:d0:23:09:e9:69:e1:09:a0:18:b7:df:a9:
                    8b:53:de:da:e0:2e:9c:de:c6:9d:4a:b6:68:fa:6e:
                    ef:cc:ec:b5:10:b1:83:49:1e:31:0b:08:ec:e7:5d:
                    35:1a:dd:62:64:76:76:e9:fe:db:6f:b3:8d:1b:20:
                    bf:bd:21:34:08:4d:4d:f9:6d:63:d5:b4:5c:4a:fa:
                    54:38:85:4b:bb:29:70:34:bf:2f:6f:20:36:66:e7:
                    9a:a8:44:45:94:ed:b7:57:d4:1b:e8:55:8f:28:44:
                    e5:44:7f:05:e1:53:79:b6:6a:21:29:c9:f4:19:c4:
                    0e:f8:87:b7:dd:a9:4c:ca:94:b8:24:a0:4b:e1:34:
                    6c:67:c8:ca:c2:df:76:ee:26:d9:c3:d4:2e:b3:c1:
                    77:d9:9f:06:0a:0f:7c:ae:43:34:ff:87:e5:85:85:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:85:07:F2:9B:E5:4F:0D:44:9E:63:DA:DA:D8:71:80:85:FF:45
            X509v3 Authority Key Identifier:
                keyid:96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e31362e302f32302d3332203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:51:a7:6f:a9:35:f6:30:dd:4c:78:6b:85:98:09:5b:96:
         a8:53:8e:72:c8:bf:a8:cc:bb:ac:93:38:03:fb:f9:da:aa:91:
         e5:fd:28:14:8f:5b:17:84:3f:c0:98:e1:df:5f:36:8a:18:64:
         b9:6c:33:d6:75:80:68:5a:7d:2d:75:ac:ad:43:07:c8:99:c0:
         33:d0:d2:32:f2:b6:4a:26:e0:1f:b9:5a:80:c6:f5:d3:8b:1f:
         ba:c5:49:8a:4e:b0:e6:1d:22:36:72:22:0d:5a:3f:1f:fa:2e:
         b2:82:be:2f:99:97:fd:7a:de:46:51:a4:b0:11:36:2c:ae:55:
         74:d1:c5:5e:13:b4:3e:76:91:4a:1a:e3:e7:c1:d8:b5:47:48:
         9d:c2:96:2b:dc:67:9d:f4:eb:6a:b5:76:47:9e:c0:26:08:4e:
         83:2c:36:a6:82:cc:ed:62:cb:13:87:6f:9a:e4:56:0f:d7:75:
         27:0e:b7:a4:56:5b:13:88:6e:cb:8f:90:dc:15:60:ee:e4:94:
         06:86:5b:5b:e3:b6:89:a4:97:fa:f2:27:69:7d:b4:dc:1e:5d:
         26:4d:f3:70:a5:96:0e:9d:3a:84:e8:46:cc:13:4a:c3:3a:7f:
         15:65:29:e0:1b:09:d9:59:28:a1:48:21:3e:c1:40:f0:a6:23:
         c8:29:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org