Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138362e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138362e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          8FxcR1IPX2YZaI2u7hMKt8ivx/AdTmtAcinbGmuw9HA=
Subject key identifier:   53:25:E6:97:28:1E:8C:53:79:7D:C0:ED:42:0A:9C:93:07:E2:DB:DE
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       375A4F6CE294AA30778863C0E4D642904F2A379C
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138362e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:33 +0000
ROA not before:           Mon 04 Dec 2023 19:39:33 +0000
ROA not after:            Mon 02 Dec 2024 19:44:33 +0000
asID:                     262901
IP address blocks:        191.240.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:4f:6c:e2:94:aa:30:77:88:63:c0:e4:d6:42:90:4f:2a:37:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:33 2023 GMT
            Not After : Dec  2 19:44:33 2024 GMT
        Subject: CN=5325E697281E8C53797DC0ED420A9C9307E2DBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:bf:bb:ce:65:6c:0f:3f:3b:34:09:18:38:
                    e1:d1:6c:3a:39:fd:d3:01:65:6f:36:28:cf:2f:42:
                    05:f5:f5:e5:88:19:fc:c1:16:9e:56:8b:0a:bd:1f:
                    91:81:8c:96:59:7b:35:39:e8:b0:3d:91:5d:b7:a1:
                    fc:97:e9:95:c1:90:2e:26:9b:68:3d:37:7a:2d:aa:
                    79:4d:04:09:aa:3f:77:dc:63:8c:f9:ed:4a:eb:f2:
                    89:69:84:72:c9:f6:20:e9:0d:03:4b:83:4a:17:44:
                    0b:d5:9d:3a:c4:0a:21:d5:c7:3e:15:f5:22:c8:c5:
                    da:76:f5:52:b8:4e:38:59:cc:9d:bb:e9:84:5a:3f:
                    fa:6c:f6:06:b1:55:44:a4:b3:9f:92:65:d6:7e:2e:
                    72:cb:53:da:23:d3:18:e7:1f:b6:bc:d8:98:62:66:
                    91:0b:9e:1a:ce:48:21:a8:da:39:8a:79:18:dd:36:
                    4a:1a:81:22:e7:5a:cf:bf:49:ef:41:da:33:3b:92:
                    3d:08:d4:58:b1:b3:79:30:5e:74:af:18:43:8f:b0:
                    03:4d:c0:fb:81:9a:f4:91:a2:21:b2:b7:49:eb:07:
                    72:02:72:c8:ce:1b:3c:38:87:ef:4f:73:fb:21:6c:
                    4c:9f:14:23:6c:d9:3a:e9:a2:f9:62:03:ce:fa:79:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:E6:97:28:1E:8C:53:79:7D:C0:ED:42:0A:9C:93:07:E2:DB:DE
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138362e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:6f:a5:8a:9b:c0:b8:56:59:86:85:25:e1:fe:92:d5:6e:
         c6:05:4b:1b:b0:66:a6:26:f6:2d:10:89:fa:ea:06:5f:99:41:
         f6:1a:46:f4:63:c1:63:d8:b5:73:94:32:92:69:ad:db:af:05:
         38:1f:db:65:d2:9d:70:f9:03:1c:5c:ad:16:ca:9f:a9:c0:80:
         a6:52:0d:db:23:94:01:12:fc:0f:98:0d:33:fc:07:b7:b9:be:
         1f:c3:18:bc:3f:bd:80:d8:45:24:c5:36:9d:e6:86:b2:9a:35:
         ca:fe:9f:7e:31:61:18:ca:76:18:70:6b:1a:c1:42:8f:b5:0a:
         b6:09:07:b5:39:9b:1d:c6:51:19:b0:c6:80:af:9b:9a:6a:f0:
         79:4d:b1:f3:34:59:cd:40:e4:5d:7a:7b:a7:12:9f:83:12:f2:
         06:6f:af:12:60:b5:b2:11:1f:dd:e9:ad:9e:61:e9:d1:24:70:
         65:41:6c:4d:64:ff:fd:ff:4a:54:b6:2f:4e:7b:55:e8:bf:09:
         5b:ec:95:30:fe:c4:22:56:b5:fd:ed:99:93:d6:55:16:9a:a3:
         79:af:d2:11:fc:87:4c:0d:29:c0:cf:df:bb:c4:f1:e6:f5:6f:
         33:b8:e2:7c:84:05:a0:25:fd:9c:bd:9f:98:02:b4:db:bb:7a:
         b9:ba:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org