Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32322d3232203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          Fv0fvEuKGZaOKrEtvZ+BCsb6m7t+pDeGWrK9H2XDEgo=
Subject key identifier:   76:BB:0B:18:DF:9A:DD:34:B3:8D:0F:7A:2B:EB:CE:3A:9E:00:1A:A1
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       42EDB3FE154B5465B7E84769598A837DCD71F674
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:29 +0000
ROA not before:           Mon 04 Dec 2023 19:39:29 +0000
ROA not after:            Mon 02 Dec 2024 19:44:29 +0000
asID:                     262901
IP address blocks:        191.240.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ed:b3:fe:15:4b:54:65:b7:e8:47:69:59:8a:83:7d:cd:71:f6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:29 2023 GMT
            Not After : Dec  2 19:44:29 2024 GMT
        Subject: CN=76BB0B18DF9ADD34B38D0F7A2BEBCE3A9E001AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:d4:2e:61:87:4d:1b:0b:ec:55:f4:71:a5:
                    34:1a:d1:3d:e0:27:f2:1b:a1:59:0e:cc:b0:f5:b8:
                    ab:11:a4:f3:87:d5:79:b7:6d:db:52:87:43:ba:0e:
                    fe:9b:db:76:59:63:c4:d8:f7:e1:35:4d:70:50:8a:
                    5a:bb:67:e3:dc:db:d0:cd:f3:37:b8:d3:c8:83:f5:
                    92:a3:35:49:bb:eb:f4:13:e3:8d:ff:16:82:0d:77:
                    42:8e:e4:6c:03:81:ba:7e:6b:64:61:42:ad:db:bf:
                    ca:9d:9c:a2:2a:d8:dc:12:da:c1:fd:28:93:16:0c:
                    b4:d7:41:5e:34:4a:4c:51:5e:0b:4b:fa:f8:d7:cd:
                    83:c8:c5:db:0b:7a:e1:35:12:29:32:53:3b:d9:2d:
                    74:a0:c9:d2:36:d7:ee:d2:ce:8b:23:de:ec:7b:ca:
                    87:1c:77:0f:f3:a3:56:4e:39:00:d9:4d:0e:e2:f4:
                    18:f6:97:10:fb:95:e1:c5:6e:9f:95:e9:7f:8a:0f:
                    ec:cd:be:a7:e2:9c:19:02:c0:8d:f8:75:72:f8:99:
                    6d:85:28:ef:2a:76:86:62:d8:46:b6:4a:d1:93:a9:
                    56:9d:33:34:a2:b7:c1:a8:74:c9:e5:b8:98:56:e0:
                    da:0d:0b:ba:a3:68:11:8b:38:5a:c9:14:50:50:02:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:0B:18:DF:9A:DD:34:B3:8D:0F:7A:2B:EB:CE:3A:9E:00:1A:A1
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:be:aa:72:fc:b1:0a:22:73:e5:2b:a3:6b:96:21:f7:53:da:
         38:b1:e9:cc:fa:0c:e9:bb:51:52:08:52:ef:40:80:10:fc:a4:
         5d:ea:12:70:5b:85:89:72:99:62:43:74:c8:e8:4d:8a:37:d3:
         f2:5e:66:2d:83:8a:7b:cd:d6:20:4e:3c:d6:ec:e0:50:86:3d:
         04:a8:5c:c3:dc:b7:d5:ea:5d:57:15:5f:88:66:5b:c7:2d:17:
         4d:c7:25:c8:8c:dc:cc:91:83:43:6c:78:8d:da:71:f4:33:b3:
         e3:ee:17:17:ac:4a:51:a0:8e:68:75:fd:f6:81:b3:2f:ab:84:
         9f:ec:b0:93:54:49:92:08:a6:20:b3:97:df:09:c4:ae:59:30:
         4a:5e:88:f4:44:31:22:25:93:70:d9:16:4d:25:76:e2:0a:25:
         a3:29:bf:81:61:58:a8:0d:38:f3:40:dc:9c:8e:b9:73:f2:5e:
         6a:a3:35:98:62:fa:d7:95:9c:f3:58:6b:89:2c:e8:00:ed:f3:
         14:0b:92:d3:1c:ce:49:b9:50:c0:bc:52:e9:4a:33:48:cb:15:
         62:7b:3d:98:3a:8c:7b:b8:2c:e4:b4:8e:b8:9d:72:e7:82:8d:
         a6:d7:eb:63:64:96:19:0e:c1:36:07:e0:d4:3c:0a:51:ca:df:
         02:e9:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org