Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          h9+/lvzkLw+UDF2LkNc5R5o48CC5wbAs+q8vqh4MESw=
Subject key identifier:   D8:F2:2E:CD:8F:72:09:D4:55:4A:81:5D:77:16:01:47:00:0B:F7:C7
Certificate issuer:       /CN=6A954DCA8F132488386154F00954CB12AE07DEF6
Certificate serial:       501B3DBEEE209F9855C3C3CBC5D46551B53DEAFD
Authority key identifier: 6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
Signing time:             Tue 22 Aug 2023 15:25:36 +0000
ROA not before:           Tue 22 Aug 2023 15:20:36 +0000
ROA not after:            Tue 20 Aug 2024 15:25:36 +0000
asID:                     266256
IP address blocks:        192.140.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1b:3d:be:ee:20:9f:98:55:c3:c3:cb:c5:d4:65:51:b5:3d:ea:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Validity
            Not Before: Aug 22 15:20:36 2023 GMT
            Not After : Aug 20 15:25:36 2024 GMT
        Subject: CN=D8F22ECD8F7209D4554A815D77160147000BF7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:a9:e8:3b:20:f8:47:fe:0f:9a:b8:e2:42:
                    84:4e:09:60:4e:ad:72:22:50:0f:a0:e8:c7:ca:58:
                    8e:67:78:cb:d0:3a:64:9f:31:5b:86:08:dc:5b:63:
                    1f:02:91:4c:1f:59:77:80:99:8a:ef:1a:8f:0b:52:
                    b0:91:88:65:8b:bc:37:6b:b6:2c:79:86:8a:5d:13:
                    82:c6:96:7d:e1:5b:f8:62:27:50:7b:d4:63:02:0d:
                    6c:dc:ee:7b:4b:de:95:d6:5a:33:e5:8c:df:6e:5f:
                    29:6f:75:6b:0d:9b:77:fd:bf:72:df:1c:c5:69:b0:
                    e8:ba:9a:6a:27:dc:23:12:70:1b:bd:53:84:e4:e1:
                    c9:02:c0:13:27:0d:69:1c:6f:4c:d3:8e:e7:66:3f:
                    ad:f6:d3:70:ec:ff:af:1e:28:ed:37:5a:96:66:e9:
                    c5:be:74:7f:c2:79:d3:3e:54:13:c1:a2:2d:1e:f7:
                    5c:8d:cc:13:78:71:cb:42:b7:a9:1f:41:25:7e:63:
                    82:be:d4:1e:13:06:06:de:2a:8a:56:dd:fc:c2:e5:
                    87:dc:c3:94:55:fa:a3:c0:15:5b:72:95:b8:a0:dc:
                    48:3b:ae:49:f2:d8:86:ba:74:d4:03:81:0b:8b:66:
                    64:e2:6c:50:51:f0:cb:b4:9e:99:b5:47:2b:4f:58:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:2E:CD:8F:72:09:D4:55:4A:81:5D:77:16:01:47:00:0B:F7:C7
            X509v3 Authority Key Identifier:
                keyid:6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:52:a5:55:bd:d6:3c:02:fd:ff:41:f6:48:10:3a:05:4c:
         cc:e8:11:d6:c9:72:dc:07:c7:53:8f:7f:31:22:99:9a:2d:bc:
         04:55:92:fe:8a:79:1a:9b:f0:63:ac:9f:22:ae:c2:0e:44:76:
         f7:64:5d:90:5e:d6:4c:f5:1a:24:86:eb:5f:d0:ad:c1:f1:56:
         1f:6d:06:f3:1a:55:f9:de:a4:4b:ec:3a:38:52:1c:13:37:6b:
         53:aa:d8:7e:af:5e:bb:79:73:1b:bb:e0:e9:1c:92:9f:7f:a4:
         7c:9c:c0:58:24:1b:f0:4e:c6:8c:9a:80:dc:7f:ed:85:3e:c6:
         ba:ff:c1:25:5b:d8:cf:4e:77:5d:a7:ae:b4:3a:69:64:af:8a:
         82:2b:6e:30:5b:32:27:66:fd:68:0a:01:8e:0b:f9:7f:b8:a8:
         3f:59:d7:eb:d0:8c:a1:63:fc:91:bb:a9:13:b1:c3:58:f6:f2:
         a9:3e:33:83:f1:9f:68:f3:ae:e4:92:ff:80:7b:62:71:d9:3d:
         06:05:f9:96:f2:d2:58:df:39:a6:d4:98:db:75:6d:0d:fa:41:
         99:eb:68:b4:52:73:aa:f3:a2:f0:e8:cb:50:bb:f2:b7:1d:22:
         cd:40:30:0d:48:e4:0d:93:cd:ad:36:2d:1b:0e:cc:06:91:00:
         ba:e8:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org