Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          tYVnvxFeDxVE+ggRlzWL39fMkdw5kMX8DACxoeB60KE=
Subject key identifier:   4C:13:6C:A0:C7:76:B3:D2:96:63:5B:99:99:EB:4E:8D:23:5F:2F:35
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       6450424D6064CE2BD448ECEA43DA2851CE7ECC40
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 10:59:44 +0000
ROA not before:           Fri 18 Aug 2023 10:54:44 +0000
ROA not after:            Fri 16 Aug 2024 10:59:44 +0000
asID:                     263347
IP address blocks:        191.37.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:50:42:4d:60:64:ce:2b:d4:48:ec:ea:43:da:28:51:ce:7e:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:54:44 2023 GMT
            Not After : Aug 16 10:59:44 2024 GMT
        Subject: CN=4C136CA0C776B3D296635B9999EB4E8D235F2F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:6f:8c:81:bc:ae:c4:ec:d0:bf:a7:40:eb:
                    3e:6d:58:1b:07:5f:d5:ad:5c:7a:36:b9:ce:c3:cf:
                    8f:43:44:fc:a3:a9:e3:2d:91:9b:f3:41:77:c7:45:
                    11:45:6b:ba:39:54:8c:86:b5:ad:62:67:1c:29:a8:
                    04:0a:9a:bc:7b:af:66:34:ae:3e:9f:60:84:16:b0:
                    a6:74:07:0c:59:06:51:2a:77:2b:30:04:d9:c5:62:
                    68:18:cd:bf:12:ea:63:cb:e0:e0:d1:d6:45:3c:15:
                    55:76:3d:62:ff:ce:90:05:bf:40:1d:41:04:37:e8:
                    5b:a8:06:34:57:73:1a:85:69:6e:7a:5f:42:0d:09:
                    bd:13:46:ab:bb:bc:a7:dc:68:44:e1:b6:f8:55:23:
                    36:8f:2c:89:75:e4:b7:e7:d2:18:e7:d5:66:69:1b:
                    18:56:6a:3a:a4:02:ca:00:7a:df:2c:f0:9d:4a:85:
                    ee:49:b4:ae:96:26:2d:62:57:f2:e2:fe:ed:3b:99:
                    20:24:6b:a0:b2:17:33:1a:12:70:8d:a6:47:e7:dd:
                    6f:3c:3c:44:f9:6d:2e:15:ff:be:8c:d0:8a:b4:54:
                    10:da:8f:53:d8:02:1d:1b:bd:72:3d:e0:0e:23:e3:
                    80:7e:eb:02:80:7a:ab:76:4c:ce:dd:7e:33:df:70:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:13:6C:A0:C7:76:B3:D2:96:63:5B:99:99:EB:4E:8D:23:5F:2F:35
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:ad:73:e0:4e:de:34:74:8e:8f:ea:b1:fc:3c:f2:72:bd:
         ee:41:46:2a:1e:1c:a6:f2:81:3a:52:59:5a:3d:c5:d2:dd:bc:
         d8:37:dc:ef:8c:94:8d:e4:56:09:98:9c:d5:22:22:4f:6d:e4:
         b2:de:25:87:55:90:1a:08:08:0c:c5:bd:b9:25:f1:9f:1d:ae:
         f8:76:f8:c1:73:5e:9e:64:ef:b0:72:5c:61:bf:13:e0:16:c5:
         53:ca:2a:a9:0e:38:bd:12:09:55:8b:f2:49:54:49:90:a9:05:
         7b:e5:44:b8:04:47:82:2d:2a:2f:b6:f0:be:fd:8e:ec:b6:ef:
         99:f9:8a:1e:48:56:ab:0b:93:f8:59:54:a7:90:2d:a2:fe:b4:
         c6:b6:d2:df:92:65:07:74:0c:a0:88:a9:13:35:62:e0:87:0c:
         3d:54:a5:1f:25:07:40:c3:de:17:48:72:31:3b:0f:6c:9b:cc:
         b3:0d:33:59:39:95:aa:aa:2f:bd:4b:0f:a9:77:9d:02:18:c4:
         d4:9b:0a:4d:9f:23:15:5d:f5:5d:16:42:93:24:52:34:fe:9b:
         59:4f:57:97:6c:a3:26:35:a9:21:99:da:0e:97:7c:35:73:ef:
         4f:f0:06:a6:67:2a:19:af:af:d5:81:d2:84:22:2b:35:ab:4e:
         ba:52:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:10 2024 by rpki-client on console-ams.rpki-client.org