Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31352e302f32342d3234203d3e20323632343935.roa
File:                     3139312e362e31352e302f32342d3234203d3e20323632343935.roa (raw, json)
Hash identifier:          tx5/6FL3qxut7gaopYChpcEyGLv4ytEIJzkXqXnB6eY=
Subject key identifier:   1A:6A:4A:47:00:B7:10:F9:63:F0:32:8D:1C:1C:D1:FD:59:74:E9:51
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       26E40867F171E968D90882F6C9B1C5DC12EE3CA0
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31352e302f32342d3234203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:01 +0000
ROA not before:           Mon 07 Nov 2022 18:20:01 +0000
ROA not after:            Mon 06 Nov 2023 18:25:01 +0000
asID:                     262495
IP address blocks:        191.6.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:08:67:f1:71:e9:68:d9:08:82:f6:c9:b1:c5:dc:12:ee:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:01 2022 GMT
            Not After : Nov  6 18:25:01 2023 GMT
        Subject: CN=1A6A4A4700B710F963F0328D1C1CD1FD5974E951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:b3:d8:6e:24:40:0f:b8:af:c9:fb:bf:e3:
                    59:35:bc:86:0b:e5:7c:45:c7:0a:1c:22:a9:94:e6:
                    52:ed:82:35:b4:b2:f0:3c:73:19:93:58:97:f4:45:
                    3b:84:96:41:1c:b7:8c:37:d9:cc:a8:aa:c5:6d:ad:
                    69:5f:d9:5f:67:35:69:41:64:a2:43:d8:7f:4e:d9:
                    0d:57:9c:cd:2b:26:2b:e9:1b:68:f3:f1:28:4d:7a:
                    58:a7:dd:e1:ae:aa:1a:dd:bc:1d:20:3f:11:c4:38:
                    91:8c:a2:49:07:2e:55:25:d3:b1:9f:ca:da:2c:55:
                    30:29:52:63:02:de:17:35:1c:07:3f:c3:69:10:f6:
                    40:db:56:9a:88:09:de:93:b4:ae:84:64:db:96:3b:
                    d6:26:7f:ce:8c:b5:9a:65:5f:b9:90:be:5d:03:5f:
                    fc:d9:fe:01:d8:eb:e0:9a:b5:eb:f5:d8:d7:10:15:
                    1d:6c:dd:cb:17:4d:ec:48:ff:b9:be:3c:c8:ea:e1:
                    37:8e:a6:33:6f:51:12:ee:d2:2b:8b:ab:00:e4:4e:
                    df:33:21:81:15:17:97:f3:f5:f7:db:e2:71:44:be:
                    29:a1:f4:8e:b2:df:0a:79:84:de:36:77:76:41:e4:
                    da:bf:69:3a:b5:df:7f:0b:d7:d5:8b:83:da:a7:2d:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:4A:47:00:B7:10:F9:63:F0:32:8D:1C:1C:D1:FD:59:74:E9:51
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e31352e302f32342d3234203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:96:28:ed:e0:95:fb:3b:44:67:99:a1:79:75:8d:90:66:
         3e:c4:48:f8:dc:c0:e0:c5:3b:43:2b:66:51:9e:fb:b5:a0:62:
         e0:45:06:d4:de:da:4e:66:4a:0c:38:b6:12:36:fc:69:ae:96:
         66:7d:11:cd:f7:5b:b4:95:2b:2f:16:45:1d:8a:88:de:13:20:
         c3:36:28:e2:47:ad:77:34:87:ef:b7:3f:05:6d:be:d1:3b:b9:
         f1:9f:ae:7f:ab:b3:cb:b5:34:52:5f:b8:95:60:67:85:b9:30:
         af:1f:3b:15:cc:ae:99:3f:88:83:d4:c9:94:31:65:09:8b:99:
         5c:ef:71:89:8d:36:7d:14:1e:df:d3:82:10:a4:03:ff:c5:af:
         df:5d:dc:10:9a:2f:5a:ec:63:ca:b2:6b:05:e3:74:a0:12:ca:
         63:df:da:9a:76:45:cb:e2:7b:3a:14:85:11:1d:3d:95:31:a1:
         e3:52:f0:1c:21:ae:79:19:52:de:85:a4:d7:7b:3d:55:96:eb:
         d1:9d:29:f7:9f:1b:2c:20:17:35:04:cb:0b:dc:af:27:3f:ba:
         11:06:bf:d9:6e:b4:0d:14:2f:c5:fd:cd:d9:37:80:9d:72:82:
         91:6d:8b:73:a5:7b:35:39:62:fe:86:e5:00:b8:09:ba:9e:91:
         04:7e:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org