Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32312d3231203d3e20323632393031.roa
File:                     3139312e3234302e3138342e302f32312d3231203d3e20323632393031.roa (raw, json)
Hash identifier:          7dIHIbl3ME5l95rUJM5QospdkCplGkxRez633Sg3EKY=
Subject key identifier:   C5:65:63:4C:A5:CD:DE:FE:C6:B3:4E:4A:29:1E:D5:1B:A0:AE:F3:DB
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       2EDF6A99E6D1B0FDD95C7BD8B13A3FCA8EAAE967
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32312d3231203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:32 +0000
ROA not before:           Mon 04 Dec 2023 19:39:32 +0000
ROA not after:            Mon 02 Dec 2024 19:44:32 +0000
asID:                     262901
IP address blocks:        191.240.184.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:df:6a:99:e6:d1:b0:fd:d9:5c:7b:d8:b1:3a:3f:ca:8e:aa:e9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:32 2023 GMT
            Not After : Dec  2 19:44:32 2024 GMT
        Subject: CN=C565634CA5CDDEFEC6B34E4A291ED51BA0AEF3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:16:c0:f1:c4:3e:ba:bd:0b:e9:25:24:70:
                    58:d7:42:5b:0d:df:19:dd:2f:75:fe:fb:b2:fe:83:
                    d1:c5:36:71:c1:e5:c4:dd:1e:a4:88:4c:94:ee:dd:
                    79:5b:f2:97:d6:f2:5c:b6:20:b6:bb:5f:12:0a:30:
                    70:0e:04:be:df:8d:af:00:d0:64:95:f2:c0:32:a6:
                    89:88:c4:9e:7b:cf:b6:e6:08:80:ab:12:87:da:5a:
                    82:aa:0d:47:bb:18:bf:56:91:e3:29:b4:0f:71:58:
                    a7:df:34:9b:29:b4:47:10:e8:93:06:37:aa:9b:15:
                    b4:84:d3:d5:f9:b6:5f:45:02:6f:b3:b4:f5:96:94:
                    6c:5d:ad:0d:17:99:e3:f3:cd:d7:7e:98:b7:91:5a:
                    1f:c8:35:68:28:8f:11:9b:2e:31:80:2a:6f:6b:ce:
                    92:61:e0:d0:23:0d:a9:28:29:d7:9d:4c:e4:3b:6f:
                    5e:af:2e:b4:6f:1a:40:c3:3b:c1:cb:ea:06:23:87:
                    67:2e:75:16:32:bc:c2:bc:fd:1c:7d:ec:3b:c1:a5:
                    b8:77:2f:1d:6c:9e:7b:1e:d3:38:17:7f:6f:c1:85:
                    f6:00:35:06:99:3e:c6:ec:54:6a:05:73:db:38:67:
                    14:e4:1f:6a:17:3e:b3:2f:aa:a9:11:76:41:50:3d:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:63:4C:A5:CD:DE:FE:C6:B3:4E:4A:29:1E:D5:1B:A0:AE:F3:DB
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32312d3231203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:0f:d7:12:4d:65:41:3b:50:d9:17:d7:19:4a:3b:f6:fc:
         8b:e5:9a:b6:d0:3d:58:82:e5:2d:97:01:de:a0:bb:e1:58:46:
         0f:39:49:25:d2:87:c1:8c:1a:81:e5:16:31:94:ab:bd:1c:0c:
         8c:fb:bf:36:81:8d:a5:24:4f:30:4c:c4:e8:35:07:0c:da:74:
         1f:88:fb:5a:9a:a1:2a:9b:87:1e:56:28:2a:2e:de:7d:71:3d:
         e6:a6:ad:5d:55:e9:64:a6:27:b8:a1:f7:a1:04:a3:13:78:f4:
         29:89:34:2d:c7:91:22:69:d6:d1:94:85:a5:ba:38:00:c3:39:
         4f:5e:d4:c3:d8:60:2a:d4:cf:72:f3:68:20:f2:2d:1f:79:e8:
         05:c7:61:cc:31:9b:d7:f6:75:cf:96:09:a5:c8:79:4e:5b:f2:
         9d:f2:b9:56:71:2f:4a:58:a3:b7:c5:c3:72:02:f8:96:5a:ad:
         00:d6:f4:c8:71:ea:91:db:74:d1:50:5d:a8:3f:50:11:4d:ca:
         fd:09:a0:92:8c:77:88:ba:56:e4:48:e5:0e:ba:9f:ba:07:2f:
         72:64:a1:04:82:ce:d2:42:e7:7a:a2:2d:41:a4:40:b4:6a:b7:
         db:66:f0:3a:b1:b7:98:69:3a:a2:f2:30:f4:ee:2b:6a:d4:a4:
         d7:57:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org