Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32322d3232203d3e20323632393031.roa
File:                     3139312e3234302e3138302e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          ligMQavC6ftKfoCHwlF5wnND6wkj92mtw+1cDmpYNLQ=
Subject key identifier:   6A:60:F4:A0:E8:57:D1:49:1B:9D:8A:F7:A6:EC:38:E2:AF:DA:ED:DE
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       1CBD3C58CDF0F46C1D67847DC377CC9CA8D94398
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:28 +0000
ROA not before:           Mon 04 Dec 2023 19:39:28 +0000
ROA not after:            Mon 02 Dec 2024 19:44:28 +0000
asID:                     262901
IP address blocks:        191.240.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bd:3c:58:cd:f0:f4:6c:1d:67:84:7d:c3:77:cc:9c:a8:d9:43:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:28 2023 GMT
            Not After : Dec  2 19:44:28 2024 GMT
        Subject: CN=6A60F4A0E857D1491B9D8AF7A6EC38E2AFDAEDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:55:43:32:d5:c9:32:c9:69:9b:45:86:d3:
                    20:25:83:c2:0b:4b:d8:e5:12:cb:29:4b:24:af:e0:
                    72:78:0d:aa:c1:30:15:b3:6e:e3:f2:09:b8:dc:62:
                    af:4c:d5:9e:a2:21:98:e8:4f:05:58:f5:9f:a4:5a:
                    77:86:04:b8:47:86:f4:97:9f:b2:3f:0d:8a:c4:7b:
                    2f:1b:3c:a1:70:68:e6:3a:73:f3:cd:4e:3d:e7:cd:
                    82:d6:c8:38:14:be:cf:0e:fa:7d:da:14:f4:24:08:
                    98:2c:5b:3a:4d:15:fc:77:ae:be:42:3e:50:a7:34:
                    ae:c0:7e:71:db:07:ab:ba:ac:10:ef:cc:4c:34:52:
                    12:f4:ea:b7:9e:29:33:1e:36:02:5a:e8:23:e4:a6:
                    c5:f8:54:5f:26:ee:2e:0e:a6:2d:fb:4c:18:ff:f5:
                    93:8a:fd:1b:f0:92:f6:3d:2f:01:04:57:0d:9d:ce:
                    fb:a7:5a:99:3a:f0:0a:67:31:c2:af:29:96:8f:f1:
                    d0:71:9f:ea:3d:53:7a:2d:34:a4:82:27:a0:a5:ec:
                    c1:5e:42:28:2d:88:89:54:fe:2a:91:c6:64:7a:00:
                    81:46:43:04:1b:f3:37:08:3b:3f:93:03:21:77:01:
                    7a:c8:72:62:d3:a6:4d:02:72:5d:a1:05:76:f5:1c:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:F4:A0:E8:57:D1:49:1B:9D:8A:F7:A6:EC:38:E2:AF:DA:ED:DE
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e0:73:e6:62:68:32:43:2b:25:6f:2b:a2:23:02:1a:d6:71:
         f3:79:84:4e:e5:25:9f:93:22:3b:15:30:dc:e7:2d:82:cb:3d:
         ee:76:7e:f3:7c:12:e6:52:fe:a5:7b:78:d7:0c:dc:a3:fc:27:
         9d:6c:76:f9:2f:39:c4:f3:8b:50:88:72:da:a0:f4:0b:01:ea:
         fb:31:82:b7:10:3e:fe:62:7b:15:84:9e:04:5f:81:cb:1a:0e:
         d2:67:d4:4a:69:b9:3e:b6:8f:f6:20:63:f3:4d:3d:70:33:ab:
         b4:9d:dd:d7:c8:a9:cd:ad:54:cd:9e:b5:8f:38:d3:6d:0a:41:
         45:d5:66:f3:bc:e4:09:dc:33:c3:d1:a5:7c:b1:58:8b:b1:87:
         79:61:3a:1f:2a:ef:f7:14:59:d3:cf:29:03:c1:82:f8:55:dd:
         79:b4:5f:c7:3a:5e:6d:a6:99:71:9c:91:20:4d:c6:cc:68:7c:
         f3:64:d8:d2:2b:1c:98:ca:cb:47:c4:c9:fb:93:99:7a:5e:84:
         12:8d:9e:d6:7f:c2:ea:0d:5b:76:5d:f0:63:08:8f:3d:aa:fb:
         1d:60:be:fa:f5:4e:33:8b:2e:33:12:7c:96:86:66:da:5d:d2:
         d1:d8:43:86:90:04:a7:e3:f6:ac:de:5a:c0:11:59:a6:9c:36:
         d1:20:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org