Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e382e302f32332d3233203d3e20323632343935.roa
File:                     3139312e362e382e302f32332d3233203d3e20323632343935.roa (raw, json)
Hash identifier:          u5bEpHWiKdVzzDgGx1G/25Qb/A+Pa6rkbAe4x+fqAZM=
Subject key identifier:   C0:6A:7D:52:3E:52:56:3F:E8:16:56:45:28:8B:E8:01:88:1A:F2:E1
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       1AD111381D9F56F5A0AB9111AC13D61C313AB527
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e382e302f32332d3233203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:00 +0000
ROA not before:           Mon 07 Nov 2022 18:20:00 +0000
ROA not after:            Mon 06 Nov 2023 18:25:00 +0000
asID:                     262495
IP address blocks:        191.6.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d1:11:38:1d:9f:56:f5:a0:ab:91:11:ac:13:d6:1c:31:3a:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:00 2022 GMT
            Not After : Nov  6 18:25:00 2023 GMT
        Subject: CN=C06A7D523E52563FE8165645288BE801881AF2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:39:c9:74:aa:6f:e4:3c:39:bf:e1:89:0c:
                    c9:55:6c:3e:96:bf:91:46:de:7d:e2:c5:ad:5e:d0:
                    b1:0b:0e:a1:b2:01:fd:e0:d8:30:39:ad:9d:ca:c6:
                    04:3f:fc:8d:46:cc:f0:b0:f6:b1:50:74:44:6b:dc:
                    ee:9b:a8:91:85:10:eb:b1:71:ec:95:c5:04:3a:24:
                    20:e2:ad:b9:49:41:23:96:3d:27:30:bd:83:2e:d4:
                    cc:97:4c:66:c1:19:79:6f:ca:79:27:57:6b:11:e5:
                    f0:9c:dc:c3:c6:ed:44:da:06:c3:37:a6:d6:ee:e7:
                    40:cd:7c:5c:a1:e9:fe:8c:ec:d5:9c:98:f0:af:29:
                    cf:42:66:90:90:43:b4:1f:0c:43:40:b9:30:87:0b:
                    8f:ce:c2:ec:aa:0d:37:b7:31:fb:6c:04:8e:cd:37:
                    90:2b:98:7e:c6:8a:d8:d9:4e:ec:76:26:bb:9c:ac:
                    c8:28:36:d8:e6:aa:90:e4:2f:7d:6e:59:c1:ba:93:
                    20:d9:a2:a4:f6:ff:f7:1e:e6:65:ba:38:15:ad:f2:
                    d3:d1:06:ac:2d:17:eb:3b:3f:02:70:e6:b9:16:e9:
                    35:72:10:38:37:06:3d:d8:aa:ee:78:d2:ef:40:13:
                    65:25:4d:89:47:1f:7c:8c:bf:ee:51:62:71:40:d7:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6A:7D:52:3E:52:56:3F:E8:16:56:45:28:8B:E8:01:88:1A:F2:E1
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/3139312e362e382e302f32332d3233203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:81:2d:89:47:15:45:8e:9f:41:2a:ce:e6:0e:81:45:5d:
         34:30:3c:e4:2a:72:38:a2:c4:6b:52:98:09:c4:e3:51:9d:e0:
         c2:fc:6b:67:c6:1e:ac:9f:36:d8:c1:b8:5f:54:5f:07:2b:d1:
         f1:78:9a:b6:e1:9d:e1:97:16:ee:8f:43:09:10:92:19:91:c9:
         76:51:53:30:cd:7c:42:9d:03:2a:ab:d9:81:29:57:55:0f:44:
         ee:5a:92:78:e3:42:d5:35:e8:20:1d:38:fb:eb:5a:1b:6b:f8:
         f9:7f:94:aa:d3:55:6c:0f:cd:09:e7:77:b6:1b:08:79:4a:ae:
         f2:63:7e:96:30:ee:a9:a7:96:2a:96:f7:15:3d:d2:f4:f7:44:
         6b:3d:df:88:d6:ce:65:6c:bd:c2:ca:d4:27:2e:00:ec:95:61:
         b5:f7:7c:71:4b:d4:35:e2:32:02:1f:22:f6:21:14:d9:bc:18:
         55:5b:bc:fd:57:7f:cd:c9:75:e8:f2:40:70:2a:2a:51:a3:43:
         3c:34:b9:94:33:8a:51:75:99:51:ad:ed:d7:62:dc:d5:45:1d:
         21:e1:a7:7f:cd:ff:ff:3c:99:64:b4:89:7f:fd:9b:09:d8:e5:
         2f:fe:e8:69:b7:9b:41:6c:92:cf:a3:ce:e2:f8:4a:18:5b:f6:
         e1:10:17:06
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGtEROB2fVvWgq5ERrBPWHDE6tScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwMjBBNUZFM0M1OTkyMjJCRTcyRDNFOUYzN0I1MEZF
NEQ4OTMzMTAeFw0yMjExMDcxODIwMDBaFw0yMzExMDYxODI1MDBaMDMxMTAvBgNV
BAMTKEMwNkE3RDUyM0U1MjU2M0ZFODE2NTY0NTI4OEJFODAxODgxQUYyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuDnJdKpv5Dw5v+GJDMlVbD6W
v5FG3n3ixa1e0LELDqGyAf3g2DA5rZ3KxgQ//I1GzPCw9rFQdERr3O6bqJGFEOux
ceyVxQQ6JCDirblJQSOWPScwvYMu1MyXTGbBGXlvynknV2sR5fCc3MPG7UTaBsM3
ptbu50DNfFyh6f6M7NWcmPCvKc9CZpCQQ7QfDENAuTCHC4/OwuyqDTe3MftsBI7N
N5ArmH7GitjZTux2JrucrMgoNtjmqpDkL31uWcG6kyDZoqT2//ce5mW6OBWt8tPR
BqwtF+s7PwJw5rkW6TVyEDg3Bj3Yqu540u9AE2UlTYlHH3yMv+5RYnFA17RJAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUwGp9Uj5SVj/oFlZFKIvoAYga8uEwHwYDVR0j
BBgwFoAUKgIKX+PFmSIr5y0+nze1D+TYkzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXdGMnczcFY0NDdFQnV2OVF0bUNQVHkxQW9NNWVuTFNwRG5UOTY2YUxm
WDYvMC8yQTAyMEE1RkUzQzU5OTIyMkJFNzJEM0U5RjM3QjUwRkU0RDg5MzMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBMDIwQTVGRTNDNTk5MjIy
QkU3MkQzRTlGMzdCNTBGRTREODkzMzEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl3RjJ3M3BWNDQ3RUJ1djlRdG1DUFR5MUFvTTVlbkxTcERuVDk2NmFMZlg2LzAv
MzEzOTMxMmUzNjJlMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNDM5
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG/BggwDQYJKoZIhvcNAQELBQADggEBAB5QgS2JRxVFjp9B
Ks7mDoFFXTQwPOQqcjiixGtSmAnE41Gd4ML8a2fGHqyfNtjBuF9UXwcr0fF4mrbh
neGXFu6PQwkQkhmRyXZRUzDNfEKdAyqr2YEpV1UPRO5aknjjQtU16CAdOPvrWhtr
+Pl/lKrTVWwPzQnnd7YbCHlKrvJjfpYw7qmnliqW9xU90vT3RGs934jWzmVsvcLK
1CcuAOyVYbX3fHFL1DXiMgIfIvYhFNm8GFVbvP1Xf83JdejyQHAqKlGjQzw0uZQz
ilF1mVGt7ddi3NVFHSHhp3/N//88mWS0iX/9mwnY5S/+6Gm3m0Fsks+jzuL4Shhb
9uEQFwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org