Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130312e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130312e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          EFXutdxJVJ/nUwKKcWGoE1Ze24W7JuDvXbRlV7e5+Fk=
Subject key identifier:   E8:35:58:BE:D7:8F:69:ED:19:1B:90:26:54:DE:E5:FD:F5:12:20:8D
Certificate issuer:       /CN=6A954DCA8F132488386154F00954CB12AE07DEF6
Certificate serial:       06572BE92139EB4AA1C9E277AFEAC48BDEEF7CE2
Authority key identifier: 6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130312e302f32342d3234203d3e20323636323536.roa
Signing time:             Tue 22 Aug 2023 15:25:35 +0000
ROA not before:           Tue 22 Aug 2023 15:20:35 +0000
ROA not after:            Tue 20 Aug 2024 15:25:35 +0000
asID:                     266256
IP address blocks:        192.140.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:57:2b:e9:21:39:eb:4a:a1:c9:e2:77:af:ea:c4:8b:de:ef:7c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Validity
            Not Before: Aug 22 15:20:35 2023 GMT
            Not After : Aug 20 15:25:35 2024 GMT
        Subject: CN=E83558BED78F69ED191B902654DEE5FDF512208D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b5:7a:97:0f:30:4b:82:26:02:ad:d1:fe:92:
                    c0:18:0e:ed:4e:3c:8a:2a:fa:7d:cf:83:4a:06:c3:
                    82:54:34:8c:d8:fc:7a:73:46:8c:6e:7a:22:10:6d:
                    46:ca:8e:13:4f:a3:bc:a0:e6:45:03:61:64:5a:c5:
                    45:d6:4a:10:b6:10:a8:d6:f5:64:9f:a1:b1:2d:be:
                    97:1a:f8:d2:17:6b:aa:94:50:4e:71:ee:8a:ee:43:
                    68:8d:d3:f4:58:eb:33:ec:b6:68:4e:34:fe:d5:c7:
                    b6:ee:15:6a:08:9c:de:fa:31:e9:6d:c9:0a:38:af:
                    7b:90:49:4f:b5:49:c3:33:42:85:8f:02:6d:92:cd:
                    e7:8b:d6:65:88:61:48:bf:ef:17:63:ee:d4:1f:9e:
                    e8:fe:f0:49:fd:5d:7f:63:be:de:d1:38:71:a0:26:
                    fa:cb:9f:99:6d:f6:da:6b:a3:c7:97:19:fe:c9:4a:
                    d9:20:36:43:95:63:e3:e8:79:52:04:31:8e:93:35:
                    ab:dc:94:af:1b:1b:ee:25:92:f8:2f:83:f8:5e:25:
                    92:37:be:41:21:5f:66:c2:92:4f:fd:7d:72:cf:7d:
                    17:1d:d0:34:07:4f:63:78:c2:7d:a1:b4:b0:40:5f:
                    61:3a:18:b1:16:13:80:1b:bf:39:c6:49:f8:c0:46:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:35:58:BE:D7:8F:69:ED:19:1B:90:26:54:DE:E5:FD:F5:12:20:8D
            X509v3 Authority Key Identifier:
                keyid:6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130312e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:e4:1b:a0:6e:06:0c:bf:bf:2c:4c:df:95:a4:9a:6f:af:
         be:06:5e:5d:9e:79:a8:15:7c:5c:f6:37:0b:05:31:ba:a6:34:
         00:f4:41:27:e2:b8:be:83:4f:84:52:0b:6d:c5:92:2e:40:f0:
         1a:a6:62:16:63:9e:54:0e:eb:03:de:4b:7e:5a:38:66:41:80:
         85:29:bb:b8:0c:fb:a6:01:26:52:35:2e:07:b5:2c:aa:95:55:
         16:83:3e:d0:df:b9:15:ed:a9:cf:4c:b8:da:82:12:2e:23:b6:
         a4:75:b7:72:58:35:3d:0e:d6:62:36:a5:0e:0c:6a:24:50:9c:
         ca:42:00:9a:09:7a:f2:7c:9e:e5:d2:f1:94:92:04:4d:ad:6a:
         7b:56:d8:0e:d4:a8:b7:c1:a0:51:6d:a9:7b:eb:1f:fa:7e:b6:
         7f:79:54:db:66:d6:4d:5a:c5:cb:ad:82:ea:f4:d6:cc:22:c4:
         68:54:5b:28:1a:79:c5:a3:e1:27:34:05:5b:4b:fd:be:6e:58:
         1a:64:e9:86:28:9a:19:6f:f1:f4:47:36:a2:d5:28:ca:4d:fe:
         ca:24:b5:4a:03:cb:d3:7b:69:63:20:df:a0:3f:42:27:f0:d1:
         e7:d4:19:40:a0:ad:b1:75:5f:5d:5c:1a:29:0f:93:8f:34:fa:
         ad:78:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org