Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          A0j9sO5zGknkwukS7giJoqqKq6/h6xuWYKSBg02VEqQ=
Subject key identifier:   AA:A3:D2:D3:9C:4D:8B:6F:02:2C:85:5E:D8:4F:72:1F:C2:02:D1:A0
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       48F7EF79B52042E20520B05612138E726C65D477
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:40:11 +0000
ROA not before:           Fri 18 Aug 2023 11:35:11 +0000
ROA not after:            Fri 16 Aug 2024 11:40:11 +0000
asID:                     263347
IP address blocks:        177.23.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f7:ef:79:b5:20:42:e2:05:20:b0:56:12:13:8e:72:6c:65:d4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 11:35:11 2023 GMT
            Not After : Aug 16 11:40:11 2024 GMT
        Subject: CN=AAA3D2D39C4D8B6F022C855ED84F721FC202D1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:82:fd:32:15:fd:3c:19:6b:fe:25:51:1c:
                    c8:4c:c2:de:86:e3:c1:71:66:b1:17:15:43:bf:a5:
                    cc:56:97:e4:13:e2:b8:7c:eb:fa:4d:59:16:d4:ed:
                    0d:d0:08:ee:e5:a6:77:0f:aa:59:02:9c:62:9e:7b:
                    6a:b9:3b:d8:7c:f9:97:fd:46:3c:89:eb:54:fb:49:
                    21:79:b2:e7:6c:a0:eb:e2:11:70:09:df:78:76:af:
                    25:68:74:3c:61:fd:55:96:a2:e5:ea:49:08:87:ea:
                    a1:64:e7:8f:28:ad:6b:9b:47:9b:66:51:de:88:54:
                    bd:c4:44:16:8a:65:60:a2:9a:61:64:49:3f:da:a3:
                    ab:6b:6d:ab:5e:68:2b:d8:27:05:8f:b0:c9:ba:15:
                    9f:bf:9c:3b:b6:72:a5:49:ea:05:9d:b6:b8:96:e6:
                    9a:58:77:3f:ec:9d:81:f1:b0:ed:15:16:59:59:8b:
                    c0:ef:1f:d5:1a:74:d8:f8:32:9c:90:6a:52:88:94:
                    b7:7b:b8:56:ca:14:fb:04:61:f9:a7:af:e9:b7:40:
                    11:ca:af:e0:8b:1c:54:f0:6d:66:71:da:87:92:37:
                    be:74:cf:43:4f:a8:8b:62:9a:e4:15:63:86:8a:da:
                    89:29:ca:43:9e:b7:e6:23:56:51:dc:b8:82:0b:9b:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:D2:D3:9C:4D:8B:6F:02:2C:85:5E:D8:4F:72:1F:C2:02:D1:A0
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:bb:de:be:9a:6b:45:4a:c0:b1:f3:50:07:e0:a5:09:7b:
         fe:fe:1d:3d:fe:04:63:21:a0:f1:52:08:7b:51:c0:ca:69:7d:
         a6:cf:ea:92:93:93:dc:c8:71:f8:8f:14:ec:1c:e2:ef:d6:3a:
         09:00:62:db:9b:cb:88:00:bc:5d:ea:6a:9e:3c:f0:c3:24:57:
         23:7d:3f:22:2a:7d:d6:7c:f0:75:d6:e5:d4:be:f6:d6:b8:c8:
         33:89:fc:96:79:0f:9c:cf:f1:65:7a:ca:30:a3:57:f1:06:8b:
         51:7a:00:31:86:57:9f:8c:49:6c:10:12:dc:75:5c:0a:f5:73:
         92:df:2c:9c:cd:e3:71:4e:b3:53:fc:7c:93:3c:63:75:ad:2f:
         41:f7:24:e4:b9:63:d7:51:d1:e3:75:59:86:59:3c:d9:d5:69:
         69:5c:3a:8b:e6:de:34:18:d2:ab:6b:74:bb:84:d3:fe:3f:3f:
         3b:2d:86:b9:15:b5:84:b9:a1:c2:2c:33:4d:ba:18:96:75:f0:
         6b:82:a3:66:46:94:b0:75:b2:7f:d4:fe:a0:86:aa:ec:39:50:
         e7:01:e0:d9:50:be:40:d7:d5:e1:df:c2:34:3b:6a:5a:36:13:
         64:43:69:72:7f:26:8b:7e:e7:1d:a5:24:8c:97:c7:cd:f0:cd:
         52:0e:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org