Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137392e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3137392e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          +rNZCu6163haOmhcUm0eFal7myQqYbtrgMM59rKIBHk=
Subject key identifier:   71:51:53:2D:A1:79:3E:5D:6D:D8:5E:02:5B:20:63:06:4B:12:23:8E
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       41E100040E2253B0ECBE19386E62B984B34D8785
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137392e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:11 +0000
ROA not before:           Mon 04 Dec 2023 19:39:11 +0000
ROA not after:            Mon 02 Dec 2024 19:44:11 +0000
asID:                     262901
IP address blocks:        191.240.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:00:04:0e:22:53:b0:ec:be:19:38:6e:62:b9:84:b3:4d:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:11 2023 GMT
            Not After : Dec  2 19:44:11 2024 GMT
        Subject: CN=7151532DA1793E5D6DD85E025B2063064B12238E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:7c:0d:a4:d8:05:f6:f3:2c:f6:06:64:4c:
                    0e:4d:89:f2:36:7d:d8:a4:e8:3e:e9:8d:46:ac:8d:
                    eb:3a:20:9e:60:df:f9:de:cb:bf:ee:8f:88:83:04:
                    98:09:d1:6a:57:7e:fe:43:95:26:a2:4d:87:ae:ab:
                    67:7a:17:b4:cd:c1:67:e4:eb:0b:99:8d:2c:db:7e:
                    08:67:54:59:45:1e:f2:fb:bd:7b:76:1b:d5:67:35:
                    54:a8:f0:85:b3:2c:6e:d8:90:33:c9:d8:99:1c:8d:
                    7c:1a:07:8d:1f:17:7d:b8:00:3c:b5:1c:63:d4:6b:
                    77:4a:40:47:26:24:7a:e4:a2:02:90:62:02:56:38:
                    90:74:99:34:aa:4b:77:6a:dd:37:3e:b8:52:f0:03:
                    ff:9c:c8:6d:3f:90:33:f3:85:df:75:71:c0:49:42:
                    ad:56:9a:3f:56:0c:2b:a7:85:e9:99:4c:79:17:28:
                    a9:a6:30:b3:0d:05:b4:4e:ed:5c:19:c7:58:a5:92:
                    52:34:18:20:28:f7:58:f6:1f:76:e5:fd:86:af:41:
                    bf:ba:ec:af:17:e0:75:c5:ab:bc:41:c2:5f:91:00:
                    90:e6:c0:8a:31:0f:72:c8:b4:ec:90:00:c8:50:38:
                    67:d8:88:18:09:94:64:ca:47:a3:5c:31:a1:49:a7:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:53:2D:A1:79:3E:5D:6D:D8:5E:02:5B:20:63:06:4B:12:23:8E
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137392e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:08:16:88:52:19:b1:7d:db:40:07:4c:a4:69:48:a7:46:
         d5:b8:2b:e5:70:c1:35:61:33:b0:e7:32:0f:84:b3:38:ea:b6:
         75:cf:4c:a5:6a:7e:53:9a:40:fd:a7:31:b7:36:17:eb:40:35:
         79:0b:7b:fc:76:fb:05:df:c3:29:78:ae:44:63:a9:93:a2:9f:
         f8:52:20:d5:ba:6b:1c:5c:79:5a:a2:18:f2:b7:32:40:8a:5d:
         a8:a3:25:d4:41:ed:87:eb:a4:db:39:0c:0a:d5:c1:17:2a:3a:
         36:61:af:b0:50:17:c8:1c:0d:bc:b3:90:b6:62:f2:56:b8:0f:
         7c:0f:4e:1b:4b:d3:96:c0:67:42:f5:f3:07:bb:7a:b7:61:21:
         67:23:13:ee:78:04:25:e3:6d:aa:8c:84:36:fe:17:7c:ab:a4:
         5a:90:e5:96:a9:86:59:35:76:39:b8:27:16:29:44:85:0a:5b:
         09:bf:8d:8c:cf:fa:e7:1b:8a:3c:1d:6b:14:22:b4:bf:b3:42:
         32:9f:8a:a2:19:97:8f:7d:1b:1a:9f:fc:e5:ad:bc:57:12:c1:
         d4:77:af:42:84:98:6a:28:28:d2:2c:0f:b5:cc:7c:da:bd:fd:
         be:20:0b:f4:a4:45:be:3e:65:e8:b2:84:3a:41:30:38:40:af:
         37:d1:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org