Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3230203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3230203d3e20323632393031.roa (raw, json)
Hash identifier:          M/XjSCL5+2qf/+S8RvKuz5K+S/fuZip1ID9lErnr5K8=
Subject key identifier:   D5:72:05:2F:34:58:64:9B:CD:D0:70:30:DE:48:9B:26:04:5F:C6:F7
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       40E949C2EB97BC48124097DEBAE2BCBCA47CC331
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3230203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:15 +0000
ROA not before:           Mon 04 Dec 2023 19:39:15 +0000
ROA not after:            Mon 02 Dec 2024 19:44:15 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e9:49:c2:eb:97:bc:48:12:40:97:de:ba:e2:bc:bc:a4:7c:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:15 2023 GMT
            Not After : Dec  2 19:44:15 2024 GMT
        Subject: CN=D572052F3458649BCDD07030DE489B26045FC6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:96:2c:96:f0:1d:27:81:5b:26:e1:66:21:
                    ec:c1:f2:0c:40:72:38:e3:b9:95:20:f8:3d:62:1d:
                    fe:2d:0e:24:16:34:88:9f:6e:ed:6a:cb:54:3c:a8:
                    b2:41:41:5b:88:99:51:0f:95:9d:68:77:f0:2b:a5:
                    9e:91:e3:10:87:34:3d:6b:58:5a:5c:e2:05:4d:22:
                    5d:c1:ab:91:04:c3:1e:cd:a6:2f:26:29:71:03:92:
                    f6:cb:78:d1:5d:5d:2f:4a:15:ef:b0:eb:39:e3:81:
                    62:f3:dc:c8:6f:96:6d:59:e2:a1:67:33:a8:3b:41:
                    f8:1f:b4:db:ad:3e:da:ce:ea:52:d1:99:a6:bc:01:
                    b5:3a:62:ba:13:0f:f9:d6:66:32:d6:64:a5:44:f9:
                    8a:09:c7:05:4a:4b:9e:97:4c:5c:32:91:8c:17:ff:
                    c9:65:94:27:52:01:da:c8:10:12:04:78:f6:a4:77:
                    86:87:68:67:cf:2a:ae:65:6d:5e:aa:53:6e:eb:89:
                    99:bb:be:e0:97:25:42:3c:97:84:83:6a:81:0a:5e:
                    1e:c3:53:76:9b:a4:a9:96:e9:b9:ed:9f:0d:04:99:
                    52:02:78:6a:1d:74:1d:cf:31:af:6a:57:fe:75:a9:
                    bf:1b:5c:01:5b:c4:ce:f1:1d:7c:89:c0:81:3e:a9:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:72:05:2F:34:58:64:9B:CD:D0:70:30:DE:48:9B:26:04:5F:C6:F7
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3230203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:de:d3:2c:02:cc:46:4c:ff:4c:bf:60:f3:01:b7:39:2d:58:
         0f:94:e7:4c:bc:ca:aa:45:29:59:02:f6:60:a2:89:d3:14:30:
         e5:47:d7:bd:67:6f:9d:9d:4f:74:c6:ce:76:5c:0b:f6:8b:13:
         ce:bb:07:00:e9:f4:b4:6a:59:f0:6b:3c:df:f0:90:0e:a6:e3:
         a4:f9:2b:9c:55:66:fd:f6:a5:ee:7a:a5:47:f2:15:1b:09:f8:
         94:e4:14:96:1c:16:cf:db:1b:78:40:29:15:a4:0f:10:eb:c7:
         11:42:5e:fd:75:90:2d:f3:4e:de:fb:78:78:ba:0d:27:9a:13:
         46:60:3c:44:2a:30:36:0a:eb:6f:64:3a:50:98:9b:fd:51:16:
         a8:cf:06:a7:08:ad:2e:93:91:29:08:11:62:87:9a:6b:03:b6:
         81:39:ca:d8:1d:52:75:9a:d3:bf:83:df:27:4e:bd:91:42:ea:
         6a:5c:d8:9f:a0:64:48:b1:bc:42:8e:5d:4c:b6:24:d6:0a:42:
         f1:5b:b6:ca:4e:bd:e0:5d:53:9a:e7:10:c1:cd:41:42:45:be:
         bb:04:40:c6:71:f1:11:f8:be:d9:fa:bf:c3:eb:83:9e:2d:b0:
         c0:e6:ad:c6:7b:1e:10:29:8e:0c:65:b3:60:64:d6:a2:4a:00:
         bf:0d:61:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQOlJwuuXvEgSQJfeuuK8vKR8wzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MTVaFw0yNDEyMDIxOTQ0MTVaMDMxMTAvBgNV
BAMTKEQ1NzIwNTJGMzQ1ODY0OUJDREQwNzAzMERFNDg5QjI2MDQ1RkM2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpSJYslvAdJ4FbJuFmIezB8gxA
cjjjuZUg+D1iHf4tDiQWNIifbu1qy1Q8qLJBQVuImVEPlZ1od/ArpZ6R4xCHND1r
WFpc4gVNIl3Bq5EEwx7Npi8mKXEDkvbLeNFdXS9KFe+w6znjgWLz3Mhvlm1Z4qFn
M6g7QfgftNutPtrO6lLRmaa8AbU6YroTD/nWZjLWZKVE+YoJxwVKS56XTFwykYwX
/8lllCdSAdrIEBIEePakd4aHaGfPKq5lbV6qU27riZm7vuCXJUI8l4SDaoEKXh7D
U3abpKmW6bntnw0EmVICeGoddB3PMa9qV/51qb8bXAFbxM7xHXyJwIE+qRN3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1XIFLzRYZJvN0HAw3kibJgRfxvcwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL/wsDANBgkqhkiG9w0BAQsFAAOCAQEAdN7T
LALMRkz/TL9g8wG3OS1YD5TnTLzKqkUpWQL2YKKJ0xQw5UfXvWdvnZ1PdMbOdlwL
9osTzrsHAOn0tGpZ8Gs83/CQDqbjpPkrnFVm/fal7nqlR/IVGwn4lOQUlhwWz9sb
eEApFaQPEOvHEUJe/XWQLfNO3vt4eLoNJ5oTRmA8RCowNgrrb2Q6UJib/VEWqM8G
pwitLpORKQgRYoeaawO2gTnK2B1SdZrTv4PfJ069kULqalzYn6BkSLG8Qo5dTLYk
1gpC8Vu2yk694F1TmucQwc1BQkW+uwRAxnHxEfi+2fq/w+uDni2wwOatxnseECmO
DGWzYGTWokoAvw1hWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org