Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137382e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3137382e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          u0ocPmr9xvM8YR8UJl0/VFg1yF85gwcbQctIjSvhyYA=
Subject key identifier:   21:3C:21:27:6A:2C:67:D7:4C:44:92:67:15:E4:E3:E8:3E:07:E2:8B
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       22CBB0BA42B43A2CBC951115D067839B4E3C4E2F
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137382e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:12 +0000
ROA not before:           Mon 04 Dec 2023 19:39:12 +0000
ROA not after:            Mon 02 Dec 2024 19:44:12 +0000
asID:                     262901
IP address blocks:        191.240.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cb:b0:ba:42:b4:3a:2c:bc:95:11:15:d0:67:83:9b:4e:3c:4e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:12 2023 GMT
            Not After : Dec  2 19:44:12 2024 GMT
        Subject: CN=213C21276A2C67D74C44926715E4E3E83E07E28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:20:2c:aa:a4:7d:48:5d:cd:30:6d:1d:7d:
                    98:0d:e7:d3:47:c9:62:65:9a:f3:3b:ca:f7:28:bd:
                    3f:ed:c3:15:71:99:81:8c:a6:18:ce:30:5a:b9:50:
                    2f:ee:46:84:4b:ff:a2:37:fb:62:13:ea:a1:7a:59:
                    e7:b4:2a:a5:bb:fb:05:dc:68:ed:5c:18:74:45:9a:
                    b2:35:25:aa:09:73:27:93:9d:dd:32:ea:eb:71:cc:
                    56:25:80:18:f7:96:62:81:f0:34:d2:fd:e6:f4:2b:
                    2d:36:17:5f:f4:71:a8:a0:20:79:11:5b:97:47:0f:
                    1b:2e:4d:74:50:9b:63:05:9e:ae:c7:98:bf:f6:6a:
                    67:a3:21:7e:83:c3:f0:a0:bc:a5:ae:ab:b1:39:de:
                    76:a5:e4:e8:11:fd:d5:81:c9:de:2b:b6:95:49:82:
                    3b:e3:59:ef:ac:c5:2c:ed:96:db:6a:af:4d:d3:c9:
                    8f:27:55:da:14:4f:8f:b1:64:67:a8:b3:6a:fd:ae:
                    5a:ea:8f:09:0e:81:91:b2:9b:fe:8d:4a:48:c0:16:
                    bf:bf:6a:fc:56:b0:0d:f4:81:4d:ea:53:ff:f4:c2:
                    08:22:96:2e:ed:0a:64:0c:e9:24:1a:1e:42:d2:6f:
                    b1:d7:3e:15:72:5c:5a:67:9c:26:a0:3b:bd:b6:b0:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3C:21:27:6A:2C:67:D7:4C:44:92:67:15:E4:E3:E8:3E:07:E2:8B
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137382e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:98:88:f8:1f:40:c4:92:ef:cd:d2:b9:1d:a7:df:25:9f:
         d5:5f:af:23:ab:2f:84:19:b8:d5:49:ee:0a:19:88:88:96:17:
         74:a9:db:41:d8:75:74:e5:6d:d4:2b:11:ff:b4:b4:64:f7:5e:
         cf:ff:fb:d7:61:8f:09:f6:bb:db:f7:41:c5:21:96:08:6b:cd:
         33:96:b6:f8:81:9a:d3:0b:b8:53:86:9c:dd:1a:c0:60:79:14:
         65:5a:ce:06:b8:af:fd:48:b3:af:0f:5f:53:de:de:4d:da:f5:
         18:a2:7a:57:14:f6:e4:30:85:a2:0b:99:68:70:43:e8:7d:8b:
         85:83:0a:1c:8a:70:62:98:69:69:d3:e1:c1:7f:d7:44:f9:12:
         cc:c3:97:e7:e2:47:37:f5:54:f6:ad:07:95:8f:5d:cd:80:7f:
         67:c6:75:35:45:23:4e:d4:b2:25:49:30:e8:84:7a:80:18:ec:
         c7:ad:2a:32:33:24:b6:b6:f6:be:cd:96:24:5d:c5:c1:9d:68:
         ce:3a:69:dc:ad:a7:f9:31:b2:44:62:3f:58:13:fd:1a:13:a3:
         f3:57:f7:1b:02:85:0d:8c:de:f9:a3:a6:64:0b:d1:52:04:aa:
         f8:54:11:1d:8f:27:32:60:6a:ed:ff:49:e3:57:43:78:51:09:
         72:30:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org