Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          9VohVxQoXscWsccUhXV+QLfIlJmviwyJxBjN4PQRG0U=
Subject key identifier:   C6:39:94:AD:EA:CB:2E:04:B7:8A:F9:32:BF:20:2F:2C:E2:15:DA:81
Certificate issuer:       /CN=6A954DCA8F132488386154F00954CB12AE07DEF6
Certificate serial:       3BCDEC06853E0FE2805875E2DA96592508ACEF49
Authority key identifier: 6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa
Signing time:             Tue 22 Aug 2023 15:25:36 +0000
ROA not before:           Tue 22 Aug 2023 15:20:36 +0000
ROA not after:            Tue 20 Aug 2024 15:25:36 +0000
asID:                     266256
IP address blocks:        192.140.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:ec:06:85:3e:0f:e2:80:58:75:e2:da:96:59:25:08:ac:ef:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Validity
            Not Before: Aug 22 15:20:36 2023 GMT
            Not After : Aug 20 15:25:36 2024 GMT
        Subject: CN=C63994ADEACB2E04B78AF932BF202F2CE215DA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:a2:fa:a4:0e:d9:bd:3f:82:5e:89:2b:50:
                    42:dc:0b:e7:9d:2b:2a:76:30:0f:7a:7c:4c:50:4a:
                    cc:7b:65:6c:e9:b5:c2:22:99:6d:6f:fc:4c:a6:60:
                    69:e4:c4:3e:0a:3c:36:59:92:4d:26:2e:66:a8:9b:
                    da:63:43:3c:c4:06:e0:48:5f:e9:c6:94:a6:ad:f7:
                    80:b1:ce:91:9c:a7:bb:43:2b:57:77:9b:f1:24:51:
                    6c:f7:75:1a:55:e0:3c:a7:12:62:58:8f:e4:82:87:
                    bb:74:25:88:29:49:64:0d:98:86:95:65:ea:17:af:
                    e6:1e:bc:ce:37:e9:cc:d1:9f:74:db:d6:b9:46:0e:
                    91:32:c5:2d:18:b7:74:93:2b:7a:3f:4a:48:e0:d8:
                    8e:c0:1c:02:d4:d7:3f:a7:75:38:24:06:08:78:87:
                    3e:f6:41:fb:be:de:69:76:0b:8c:96:b0:b4:49:87:
                    04:c5:6b:21:8e:26:f6:01:6a:99:a2:1c:2e:be:85:
                    f0:b0:cc:f5:32:2f:7e:1b:97:1a:4d:9d:56:ba:30:
                    55:d8:e9:18:3f:d8:63:b6:ec:f9:7b:da:85:da:a7:
                    3a:0e:66:d2:81:88:b7:16:4a:3d:34:e5:5f:1d:f9:
                    5c:46:b7:78:fe:4b:ac:c5:f4:99:c9:b6:f3:8f:54:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:94:AD:EA:CB:2E:04:B7:8A:F9:32:BF:20:2F:2C:E2:15:DA:81
            X509v3 Authority Key Identifier:
                keyid:6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:57:18:b6:60:01:f3:35:70:fe:6e:23:be:d8:25:9f:ce:06:
         4f:49:8b:ae:80:62:34:36:1e:ed:12:6b:29:85:59:8d:62:c1:
         e3:ab:86:9f:b6:c7:cb:c9:1b:df:b6:92:6c:70:a3:aa:f0:4d:
         41:f1:bf:dd:69:16:66:34:e6:53:78:9a:e1:5d:d3:42:11:83:
         19:bb:da:b9:04:d3:04:26:6f:87:a5:9a:88:5d:e3:64:d8:15:
         d9:70:25:7b:fb:09:64:56:78:52:3f:40:87:32:79:85:8f:c5:
         ab:a5:4d:b0:7b:49:c4:4a:57:0c:17:6d:22:e5:f5:84:93:a2:
         be:5c:ef:b3:21:48:60:db:4d:93:35:a1:d8:e7:f2:c1:df:24:
         7f:78:26:18:99:8b:7f:c2:6d:58:27:74:c4:d3:2e:bb:65:b0:
         39:08:e8:0f:e3:1e:5e:7b:24:06:84:ac:55:23:bd:96:85:f2:
         ee:c5:c6:b3:d7:f6:35:19:b5:bc:51:78:49:a3:c3:fc:15:e4:
         26:9e:b8:58:f8:4f:84:fe:a0:70:3d:9c:58:5a:91:14:1b:89:
         61:f5:44:cc:11:74:80:66:cd:a9:d3:a0:1c:bd:8d:1b:67:5b:
         59:d1:fc:cf:96:ce:8b:58:ec:d7:24:45:22:5d:bc:0a:9f:ee:
         0e:d4:b9:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO83sBoU+D+KAWHXi2pZZJQis70kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE5NTREQ0E4RjEzMjQ4ODM4NjE1NEYwMDk1NENCMTJB
RTA3REVGNjAeFw0yMzA4MjIxNTIwMzZaFw0yNDA4MjAxNTI1MzZaMDMxMTAvBgNV
BAMTKEM2Mzk5NEFERUFDQjJFMDRCNzhBRjkzMkJGMjAyRjJDRTIxNURBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BaL6pA7ZvT+CXokrUELcC+ed
Kyp2MA96fExQSsx7ZWzptcIimW1v/EymYGnkxD4KPDZZkk0mLmaom9pjQzzEBuBI
X+nGlKat94CxzpGcp7tDK1d3m/EkUWz3dRpV4DynEmJYj+SCh7t0JYgpSWQNmIaV
ZeoXr+YevM436czRn3Tb1rlGDpEyxS0Yt3STK3o/Skjg2I7AHALU1z+ndTgkBgh4
hz72Qfu+3ml2C4yWsLRJhwTFayGOJvYBapmiHC6+hfCwzPUyL34blxpNnVa6MFXY
6Rg/2GO27Pl72oXapzoOZtKBiLcWSj005V8d+VxGt3j+S6zF9JnJtvOPVMC7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxjmUrerLLgS3ivkyvyAvLOIV2oEwHwYDVR0j
BBgwFoAUapVNyo8TJIg4YVTwCVTLEq4H3vYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3
LzAvNkE5NTREQ0E4RjEzMjQ4ODM4NjE1NEYwMDk1NENCMTJBRTA3REVGNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82QTk1NERDQThGMTMyNDg4Mzg2
MTU0RjAwOTU0Q0IxMkFFMDdERUY2LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
U3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3LzAvMzEz
OTMyMmUzMTM0MzAyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NjMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMCMZDANBgkqhkiG9w0BAQsFAAOCAQEANlcYtmAB
8zVw/m4jvtgln84GT0mLroBiNDYe7RJrKYVZjWLB46uGn7bHy8kb37aSbHCjqvBN
QfG/3WkWZjTmU3ia4V3TQhGDGbvauQTTBCZvh6WaiF3jZNgV2XAle/sJZFZ4Uj9A
hzJ5hY/Fq6VNsHtJxEpXDBdtIuX1hJOivlzvsyFIYNtNkzWh2Ofywd8kf3gmGJmL
f8JtWCd0xNMuu2WwOQjoD+MeXnskBoSsVSO9loXy7sXGs9f2NRm1vFF4SaPD/BXk
Jp64WPhPhP6gcD2cWFqRFBuJYfVEzBF0gGbNqdOgHL2NG2dbWdH8z5bOi1js1yRF
Il28Cp/uDtS5Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:19:53 2025 by rpki-client