Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139392e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139392e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          PTHZu/W9kOsOug8dhEGgi1jymzLRGHbFfSeyvo6/krc=
Subject key identifier:   D5:53:5F:F4:BF:EF:5F:E9:C1:E4:90:1A:1F:87:4F:55:C6:67:B0:C9
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       0FB49D3FD2D8766D3D04B3E5C088E3D0E354EA38
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139392e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:14 +0000
ROA not before:           Mon 04 Dec 2023 19:39:14 +0000
ROA not after:            Mon 02 Dec 2024 19:44:14 +0000
asID:                     262901
IP address blocks:        177.22.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b4:9d:3f:d2:d8:76:6d:3d:04:b3:e5:c0:88:e3:d0:e3:54:ea:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:14 2023 GMT
            Not After : Dec  2 19:44:14 2024 GMT
        Subject: CN=D5535FF4BFEF5FE9C1E4901A1F874F55C667B0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:fa:ca:ea:68:7b:61:b1:b3:9d:0b:c1:05:
                    a2:c7:42:fa:c3:b8:1d:5c:18:fb:ba:16:e8:8c:80:
                    0e:2e:c7:21:fc:16:db:52:04:ed:3d:95:18:79:af:
                    27:0d:5d:9c:59:86:6d:61:37:db:75:02:2f:86:41:
                    55:7a:06:91:87:94:9c:7d:e3:e6:9c:56:3c:b4:99:
                    e8:4a:d0:75:16:94:72:33:fa:4c:fb:fd:5b:af:fc:
                    73:26:40:7f:7d:d5:ec:9c:95:fb:64:21:f5:e2:1c:
                    f7:f1:95:cc:5d:ba:27:01:67:f8:8b:9a:64:0c:65:
                    a6:a8:e0:24:74:01:05:01:f5:e5:f0:53:93:3d:98:
                    30:0b:6d:28:ae:6e:26:de:a1:ac:58:72:2e:4d:4b:
                    17:39:08:fb:09:61:bf:9e:0e:22:d1:0e:33:3a:c9:
                    9e:0c:ab:de:c5:7a:a1:61:f9:e6:d4:e1:c2:0c:52:
                    02:5e:b5:e9:69:fb:95:55:7c:68:4b:9f:bc:53:bf:
                    73:cd:99:be:41:53:fe:a7:47:d8:13:a0:d0:dc:ca:
                    64:9d:1c:bb:69:01:18:9a:14:71:05:f0:93:71:ba:
                    20:c9:99:2e:d9:b4:f8:48:b3:2f:7f:e3:2c:4d:6b:
                    c7:92:71:7f:9d:65:7d:bd:77:41:90:d4:28:65:fa:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:5F:F4:BF:EF:5F:E9:C1:E4:90:1A:1F:87:4F:55:C6:67:B0:C9
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139392e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:79:e6:39:36:b5:42:6a:c7:9b:cc:c7:60:8f:fd:da:48:
         f0:30:cd:d0:8b:59:c6:0c:75:da:02:6c:7d:b3:32:0b:b9:5b:
         1c:82:f4:f5:9c:cb:f0:f2:6d:99:41:79:40:98:7c:75:30:53:
         eb:57:15:9e:24:ca:8e:6d:82:47:a3:e6:aa:d2:b7:7e:f5:70:
         87:fd:5c:5d:19:ec:e5:28:4e:75:11:84:ff:ac:f2:27:6b:03:
         f4:9f:d3:1c:b8:e5:16:58:b7:4d:0d:33:19:60:c5:2a:aa:61:
         24:16:83:ca:29:2a:67:92:da:84:54:17:ec:32:ac:17:85:06:
         96:c6:3d:44:39:e7:85:2a:31:62:01:4f:17:bd:3e:6a:49:ff:
         09:58:5c:07:c0:37:95:1a:ad:d7:af:d2:d0:2b:87:c1:f0:5c:
         5d:19:f6:53:c2:f2:bd:05:54:c0:a8:0e:4f:34:fd:59:89:e5:
         a7:6a:91:79:fa:4b:0e:ca:c3:56:58:2e:68:1a:4b:d1:f2:50:
         02:88:ed:f7:82:0d:48:31:9b:b0:30:55:1a:26:fe:13:96:b7:
         ed:3e:44:85:ff:0c:51:6f:2c:5b:eb:95:af:30:0e:7b:fc:5e:
         e1:6f:af:13:b3:c0:3d:1c:f6:88:06:cb:06:8b:e5:4f:81:8f:
         0c:b6:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org