Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138302e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          j1OY9oVNL/sAIqY09wK4g9td8G/zKHTAjV3Xevf+Zho=
Subject key identifier:   8B:AA:1C:38:9A:88:C9:49:C7:50:58:D4:EB:93:C1:7E:BC:D7:D9:8C
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       53DFBF7E8E58FD340F1FBAD346738C51C2FDC96C
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:38 +0000
ROA not before:           Mon 04 Dec 2023 19:39:38 +0000
ROA not after:            Mon 02 Dec 2024 19:44:38 +0000
asID:                     262901
IP address blocks:        191.240.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:df:bf:7e:8e:58:fd:34:0f:1f:ba:d3:46:73:8c:51:c2:fd:c9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:38 2023 GMT
            Not After : Dec  2 19:44:38 2024 GMT
        Subject: CN=8BAA1C389A88C949C75058D4EB93C17EBCD7D98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:ed:8e:c4:f7:0c:cf:77:b1:1e:74:4d:14:
                    47:ac:49:f2:0d:c6:9d:e8:a5:47:5c:a7:72:6e:47:
                    f4:7f:1d:db:d1:78:14:2b:fe:92:71:57:d6:6a:01:
                    41:23:b9:de:2e:6d:a3:6d:06:1e:d2:87:23:47:4e:
                    d6:4a:31:24:25:12:63:2e:c1:a3:b2:fb:21:b4:1d:
                    08:eb:69:f8:4d:23:25:1f:8a:bf:b6:8a:58:9f:43:
                    e2:29:ac:92:51:fc:2b:7e:7c:6f:df:f7:3d:02:b9:
                    bf:87:da:6a:63:26:8b:87:c8:03:45:9e:c3:06:82:
                    1a:a8:b0:a4:84:eb:d6:6e:96:f5:ac:0c:fc:7b:db:
                    02:4e:0b:b0:ae:3b:6d:33:69:cd:38:e5:1c:3c:f0:
                    29:0d:5f:26:b5:c1:4b:fe:e1:c5:3f:e9:f2:5f:90:
                    b4:59:23:66:84:9c:28:c6:b1:09:f1:22:db:a6:b8:
                    ec:08:72:ef:83:a0:20:8c:59:40:ba:98:21:08:3d:
                    63:60:0c:14:a7:00:bd:03:8d:71:f8:dc:de:94:27:
                    1f:8d:30:f6:64:9f:d4:94:43:0f:e5:a4:0e:c2:70:
                    16:27:99:48:a9:64:db:5e:ba:c5:d9:c0:0b:79:e2:
                    6d:18:06:9c:fe:f7:a5:71:b0:ee:be:a9:0e:9d:6d:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:1C:38:9A:88:C9:49:C7:50:58:D4:EB:93:C1:7E:BC:D7:D9:8C
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138302e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:96:c9:12:e2:4d:2c:f2:2b:7c:36:d2:97:c0:3d:17:54:8d:
         7e:6a:6f:35:3b:c8:b9:f1:92:1c:8c:0d:6d:df:06:dc:c5:cf:
         fe:25:e3:f4:53:9d:17:b1:c3:fe:cb:74:a0:b0:86:15:95:ba:
         f2:7e:50:b7:df:68:c3:d8:b5:fb:1e:0c:66:37:df:a5:92:bb:
         db:2f:57:18:1e:84:11:de:98:99:0f:bf:c9:37:66:6b:19:56:
         3d:b6:cb:0c:cc:0c:c2:d3:74:2c:cb:60:49:20:74:28:0b:2b:
         4c:74:4e:ba:8e:86:c8:01:3e:e9:aa:b5:01:f5:7b:4c:1a:4a:
         77:c7:52:ff:56:b6:07:02:17:a7:5b:a5:b6:df:dc:5a:55:79:
         0e:33:dd:6e:8d:51:c0:bf:82:2c:3c:ed:f5:3a:a7:a8:73:47:
         2b:60:2d:1c:db:f8:70:b4:c1:9d:ce:5d:6d:ef:06:96:f6:a7:
         66:7a:d2:e3:a6:f8:41:a8:eb:a5:bc:36:14:9f:52:88:49:1c:
         0c:e4:67:eb:2c:69:04:25:d2:c6:77:98:c7:52:6c:6c:75:6c:
         00:18:ea:c5:74:fd:10:86:8e:da:d8:da:4f:10:df:38:00:c3:
         54:9c:28:73:e5:c1:5e:23:31:c5:f5:8f:c4:c9:f4:97:a5:6d:
         65:18:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org