Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138312e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138312e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          5p27pnOm+opL1Xj519FYGnP3y37aeGu9HaXOtVHszPw=
Subject key identifier:   27:86:6B:10:C8:44:4D:E9:42:76:5F:CD:EE:5F:5C:F1:E4:0A:86:F7
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       7B9BE8283C09790201B4218837542B95187D7458
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138312e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:26 +0000
ROA not before:           Mon 04 Dec 2023 19:39:26 +0000
ROA not after:            Mon 02 Dec 2024 19:44:26 +0000
asID:                     262901
IP address blocks:        191.240.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:e8:28:3c:09:79:02:01:b4:21:88:37:54:2b:95:18:7d:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:26 2023 GMT
            Not After : Dec  2 19:44:26 2024 GMT
        Subject: CN=27866B10C8444DE942765FCDEE5F5CF1E40A86F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:dc:72:54:20:0a:0a:c7:61:53:17:75:e3:
                    df:06:50:b0:11:67:a8:c7:cb:84:4f:1c:80:f9:90:
                    c4:f7:88:ac:1f:41:5c:d2:f0:88:54:50:77:d2:8d:
                    a1:17:b4:3d:b8:7f:38:b8:2d:1d:80:bc:60:85:da:
                    fe:49:87:a9:a7:d6:7b:0e:e9:73:1e:a2:ce:2f:91:
                    8d:13:d4:20:52:ea:c7:66:16:24:b9:7d:58:41:dd:
                    3f:3c:2e:46:08:1b:a0:f7:31:dd:49:0b:0a:da:55:
                    87:d2:5e:1e:5b:1e:b3:e2:56:c3:24:e5:8a:0f:f7:
                    2e:91:89:8c:57:09:1f:9c:cd:02:77:a3:c1:e1:3a:
                    37:42:82:31:c5:79:46:48:0e:90:ba:07:4b:24:e7:
                    20:04:b1:a4:57:12:f5:ff:96:16:7f:6d:ec:ff:83:
                    29:d2:bb:8e:58:37:12:c3:d2:84:0e:56:42:74:4d:
                    46:4d:9d:90:62:a3:05:df:65:b0:cb:1e:89:c3:ee:
                    11:0f:97:9f:5f:bc:df:23:42:45:5f:30:2f:5c:4a:
                    cb:22:d9:35:d1:ff:92:36:04:f6:e2:42:da:ac:cb:
                    f6:af:72:3a:d4:97:39:86:30:12:20:17:f6:46:de:
                    b3:6d:82:4e:ec:58:e6:36:a9:86:24:81:bd:17:a6:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:86:6B:10:C8:44:4D:E9:42:76:5F:CD:EE:5F:5C:F1:E4:0A:86:F7
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138312e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:16:b1:05:b3:0c:a3:40:d6:14:65:02:4c:fc:67:a4:33:33:
         ce:d0:2b:5b:28:d9:34:a6:06:22:30:e6:4c:51:2b:8d:2a:1e:
         37:fc:78:b8:62:d8:9f:13:09:de:1f:ba:86:5c:a7:b3:42:7b:
         db:4f:8a:2b:3a:68:51:db:39:81:ab:e0:cb:e9:c5:86:a9:28:
         20:de:ab:2e:71:50:17:fb:c9:c4:25:f7:a4:03:89:41:a2:74:
         ff:55:a5:3e:29:16:b6:c7:0f:08:c0:49:ca:01:e4:2d:8c:47:
         d2:01:0a:26:36:0c:bb:c0:3b:67:a9:1e:8d:3d:b3:28:cd:b8:
         ea:33:ca:38:f7:5d:4b:59:ad:bc:98:32:44:f4:15:4d:f2:0a:
         13:dc:cb:f5:ee:63:e1:3f:ca:7b:8c:ce:d5:b4:2d:54:f3:3c:
         5b:fd:5c:01:be:55:e8:89:07:d9:83:e4:0f:ad:ab:5c:f7:6c:
         b5:40:44:2d:e1:0c:a5:3b:96:fd:83:b7:0d:ba:88:b8:28:f6:
         38:0e:0b:e4:6f:6d:78:fd:5e:59:fa:a5:bf:89:9e:75:14:30:
         9b:6c:6b:15:c9:0a:31:39:1c:8f:49:45:9b:6f:c0:43:37:35:
         a5:40:66:e9:47:32:9f:42:32:86:18:42:01:7e:8f:f7:80:c7:
         af:16:79:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe5voKDwJeQIBtCGIN1QrlRh9dFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MjZaFw0yNDEyMDIxOTQ0MjZaMDMxMTAvBgNV
BAMTKDI3ODY2QjEwQzg0NDRERTk0Mjc2NUZDREVFNUY1Q0YxRTQwQTg2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i9xyVCAKCsdhUxd1498GULAR
Z6jHy4RPHID5kMT3iKwfQVzS8IhUUHfSjaEXtD24fzi4LR2AvGCF2v5Jh6mn1nsO
6XMeos4vkY0T1CBS6sdmFiS5fVhB3T88LkYIG6D3Md1JCwraVYfSXh5bHrPiVsMk
5YoP9y6RiYxXCR+czQJ3o8HhOjdCgjHFeUZIDpC6B0sk5yAEsaRXEvX/lhZ/bez/
gynSu45YNxLD0oQOVkJ0TUZNnZBiowXfZbDLHonD7hEPl59fvN8jQkVfMC9cSssi
2TXR/5I2BPbiQtqsy/avcjrUlzmGMBIgF/ZG3rNtgk7sWOY2qYYkgb0XpinfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJ4ZrEMhETelCdl/N7l9c8eQKhvcwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wtTANBgkqhkiG9w0BAQsFAAOCAQEAcRax
BbMMo0DWFGUCTPxnpDMzztArWyjZNKYGIjDmTFErjSoeN/x4uGLYnxMJ3h+6hlyn
s0J720+KKzpoUds5gavgy+nFhqkoIN6rLnFQF/vJxCX3pAOJQaJ0/1WlPikWtscP
CMBJygHkLYxH0gEKJjYMu8A7Z6kejT2zKM246jPKOPddS1mtvJgyRPQVTfIKE9zL
9e5j4T/Ke4zO1bQtVPM8W/1cAb5V6IkH2YPkD62rXPdstUBELeEMpTuW/YO3DbqI
uCj2OA4L5G9teP1eWfqlv4medRQwm2xrFckKMTkcj0lFm2/AQzc1pUBm6Ucyn0Iy
hhhCAX6P94DHrxZ56Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org