Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138342e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          DfKy06nMveYLxBs2dk1Mt0U5Q0pqIVPuIwUj1aTZ3Ks=
Subject key identifier:   C8:C0:AE:EE:E4:0A:39:22:CA:37:04:41:E4:6A:71:06:03:7B:A6:AD
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       67F9634F9E33E2D822BA8C7E4E50539CFDCE21A4
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:28 +0000
ROA not before:           Mon 04 Dec 2023 19:39:28 +0000
ROA not after:            Mon 02 Dec 2024 19:44:28 +0000
asID:                     262901
IP address blocks:        191.240.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f9:63:4f:9e:33:e2:d8:22:ba:8c:7e:4e:50:53:9c:fd:ce:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:28 2023 GMT
            Not After : Dec  2 19:44:28 2024 GMT
        Subject: CN=C8C0AEEEE40A3922CA370441E46A7106037BA6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:60:34:64:ca:6b:76:1b:20:c8:8e:79:1f:
                    1d:d2:19:f3:ac:c2:f9:8b:ba:ef:83:42:1a:a8:23:
                    80:5b:29:81:f1:75:d7:17:85:e5:aa:17:f5:85:d0:
                    f2:9c:37:37:26:7f:38:de:c9:2f:14:4c:eb:90:5d:
                    e7:ef:be:29:28:53:66:d1:71:06:94:21:03:ad:c8:
                    04:c0:b4:f3:3d:66:b6:df:aa:12:8a:79:db:cd:c5:
                    4f:b3:c2:65:63:49:94:71:8d:98:53:2d:f1:09:d1:
                    e8:a6:c2:af:34:ef:92:8d:c2:94:e4:68:71:7c:1b:
                    20:49:4f:81:da:bc:d4:7a:20:c5:64:fc:73:b7:9b:
                    01:b8:54:9a:93:8f:69:08:9d:20:8d:bd:cd:be:99:
                    fb:d9:f5:8d:df:32:13:57:3b:7d:f9:e1:3e:1a:8b:
                    40:77:cc:b2:c7:a5:85:72:79:8f:52:cf:62:45:d9:
                    3f:87:b9:99:ae:3e:f5:40:71:1a:a3:65:8b:02:aa:
                    3b:0d:e8:c1:61:12:0f:2d:30:e9:0c:49:d1:61:33:
                    39:1d:30:bd:41:5c:e9:41:f3:04:57:66:91:ba:c0:
                    86:2b:cd:24:ca:ef:22:d1:95:74:a4:bb:3a:7a:e2:
                    ec:d2:7a:60:50:e9:af:d0:7b:89:dd:08:e4:ab:fd:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C0:AE:EE:E4:0A:39:22:CA:37:04:41:E4:6A:71:06:03:7B:A6:AD
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138342e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:9c:85:20:1e:b8:9a:a4:d7:8b:5b:b8:dd:67:29:2d:04:
         01:9b:bb:bd:23:03:9e:01:ea:c5:03:ee:70:dc:dd:14:e0:8c:
         d9:2b:f1:06:8b:0f:e0:32:74:3a:80:f0:c7:16:a9:b0:61:e8:
         45:66:01:38:aa:28:5a:b7:4e:b0:97:8e:df:98:84:66:08:6b:
         fd:6b:61:7c:26:4e:26:88:df:14:5a:26:59:0d:55:64:b6:85:
         ea:69:88:f1:f8:c1:cb:cc:49:e2:8c:38:40:91:bb:56:08:12:
         6a:2d:8b:6d:c4:c7:2d:51:d5:ba:2b:ff:2e:2b:7b:02:0c:db:
         83:1b:59:a5:6b:ad:01:fc:d1:c0:07:53:86:6f:58:8b:0f:c2:
         52:10:09:2f:ed:da:44:44:bb:c7:7a:d4:25:03:ae:69:f2:fc:
         b0:d6:62:c3:98:c4:62:05:28:05:80:9e:03:dc:f5:bb:75:76:
         b9:04:ea:41:4a:e0:e0:70:f7:6f:c1:b6:90:ed:53:97:16:11:
         b7:fe:a9:40:eb:c0:c0:e0:96:d3:1d:c2:6e:23:e9:c8:ad:bb:
         25:a7:f4:84:8b:e8:79:0f:89:94:7d:de:b9:e4:bb:83:41:6c:
         bf:87:12:84:1c:53:ac:5a:16:eb:67:99:d6:ff:28:56:cf:70:
         3b:d8:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org