Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          Bz+EWSrncxcWIarRV02gkH2SDFk5elDPUb4UCCxcyOA=
Subject key identifier:   D6:48:29:A9:A0:F0:30:39:DE:7C:DA:0C:6E:7C:0F:08:E8:08:49:77
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       520BB2687B177D6A8220871E2F341934E1BBE0B0
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:28 +0000
ROA not before:           Mon 04 Dec 2023 19:39:28 +0000
ROA not after:            Mon 02 Dec 2024 19:44:28 +0000
asID:                     262901
IP address blocks:        191.240.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:b2:68:7b:17:7d:6a:82:20:87:1e:2f:34:19:34:e1:bb:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:28 2023 GMT
            Not After : Dec  2 19:44:28 2024 GMT
        Subject: CN=D64829A9A0F03039DE7CDA0C6E7C0F08E8084977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:d3:e1:57:a8:15:10:dd:5c:21:d5:82:93:
                    61:3b:15:e6:ad:0c:c5:6f:cc:9b:05:e2:f4:39:1d:
                    2b:43:fc:f8:60:b3:0c:b4:e9:6f:4e:67:72:0f:22:
                    17:5a:eb:0b:31:71:d9:36:9c:90:b2:39:fa:ff:0f:
                    d0:a3:2b:bf:a2:6f:92:1a:da:aa:0a:02:2a:0d:0c:
                    f2:9a:83:5d:36:a2:4a:74:88:3c:cb:c0:bf:ba:6f:
                    77:df:f7:be:28:5d:98:8a:00:c5:55:74:40:42:cd:
                    af:f8:c6:01:d3:25:8e:33:73:cd:1b:a8:bf:96:26:
                    22:c2:97:92:bd:77:db:c3:ce:8c:13:86:48:51:3d:
                    e4:c3:ea:1f:cd:f4:b9:c2:4f:7e:b2:e6:11:2e:80:
                    e4:12:6d:4e:5b:bc:c7:09:d0:f3:cc:c1:7e:b5:84:
                    bd:c8:c5:ff:8c:18:16:72:48:8f:9e:6b:45:ca:53:
                    9a:39:a7:09:21:54:02:82:19:7e:e0:75:09:5e:4e:
                    4d:6d:11:c0:b8:c6:d4:08:09:19:88:c7:82:68:2a:
                    ed:c9:74:11:8b:d5:63:2a:9a:fd:5f:30:4a:f9:f7:
                    31:b3:eb:5e:10:30:f7:e8:15:81:3f:28:ac:5a:d9:
                    9b:38:6a:83:1b:d5:d7:e7:48:05:b5:81:4d:66:8e:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:29:A9:A0:F0:30:39:DE:7C:DA:0C:6E:7C:0F:08:E8:08:49:77
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:51:11:28:f6:6a:a7:24:00:6a:0a:2e:64:76:a9:4d:c3:54:
         92:d0:89:06:d2:5e:89:ff:b8:20:65:04:0e:72:26:26:93:54:
         11:0b:81:65:13:44:26:e8:16:62:15:b9:cb:92:34:be:03:dc:
         7e:ff:f1:a2:ca:aa:7b:db:85:b5:2f:ab:65:b4:d6:a0:63:f6:
         7b:04:f9:b9:af:08:e7:59:81:6b:22:a9:13:95:6e:12:7c:90:
         ce:e0:26:4c:b2:31:2f:b4:24:b0:d2:2b:1e:3c:48:7d:90:55:
         75:6a:f1:dc:7e:55:28:a6:87:1c:f4:d8:0d:ca:27:4d:4f:6b:
         4f:96:7d:b2:fc:8c:9f:7e:37:64:99:fb:a5:10:94:27:09:b1:
         89:67:26:e0:7e:04:70:eb:c0:57:b0:42:84:67:48:54:0e:3c:
         7c:4c:bb:fe:6a:68:0b:06:aa:22:a1:12:64:02:8e:91:33:5a:
         70:1a:bd:64:9e:e4:44:3b:6c:95:f6:6c:12:8f:f0:e2:53:79:
         01:6d:e1:a2:32:51:63:31:61:27:b4:1b:7c:fe:f5:c0:3e:1a:
         35:2d:79:43:df:e1:39:9f:f7:b7:47:01:47:68:d8:5e:0a:17:
         32:65:ee:90:3b:e7:a1:1b:ab:ff:e0:09:e9:9b:1c:89:a5:9a:
         3c:f9:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org