Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138322e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138322e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          RgiyoTy3O97FeQv+FWp8jpIWtwRl6SMBvLz0tS1QKsA=
Subject key identifier:   00:1C:52:EA:D7:76:8B:EF:F1:25:13:48:BA:73:44:3D:33:1E:EB:D5
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       3ADBF18F877C4B5422FFDE6194207EB3D2D2B7AC
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138322e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:16 +0000
ROA not before:           Mon 04 Dec 2023 19:39:16 +0000
ROA not after:            Mon 02 Dec 2024 19:44:16 +0000
asID:                     262901
IP address blocks:        191.240.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:db:f1:8f:87:7c:4b:54:22:ff:de:61:94:20:7e:b3:d2:d2:b7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:16 2023 GMT
            Not After : Dec  2 19:44:16 2024 GMT
        Subject: CN=001C52EAD7768BEFF1251348BA73443D331EEBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:c5:fe:5c:2a:42:cc:b9:1a:9a:a4:ec:9a:
                    3a:67:f1:70:1a:0b:ad:b7:c3:ae:eb:ca:3c:c9:69:
                    30:c6:84:39:b1:64:a1:2e:10:de:49:4f:c3:82:de:
                    71:ab:35:58:3d:0c:51:a0:ab:41:b4:1c:d2:66:be:
                    96:4d:28:1a:22:60:54:18:9a:7f:1a:dd:32:de:c7:
                    16:72:8f:6a:69:9f:96:cc:62:a3:cf:25:f9:12:d2:
                    00:ef:b5:0f:e8:c8:9c:fe:c6:ed:7e:03:d7:c5:14:
                    b1:21:ff:fa:01:82:51:c2:87:94:70:a7:ba:a6:29:
                    c1:c7:54:58:02:47:9d:54:84:5d:e0:e0:a5:08:b1:
                    40:1b:fd:f1:a7:70:c3:83:c1:ba:2c:68:83:a6:03:
                    3a:44:da:1e:b0:a1:35:84:9a:e9:b7:32:f8:9f:3a:
                    27:51:94:05:0a:17:59:dd:c8:a8:0b:93:68:ec:3d:
                    11:ac:90:ee:0c:ad:d0:f0:47:01:a0:d3:be:1d:d8:
                    76:aa:0e:37:fd:fc:b3:96:69:1e:f7:8b:a8:c7:ec:
                    32:47:55:87:43:ef:4d:fe:e7:11:b6:e9:54:9d:9f:
                    34:8c:42:fd:62:08:c7:4a:92:36:29:e3:68:5d:67:
                    50:22:17:8c:fe:02:ec:24:0e:08:c6:2a:f2:92:ae:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:52:EA:D7:76:8B:EF:F1:25:13:48:BA:73:44:3D:33:1E:EB:D5
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138322e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:da:5a:14:c6:e3:ba:22:0a:9a:b8:54:d6:21:d9:4a:42:
         14:46:18:d5:0e:34:72:66:9b:c5:0f:60:27:b0:97:fc:9a:0c:
         00:9b:03:d8:3a:37:05:08:25:a6:8c:9a:00:03:67:0f:90:5c:
         c6:b4:2b:ee:20:8d:26:23:15:d5:89:07:06:76:12:e5:74:50:
         2b:98:1f:95:d0:d9:51:f0:c3:8f:f9:93:a9:f2:3c:82:01:57:
         c6:fd:ac:46:1b:19:ef:04:28:fb:a0:3c:7b:d9:79:c6:cf:25:
         a8:5b:d8:f1:da:ed:a7:24:13:de:48:cd:55:07:c7:69:54:5e:
         ff:a1:58:30:c2:93:ed:37:63:a4:a8:7e:b6:dc:d7:6b:6f:da:
         8f:ec:67:29:54:fc:41:e4:e7:da:ec:77:ef:b1:fd:44:bc:85:
         16:b5:78:1d:d0:24:18:c4:b0:8e:74:40:27:56:29:56:b7:75:
         a9:b2:a3:44:72:86:ef:33:ee:f1:18:1c:92:02:45:6d:3f:23:
         a5:23:f1:51:f9:f6:cc:d8:97:97:68:fd:32:22:2d:37:66:ef:
         15:00:e8:60:6b:bb:61:7f:76:16:8a:98:02:b5:b9:e2:80:b3:
         d4:32:76:b7:09:1b:43:7c:40:05:c8:28:f3:72:86:7a:09:3f:
         1b:2c:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org