Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31312e302f32342d3234203d3e20323632343935.roa
File:                     3139312e362e31312e302f32342d3234203d3e20323632343935.roa (raw, json)
Hash identifier:          QgFjn+WtA2wg38P4KkUJbrBdYN8PCsz/BZjsjXGyEG8=
Subject key identifier:   55:FE:5E:16:9F:A6:49:B1:80:95:FD:3F:98:C4:D7:9C:E9:86:B0:6E
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       40C1189627403F50E3A46F1D890F754EE478ECB3
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31312e302f32342d3234203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:00 +0000
ROA not before:           Mon 07 Nov 2022 18:20:00 +0000
ROA not after:            Mon 06 Nov 2023 18:25:00 +0000
asID:                     262495
IP address blocks:        191.6.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:18:96:27:40:3f:50:e3:a4:6f:1d:89:0f:75:4e:e4:78:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:00 2022 GMT
            Not After : Nov  6 18:25:00 2023 GMT
        Subject: CN=55FE5E169FA649B18095FD3F98C4D79CE986B06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:23:32:34:dc:af:e9:86:34:db:77:67:a5:
                    6f:4c:4f:0e:17:07:8f:20:96:87:3a:53:06:67:3c:
                    08:c2:57:f2:79:56:e4:ac:ee:b3:24:24:e9:79:91:
                    0d:c0:30:0b:66:0a:1c:6f:d5:d7:1a:31:08:17:5e:
                    78:40:22:c9:29:4c:47:14:18:8e:13:6c:a4:d0:ea:
                    92:9a:8e:4a:58:c2:52:c9:67:43:2e:24:ea:3b:11:
                    67:9f:74:52:5b:4d:3e:5f:09:ed:59:a0:0a:f3:9a:
                    88:29:d1:67:1c:f7:69:b1:7b:ed:6e:06:1f:ed:d0:
                    3d:10:d7:03:05:43:f5:63:4f:0b:76:f7:a2:39:54:
                    ca:ea:62:4c:04:c3:aa:fe:d0:fa:d4:22:cb:22:39:
                    f4:aa:de:66:e0:f6:b0:83:4e:e9:11:33:a9:95:b4:
                    47:3e:4c:97:a8:2e:f5:b9:7e:60:c9:c6:28:94:68:
                    c9:00:e7:d9:02:d7:e8:bb:97:94:81:dd:cf:6d:f7:
                    ed:07:d4:fb:97:d2:8a:b5:5d:00:67:23:d5:d4:3f:
                    7c:46:e0:21:f8:e9:f6:cc:fc:9a:96:24:8a:b5:64:
                    e9:fd:6b:f5:82:5c:40:c2:b1:5a:f2:22:d1:b1:73:
                    1e:af:66:2f:f6:5b:29:a3:6c:82:58:41:be:1a:f0:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:5E:16:9F:A6:49:B1:80:95:FD:3F:98:C4:D7:9C:E9:86:B0:6E
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31312e302f32342d3234203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:80:9f:97:c3:b5:ae:d1:db:b8:e7:fb:29:84:a1:6a:e6:
         07:50:0c:70:cb:bf:11:37:7d:60:54:35:9a:ec:d2:2b:7f:a7:
         99:6d:a8:7b:30:e2:0c:9e:8b:e4:81:15:a1:fa:03:d9:c9:3e:
         07:68:e7:a4:e8:e3:ae:f1:c9:55:f6:62:90:f1:29:16:7a:b4:
         cb:a2:ed:00:72:a4:bd:b9:4f:1d:76:c1:53:6a:5d:66:ef:f9:
         a2:34:d0:b9:78:92:38:63:ce:5d:71:78:9a:62:4f:68:14:28:
         d8:72:ba:f0:f3:da:9a:f9:45:9f:02:82:ae:74:31:a1:1b:9c:
         08:c0:19:1a:f1:a2:f4:be:3e:dd:65:f0:ea:c3:d6:38:62:85:
         4f:d2:db:63:15:79:00:ac:6a:22:25:b9:9c:f0:23:82:d7:1b:
         ae:66:b1:d5:54:ba:d3:9c:39:78:31:cd:fb:32:dd:86:dc:98:
         f3:62:78:b2:77:0d:27:94:e9:01:be:e4:59:21:5a:9d:71:6c:
         05:03:d7:9b:09:5b:ab:76:d5:0d:df:15:38:b2:f0:5b:c6:52:
         8a:4c:29:d5:e9:58:7d:52:e9:58:cc:d3:44:74:61:4b:55:24:
         f8:8f:a2:fe:d6:2f:09:be:63:04:3b:88:b3:84:fd:b2:13:ca:
         ca:fa:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org