Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3139312e302f32342d3234203d3e20323632393031.roa
File:                     3139312e3234302e3139312e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          FpSdqRfXdTPpeCj8nHrUlZRR3Ch5JDSCxhiUDgKNjPc=
Subject key identifier:   C0:D6:7B:54:50:49:5E:95:5D:24:34:02:E3:D3:FF:8A:10:AB:F4:67
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       760FAA830CC029A6211D8578AA25966591598029
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3139312e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:31 +0000
ROA not before:           Mon 04 Dec 2023 19:39:31 +0000
ROA not after:            Mon 02 Dec 2024 19:44:31 +0000
asID:                     262901
IP address blocks:        191.240.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0f:aa:83:0c:c0:29:a6:21:1d:85:78:aa:25:96:65:91:59:80:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:31 2023 GMT
            Not After : Dec  2 19:44:31 2024 GMT
        Subject: CN=C0D67B5450495E955D243402E3D3FF8A10ABF467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:1d:cb:29:fc:66:43:f4:4e:28:dd:49:91:
                    ab:3c:7a:61:82:8f:47:51:78:66:75:74:78:26:56:
                    0f:07:f4:07:a7:30:36:d8:7a:a8:7d:1a:7c:10:2e:
                    5b:6a:86:03:54:5d:a8:cb:38:a2:48:a0:47:ba:5f:
                    82:a4:62:b7:40:8d:55:28:b4:31:83:2b:47:b0:7e:
                    02:e6:ae:ef:75:3b:2a:bd:36:20:53:8d:af:88:47:
                    48:b0:22:04:08:d7:54:f0:40:cd:f9:c2:b5:85:3c:
                    5d:30:95:80:f5:bb:79:5a:ba:5d:8e:86:ad:9e:ae:
                    42:43:6e:68:f0:a4:60:ab:5b:b9:5f:7c:fd:13:59:
                    d9:c1:2a:38:2f:c2:55:b1:09:6f:f9:35:28:7b:a3:
                    5c:67:3f:3c:58:e4:29:b9:00:97:af:76:22:21:65:
                    c4:c5:d3:f5:34:0d:27:fb:5f:97:eb:16:ae:e9:a6:
                    36:4f:fb:b8:de:32:0a:8e:a0:e3:17:e9:75:e0:58:
                    54:03:d7:3a:94:4f:6c:70:ac:97:ef:cc:8f:20:58:
                    99:b6:08:31:47:df:b6:2e:45:03:13:0c:08:4e:71:
                    44:57:6e:84:ff:28:db:56:b0:23:28:06:0e:9e:93:
                    28:b8:0a:35:e1:71:da:25:7c:a0:33:1f:af:6a:07:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D6:7B:54:50:49:5E:95:5D:24:34:02:E3:D3:FF:8A:10:AB:F4:67
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3139312e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:0b:85:9e:9f:e3:f0:76:f1:72:c0:db:d8:b9:b8:70:09:
         fc:d7:bd:8e:b9:f2:cb:9d:b5:5d:a6:40:f3:b0:fa:bd:08:2e:
         ef:3a:e4:e3:23:bb:b3:ba:1f:e7:21:ad:6d:26:e7:d8:f8:f6:
         2a:bb:19:b0:04:84:73:8a:41:20:bd:03:1a:ec:91:7f:cc:77:
         e5:9e:ae:5e:a8:cb:da:bb:a9:57:e0:ea:d3:9b:37:55:52:42:
         96:e4:79:7f:62:9c:46:a0:14:44:4b:34:0e:48:f6:c5:7e:ba:
         9d:dd:ea:58:35:4f:1f:9d:fa:32:63:ee:a6:84:24:95:ba:56:
         ef:34:ce:15:45:3b:35:35:25:e5:1e:b7:df:49:e5:f5:45:67:
         23:03:a2:ca:f6:65:35:08:19:90:85:51:3f:b2:4b:ea:27:20:
         3f:45:a7:2b:ab:e9:c8:14:dc:5f:77:2b:5e:0c:f5:25:98:47:
         53:a9:a8:e0:8d:b9:66:fa:20:b7:0d:11:23:0b:47:05:be:0a:
         c8:f5:c0:88:96:44:78:28:d1:77:24:46:51:aa:bf:09:91:16:
         e1:28:98:45:e6:d0:7a:a1:e3:9f:09:4e:81:d6:d3:cf:18:3d:
         b5:cf:8b:ee:d9:a2:0e:fd:da:81:d9:9e:7d:ac:16:0f:83:e6:
         00:a5:57:f8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdg+qgwzAKaYhHYV4qiWWZZFZgCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5MzFaFw0yNDEyMDIxOTQ0MzFaMDMxMTAvBgNV
BAMTKEMwRDY3QjU0NTA0OTVFOTU1RDI0MzQwMkUzRDNGRjhBMTBBQkY0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTeR3LKfxmQ/ROKN1Jkas8emGC
j0dReGZ1dHgmVg8H9AenMDbYeqh9GnwQLltqhgNUXajLOKJIoEe6X4KkYrdAjVUo
tDGDK0ewfgLmru91Oyq9NiBTja+IR0iwIgQI11TwQM35wrWFPF0wlYD1u3laul2O
hq2erkJDbmjwpGCrW7lffP0TWdnBKjgvwlWxCW/5NSh7o1xnPzxY5Cm5AJevdiIh
ZcTF0/U0DSf7X5frFq7ppjZP+7jeMgqOoOMX6XXgWFQD1zqUT2xwrJfvzI8gWJm2
CDFH37YuRQMTDAhOcURXboT/KNtWsCMoBg6ekyi4CjXhcdolfKAzH69qB291AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwNZ7VFBJXpVdJDQC49P/ihCr9GcwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wvzANBgkqhkiG9w0BAQsFAAOCAQEASnoL
hZ6f4/B28XLA29i5uHAJ/Ne9jrnyy521XaZA87D6vQgu7zrk4yO7s7of5yGtbSbn
2Pj2KrsZsASEc4pBIL0DGuyRf8x35Z6uXqjL2rupV+Dq05s3VVJCluR5f2KcRqAU
REs0Dkj2xX66nd3qWDVPH536MmPupoQklbpW7zTOFUU7NTUl5R6330nl9UVnIwOi
yvZlNQgZkIVRP7JL6icgP0WnK6vpyBTcX3crXgz1JZhHU6mo4I25Zvogtw0RIwtH
Bb4KyPXAiJZEeCjRdyRGUaq/CZEW4SiYRebQeqHjnwlOgdbTzxg9tc+L7tmiDv3a
gdmefawWD4PmAKVX+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org