Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138382e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          AksJi7G6BIVYyQWUpHYfHX7kTVy2E2tZzR4fk9spXcA=
Subject key identifier:   52:B8:5E:72:EF:C0:B8:BA:EB:2C:36:0E:01:B7:2C:50:39:98:08:EB
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       1084070B37B2E5124D22A4B292BEC77BBA36E2B0
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:09 +0000
ROA not before:           Mon 04 Dec 2023 19:39:09 +0000
ROA not after:            Mon 02 Dec 2024 19:44:09 +0000
asID:                     262901
IP address blocks:        191.240.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:07:0b:37:b2:e5:12:4d:22:a4:b2:92:be:c7:7b:ba:36:e2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:09 2023 GMT
            Not After : Dec  2 19:44:09 2024 GMT
        Subject: CN=52B85E72EFC0B8BAEB2C360E01B72C50399808EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:07:9a:f4:16:b4:42:b1:97:63:a9:ea:dc:
                    c2:04:5e:e4:6e:ba:c9:ca:7e:a1:71:0d:2d:ab:06:
                    3c:01:ba:3b:44:6d:c4:73:b8:3a:54:94:6d:e4:2c:
                    93:f9:a9:0c:25:ce:86:0a:b1:21:9e:14:c7:70:10:
                    4b:fd:4c:0b:0b:7c:b6:12:70:a2:a9:64:e0:44:1b:
                    64:e3:b3:14:f6:3c:ea:a0:84:82:af:57:e6:97:44:
                    8e:cd:e3:63:b0:c9:37:3e:60:35:85:2a:db:a2:74:
                    89:e0:66:bf:18:5b:78:25:cb:34:04:ac:91:79:03:
                    e7:ca:33:87:96:27:fc:d6:4f:94:35:78:f6:b2:fe:
                    be:f1:73:d7:a3:3a:8a:3e:2f:93:5a:a9:dc:58:a7:
                    1d:64:74:51:f6:db:60:c2:31:4d:29:ba:da:15:ea:
                    52:42:21:ac:93:9c:29:e8:6c:64:d1:fd:74:98:c6:
                    ea:1a:e3:2f:72:fb:2d:33:fc:94:a5:f2:c0:99:84:
                    66:a7:43:86:c8:39:0f:a2:8a:f6:8d:f2:c4:a4:27:
                    02:89:fb:e1:b3:19:93:0d:6c:c0:d7:d7:7a:3d:4d:
                    08:ae:da:7f:a3:1d:ad:b6:7c:af:fd:77:ba:b6:b1:
                    85:4d:2a:00:22:14:bc:ea:b5:9e:b7:8f:71:c0:9a:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B8:5E:72:EF:C0:B8:BA:EB:2C:36:0E:01:B7:2C:50:39:98:08:EB
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138382e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:ba:7e:07:79:91:21:00:88:9f:a5:20:f7:5b:aa:e4:49:
         4a:39:18:09:0e:62:4d:1a:9f:41:f2:3f:82:4c:f8:23:a0:78:
         3e:52:24:74:ef:da:57:9c:c2:e0:22:84:00:0f:07:90:e3:42:
         a0:ab:cb:94:da:3d:c7:a8:f3:d2:11:91:00:27:f4:00:97:33:
         8a:7d:70:fe:13:11:e6:b6:bd:87:dc:ac:d7:02:e4:17:25:36:
         39:7a:ac:ee:dd:d5:ba:21:8f:a4:73:fe:6f:cb:a4:42:14:fd:
         14:2e:74:8e:fb:db:4c:47:34:76:90:ef:54:71:31:83:36:9e:
         a1:4e:53:94:8a:2c:db:44:fb:a5:bb:b4:48:d9:6b:29:02:3d:
         fb:ac:2d:c6:b6:8b:a8:80:c8:00:18:2a:8c:65:98:8d:cd:85:
         ae:7a:a8:d4:67:6d:65:e4:30:2d:54:5c:ca:5c:ba:60:87:cf:
         21:d3:d5:f1:fa:3b:54:ae:6c:f6:66:40:4a:a8:ac:ff:b8:e5:
         1c:70:68:eb:61:ac:66:c2:84:12:fb:8d:2c:c7:a3:80:18:dc:
         bb:53:8a:1e:2f:97:a0:6d:27:5e:81:f1:b7:dd:da:33:f2:fb:
         27:5f:7f:d5:84:b9:c2:b2:5e:d6:cd:66:28:8c:9d:52:ca:46:
         f7:e5:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org