Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138392e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3138392e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          h6ZCW2LwqXjwCVQ4O5XnLPslFXccs0A+dxuWE6xpwxw=
Subject key identifier:   11:C7:CF:40:D9:86:2F:BC:68:61:35:F1:93:8F:65:27:5A:A8:1C:C7
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       43F6D6424D4FC6ACB357AA3BD5575904F4A816D9
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138392e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:22 +0000
ROA not before:           Mon 04 Dec 2023 19:39:22 +0000
ROA not after:            Mon 02 Dec 2024 19:44:22 +0000
asID:                     262901
IP address blocks:        191.240.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f6:d6:42:4d:4f:c6:ac:b3:57:aa:3b:d5:57:59:04:f4:a8:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:22 2023 GMT
            Not After : Dec  2 19:44:22 2024 GMT
        Subject: CN=11C7CF40D9862FBC686135F1938F65275AA81CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:9d:1b:01:c2:8a:b2:20:30:67:70:2a:df:
                    fa:aa:39:ef:10:9b:da:55:d8:af:54:39:4a:d2:72:
                    21:3f:7c:e3:5d:bd:43:e7:9c:97:91:7b:21:3f:40:
                    0a:13:f3:8a:f6:a4:69:71:d2:f6:c0:55:1d:81:df:
                    1d:cf:e1:b4:7d:82:8a:36:be:e3:87:67:bf:72:0f:
                    77:d0:fc:d8:4b:5a:cc:62:32:61:92:63:d7:ef:e3:
                    39:a4:00:69:03:46:26:f3:cd:57:a4:af:b0:e4:1f:
                    9f:15:ed:6a:fc:78:a5:08:7c:0c:e7:52:70:5a:81:
                    06:30:6f:d0:49:6e:73:fc:d1:a8:6b:fe:7d:40:2e:
                    27:44:30:85:59:90:41:a7:31:1f:43:85:5c:04:06:
                    e0:a5:b0:94:95:67:17:07:60:98:f0:e9:f6:f4:3d:
                    b7:8b:5b:dd:e6:b4:94:d3:70:be:13:b9:23:6e:62:
                    ff:98:2f:17:92:c7:17:4a:b6:76:84:42:6b:f3:8a:
                    98:ab:c2:f9:0c:52:00:6d:43:82:ae:0b:c9:72:3e:
                    04:01:7c:90:b6:f8:9c:13:f3:b8:b9:c9:70:fd:b0:
                    c7:f3:40:5c:48:06:ff:f9:cf:0a:22:33:c9:e1:38:
                    79:ac:80:3d:7c:dd:4f:fc:f4:76:1d:66:44:4f:d8:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:CF:40:D9:86:2F:BC:68:61:35:F1:93:8F:65:27:5A:A8:1C:C7
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3138392e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:da:67:57:90:70:b3:06:88:bd:9d:8b:6c:db:48:22:13:ba:
         b7:45:63:00:06:8c:ab:75:1e:9c:51:e7:78:09:e8:19:c1:62:
         fa:22:a0:5a:01:93:a1:a0:cd:22:1b:2c:17:53:5e:8b:27:a3:
         93:09:9d:88:64:dc:4a:a1:8b:e5:91:09:86:48:09:e0:15:a9:
         92:63:f0:26:eb:0b:eb:8c:d5:66:ae:c3:59:bc:16:05:6c:3e:
         38:4b:35:ef:13:75:ac:1f:c2:1a:a0:e3:c2:81:ba:18:bc:54:
         4b:bf:04:1b:18:7b:48:b9:ee:d0:1c:e2:7c:94:e0:5f:2e:9c:
         60:59:96:49:ba:98:46:c6:ef:f8:31:19:f5:3a:a4:95:a9:2c:
         27:15:b6:f1:5f:75:79:fd:42:02:94:41:78:5d:48:5f:53:b5:
         11:12:2d:e1:6b:f0:a8:a8:0d:3e:eb:3b:57:90:90:79:ff:0a:
         15:34:e3:03:de:66:d1:5f:c2:64:41:37:0e:fc:61:d9:c7:7c:
         1c:ab:7b:fb:50:02:74:50:9e:1e:59:d0:5c:8e:f5:32:00:1c:
         af:a0:66:c1:70:60:f5:19:1e:42:cb:17:50:ad:d5:42:54:d7:
         9c:a1:8f:f1:eb:b8:3a:80:e8:53:67:f5:1f:a2:52:65:b3:4b:
         92:bc:0c:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ/bWQk1PxqyzV6o71VdZBPSoFtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MjJaFw0yNDEyMDIxOTQ0MjJaMDMxMTAvBgNV
BAMTKDExQzdDRjQwRDk4NjJGQkM2ODYxMzVGMTkzOEY2NTI3NUFBODFDQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsV50bAcKKsiAwZ3Aq3/qqOe8Q
m9pV2K9UOUrSciE/fONdvUPnnJeReyE/QAoT84r2pGlx0vbAVR2B3x3P4bR9goo2
vuOHZ79yD3fQ/NhLWsxiMmGSY9fv4zmkAGkDRibzzVekr7DkH58V7Wr8eKUIfAzn
UnBagQYwb9BJbnP80ahr/n1ALidEMIVZkEGnMR9DhVwEBuClsJSVZxcHYJjw6fb0
PbeLW93mtJTTcL4TuSNuYv+YLxeSxxdKtnaEQmvzipirwvkMUgBtQ4KuC8lyPgQB
fJC2+JwT87i5yXD9sMfzQFxIBv/5zwoiM8nhOHmsgD183U/89HYdZkRP2H4ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEcfPQNmGL7xoYTXxk49lJ1qoHMcwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wvTANBgkqhkiG9w0BAQsFAAOCAQEAidpn
V5BwswaIvZ2LbNtIIhO6t0VjAAaMq3UenFHneAnoGcFi+iKgWgGToaDNIhssF1Ne
iyejkwmdiGTcSqGL5ZEJhkgJ4BWpkmPwJusL64zVZq7DWbwWBWw+OEs17xN1rB/C
GqDjwoG6GLxUS78EGxh7SLnu0BzifJTgXy6cYFmWSbqYRsbv+DEZ9TqklaksJxW2
8V91ef1CApRBeF1IX1O1ERIt4WvwqKgNPus7V5CQef8KFTTjA95m0V/CZEE3Dvxh
2cd8HKt7+1ACdFCeHlnQXI71MgAcr6BmwXBg9RkeQssXUK3VQlTXnKGP8eu4OoDo
U2f1H6JSZbNLkrwMog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org