Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32322d3232203d3e20323632393031.roa
File:                     3139312e3234302e3138382e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          v5C76Er2ldAe7qY/u9smXK4b9P+KqiTQ/Tycs3s4qF0=
Subject key identifier:   35:9C:1D:C2:19:51:84:4F:C2:9E:29:0C:2E:42:B9:CC:6C:56:2C:14
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       281E40CFEBDFEF47F33B2E979B926A79404BDF68
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:37 +0000
ROA not before:           Mon 04 Dec 2023 19:39:37 +0000
ROA not after:            Mon 02 Dec 2024 19:44:37 +0000
asID:                     262901
IP address blocks:        191.240.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:40:cf:eb:df:ef:47:f3:3b:2e:97:9b:92:6a:79:40:4b:df:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:37 2023 GMT
            Not After : Dec  2 19:44:37 2024 GMT
        Subject: CN=359C1DC21951844FC29E290C2E42B9CC6C562C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:85:62:7d:d1:4c:c0:3f:c7:56:68:3f:ba:
                    38:4f:89:74:b1:2a:33:03:2f:eb:f3:40:25:6e:83:
                    3c:26:80:b3:f8:7c:6f:31:12:f1:ff:9d:79:1c:84:
                    f3:5a:7c:cb:7c:69:76:f4:6a:3a:7f:40:56:80:68:
                    60:42:1b:f3:5f:5d:4c:83:0e:63:df:ac:8f:ad:74:
                    d1:7b:4b:b3:13:dd:73:50:71:6e:ae:0d:f2:12:ff:
                    72:25:a0:9a:e7:26:5d:39:d5:79:f8:6d:29:d9:10:
                    39:eb:54:3e:5e:2e:95:88:cf:7a:06:d7:fb:6a:17:
                    62:b7:53:7c:f1:2a:18:e3:f6:f6:2c:35:35:0f:1a:
                    f0:5a:57:25:05:f1:de:01:be:52:63:a3:8b:43:fe:
                    df:22:04:4f:20:57:fe:d5:e1:b0:71:4f:60:4e:fa:
                    51:13:40:a2:ad:a9:79:53:32:7c:64:1b:cd:6d:75:
                    1b:d8:18:21:b5:ec:54:71:c3:9f:ad:70:dc:e1:54:
                    b3:d5:bd:c9:aa:55:3b:d1:16:d0:57:aa:0d:6a:cc:
                    47:55:41:17:88:12:9c:09:19:47:1e:8f:9e:a1:c0:
                    95:69:aa:bf:94:b1:dc:bd:e6:e3:a8:db:8a:da:9f:
                    ca:8f:fa:1a:e9:d3:8e:6a:57:40:07:43:22:61:4d:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9C:1D:C2:19:51:84:4F:C2:9E:29:0C:2E:42:B9:CC:6C:56:2C:14
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:94:85:3e:2b:07:dd:13:39:97:9c:8f:cc:ba:ff:19:6f:85:
         b9:b3:e0:c3:53:0b:82:3c:d4:ee:36:75:ad:77:0c:f5:4d:40:
         55:b3:e7:c9:0b:da:50:b0:47:20:71:4f:7e:ae:33:f2:ab:30:
         4e:67:4f:ff:68:b2:7f:00:e8:12:31:f4:35:fd:78:ab:15:15:
         2c:17:02:2d:ad:07:a5:21:30:11:1d:4f:6a:2f:ad:8a:84:34:
         2e:fc:69:c6:9c:28:5e:9e:7a:fd:69:61:a2:a3:bb:52:14:d4:
         e2:05:21:10:98:41:13:f5:41:ed:e4:fb:bf:4d:be:0e:db:64:
         d9:42:7d:20:95:60:bb:a4:34:09:47:c9:7c:94:61:80:1a:a8:
         62:0e:37:73:07:0c:fc:a1:b5:64:28:85:a7:c1:98:27:81:88:
         c6:5a:48:eb:b1:15:6b:0f:11:cd:e8:52:1d:90:5b:f2:1e:a1:
         0e:66:ac:cd:22:bf:fa:d1:fa:5d:07:ef:06:3f:3b:cf:d7:0a:
         3a:e3:62:9e:ba:66:d6:96:87:68:03:10:56:39:0f:f8:aa:d6:
         d5:b4:8c:cf:ce:f1:ae:96:9c:47:c0:a7:40:89:86:d2:5c:bf:
         67:84:51:91:37:0c:6a:65:c0:c2:cc:db:a0:a3:b3:cb:ee:91:
         2b:4a:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org