Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138352e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138352e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          ms1gDbxz89FeC/04VuAgmz20L+/gO+E21KNmuEVvmDw=
Subject key identifier:   36:F7:2F:49:26:09:8E:6E:EE:01:C5:84:24:B4:6D:DF:52:9B:B1:C9
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       25DD1D5D7EC90B82646CCC656D9D45D43149E5E0
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138352e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:13 +0000
ROA not before:           Mon 04 Dec 2023 19:39:13 +0000
ROA not after:            Mon 02 Dec 2024 19:44:13 +0000
asID:                     262901
IP address blocks:        191.240.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:dd:1d:5d:7e:c9:0b:82:64:6c:cc:65:6d:9d:45:d4:31:49:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:13 2023 GMT
            Not After : Dec  2 19:44:13 2024 GMT
        Subject: CN=36F72F4926098E6EEE01C58424B46DDF529BB1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:bf:01:b1:0c:54:87:60:f8:c5:22:63:63:
                    d5:0b:6b:7f:45:f0:25:a4:e4:2c:b5:38:ac:ad:ae:
                    44:79:47:46:4e:4a:be:e3:21:81:ad:99:e8:aa:2e:
                    a3:3c:92:bb:e6:7b:07:c0:07:f2:0c:0c:44:5b:a5:
                    08:88:e4:67:e7:99:57:09:82:40:11:80:0b:2f:78:
                    75:04:1b:31:6a:f0:b8:bd:f3:36:61:03:2b:b1:4d:
                    82:ba:05:80:be:89:87:79:b7:10:90:6a:37:95:22:
                    25:f1:75:83:fc:55:4b:3c:34:74:a7:a5:af:43:63:
                    9a:12:51:44:d2:5e:70:ee:22:59:9b:e2:80:2d:1e:
                    b0:42:4d:b6:83:d5:cf:6f:9b:cf:fb:a4:5a:b8:30:
                    b8:27:3c:96:a1:19:db:50:a5:48:59:5d:0c:e9:25:
                    09:72:ed:7c:aa:e2:2d:b5:3a:27:b1:40:46:76:e2:
                    4d:41:bf:94:f3:bd:7e:56:18:31:ac:d0:78:a5:c3:
                    cf:90:4a:4f:7f:8b:d2:31:97:a9:d1:49:fc:7b:78:
                    f0:d3:be:86:55:12:71:0a:e4:2f:4a:1a:6f:6e:f0:
                    a4:9a:2d:8b:a9:4e:c7:d9:ff:14:0e:4f:9c:e1:80:
                    c7:42:d7:11:7c:ae:ad:7a:50:e6:45:e8:76:cb:2f:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:2F:49:26:09:8E:6E:EE:01:C5:84:24:B4:6D:DF:52:9B:B1:C9
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138352e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9d:6f:61:6f:41:70:26:4e:b1:90:60:ae:a1:7a:7f:8f:bd:
         37:ee:ef:4a:47:7f:0c:1a:fe:46:4d:eb:4a:0e:74:95:9e:4c:
         76:87:42:a4:b5:6a:06:1b:93:f6:bf:99:f7:d3:4b:52:43:50:
         a2:2e:90:16:56:88:0b:60:b8:66:b3:ce:c8:5e:4e:05:c3:6e:
         85:06:6f:c0:96:47:de:95:1f:fa:f7:4b:a8:55:84:56:5a:a4:
         7e:21:0e:06:54:64:df:2e:ac:a8:7e:27:b4:3c:91:32:26:aa:
         1d:ae:e1:19:da:0c:fe:13:53:a8:d2:bf:ba:b3:1d:ba:14:13:
         f7:54:d4:59:f2:f1:e8:a4:52:22:99:1d:ac:e0:c2:a6:6d:93:
         d6:23:7e:fa:52:55:7d:6f:55:0d:00:07:74:3d:ea:f7:f2:2d:
         00:de:00:69:92:a2:39:ee:d1:d9:8b:cd:7f:6e:13:35:43:a9:
         92:14:84:e9:09:2a:f9:23:54:af:81:e2:8f:d4:e7:b0:fb:5c:
         0d:d6:89:75:19:93:68:f7:d8:62:3c:67:ff:39:43:2c:d1:69:
         f4:a4:15:f2:aa:50:f9:95:77:dc:cb:38:ff:69:15:89:30:f0:
         09:d7:43:a6:2c:65:f6:9e:40:c0:25:28:83:30:14:2e:6a:b7:
         de:10:52:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJd0dXX7JC4JkbMxlbZ1F1DFJ5eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MTNaFw0yNDEyMDIxOTQ0MTNaMDMxMTAvBgNV
BAMTKDM2RjcyRjQ5MjYwOThFNkVFRTAxQzU4NDI0QjQ2RERGNTI5QkIxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZb8BsQxUh2D4xSJjY9ULa39F
8CWk5Cy1OKytrkR5R0ZOSr7jIYGtmeiqLqM8krvmewfAB/IMDERbpQiI5GfnmVcJ
gkARgAsveHUEGzFq8Li98zZhAyuxTYK6BYC+iYd5txCQajeVIiXxdYP8VUs8NHSn
pa9DY5oSUUTSXnDuIlmb4oAtHrBCTbaD1c9vm8/7pFq4MLgnPJahGdtQpUhZXQzp
JQly7Xyq4i21OiexQEZ24k1Bv5TzvX5WGDGs0Hilw8+QSk9/i9Ixl6nRSfx7ePDT
voZVEnEK5C9KGm9u8KSaLYupTsfZ/xQOT5zhgMdC1xF8rq16UOZF6HbLLyzJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNvcvSSYJjm7uAcWEJLRt31KbsckwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wuTANBgkqhkiG9w0BAQsFAAOCAQEAiZ1v
YW9BcCZOsZBgrqF6f4+9N+7vSkd/DBr+Rk3rSg50lZ5MdodCpLVqBhuT9r+Z99NL
UkNQoi6QFlaIC2C4ZrPOyF5OBcNuhQZvwJZH3pUf+vdLqFWEVlqkfiEOBlRk3y6s
qH4ntDyRMiaqHa7hGdoM/hNTqNK/urMduhQT91TUWfLx6KRSIpkdrODCpm2T1iN+
+lJVfW9VDQAHdD3q9/ItAN4AaZKiOe7R2YvNf24TNUOpkhSE6Qkq+SNUr4Hij9Tn
sPtcDdaJdRmTaPfYYjxn/zlDLNFp9KQV8qpQ+ZV33Ms4/2kViTDwCddDpixl9p5A
wCUogzAULmq33hBS8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org