Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31332e302f32342d3234203d3e20323632343935.roa
File:                     3139312e362e31332e302f32342d3234203d3e20323632343935.roa (raw, json)
Hash identifier:          O9l3VazCgPfEjUt3smll5Eu2bHmm1rbwe0+qnK/EeDA=
Subject key identifier:   3A:B3:22:CE:DC:4D:80:0F:DC:EA:76:D9:34:16:2E:CB:C6:7E:D7:B0
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       5558A70E348436939AD12B61D6A088AE310D5AE6
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31332e302f32342d3234203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:00 +0000
ROA not before:           Mon 07 Nov 2022 18:20:00 +0000
ROA not after:            Mon 06 Nov 2023 18:25:00 +0000
asID:                     262495
IP address blocks:        191.6.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:58:a7:0e:34:84:36:93:9a:d1:2b:61:d6:a0:88:ae:31:0d:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:00 2022 GMT
            Not After : Nov  6 18:25:00 2023 GMT
        Subject: CN=3AB322CEDC4D800FDCEA76D934162ECBC67ED7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:9d:5e:f2:00:d5:d2:a9:0f:6d:33:8f:68:
                    44:a7:55:b7:61:5a:f2:89:d1:7d:17:8e:f1:d4:ac:
                    b6:13:d3:65:58:27:7d:af:7b:65:f6:f1:e4:d4:8d:
                    2e:e0:4f:84:ca:c6:26:b5:c3:4a:a2:b2:85:ad:7f:
                    17:a0:05:2b:59:8f:86:44:f3:0c:3a:11:5c:45:f5:
                    30:a2:24:f2:94:88:1d:22:e1:01:4a:52:a9:1a:82:
                    68:d2:16:17:57:cf:39:05:8d:72:03:c9:7b:f0:88:
                    69:d6:6f:10:ed:34:3f:4e:8d:f7:a3:2e:8d:17:54:
                    05:8d:f5:da:59:b8:97:d8:b8:37:66:b6:74:98:5d:
                    13:04:c5:10:e8:b0:87:7a:51:5c:37:e2:00:92:5c:
                    77:39:12:7d:9c:67:a8:be:92:46:ed:e9:65:11:58:
                    d5:c7:f3:b6:b4:7b:3e:16:24:c8:d3:b4:e0:a5:1c:
                    b1:08:db:36:bd:e7:f2:32:60:d0:1e:8d:68:5e:b4:
                    e6:bc:dd:5e:91:3a:da:f5:29:c0:5e:1e:a7:32:ca:
                    ce:8b:ad:bc:0a:18:77:85:77:b3:3d:51:f0:d2:73:
                    d6:e9:d0:f1:e1:4d:47:70:90:ff:21:a2:e8:da:60:
                    00:97:78:a6:a8:be:5c:ed:5b:63:cc:9a:d1:f4:f5:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:22:CE:DC:4D:80:0F:DC:EA:76:D9:34:16:2E:CB:C6:7E:D7:B0
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31332e302f32342d3234203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:25:11:38:52:f4:92:64:0e:a1:7a:2d:37:61:8d:fe:f6:f8:
         8d:c2:17:8e:5c:54:8f:7c:c9:c3:f2:1c:ff:37:62:a3:39:08:
         a1:6a:9a:f7:a0:b5:99:17:70:78:d0:e0:b3:ce:2e:61:68:a1:
         4e:b3:54:a4:59:4c:f7:60:87:8f:c8:3a:cc:e7:4e:80:d5:ca:
         6e:c2:fd:01:0b:ad:79:f7:0e:81:c3:13:c5:2e:73:a8:72:4b:
         d2:01:9d:06:11:89:c9:9d:55:87:ba:9a:83:b7:24:f0:0d:50:
         08:b8:bc:f2:de:6a:8c:0d:88:25:4f:c8:e4:d8:05:d0:cf:8d:
         dc:b8:b2:58:5c:a9:86:11:7b:ca:2f:e9:40:95:88:c1:c2:53:
         4f:2b:21:45:ec:bf:f2:01:c8:82:6a:4e:18:65:e9:1b:be:4f:
         5a:b0:ec:ed:99:c4:53:0a:f5:23:b7:85:71:b9:aa:6a:c7:67:
         9b:83:e7:24:02:43:e9:21:6c:9a:3b:18:3c:82:3a:93:ac:fc:
         c0:20:1c:41:65:23:1d:94:58:91:af:c2:f3:90:0d:cc:9d:2a:
         84:90:89:78:bb:ba:23:3f:dd:88:38:9e:a2:48:df:ee:d2:48:
         18:9d:d1:d0:1c:a5:f3:45:17:fb:5f:49:8a:0e:a5:2b:0a:2e:
         3f:00:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org