Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3231203d3e20323633333437.roa
File:                     3137372e32332e39362e302f32312d3231203d3e20323633333437.roa (raw, json)
Hash identifier:          gcnDuanf15sfY8mJLVKknxYuxAFAJ3qWCSK6NsbqMK8=
Subject key identifier:   EE:42:E6:28:C2:60:C5:F7:B2:B6:89:34:34:BA:3C:5A:11:18:37:63
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       67BDC3AB5A5EEAE2DE28E53B80C63887AADEAFAD
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3231203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:40:07 +0000
ROA not before:           Fri 18 Aug 2023 11:35:07 +0000
ROA not after:            Fri 16 Aug 2024 11:40:07 +0000
asID:                     263347
IP address blocks:        177.23.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:c3:ab:5a:5e:ea:e2:de:28:e5:3b:80:c6:38:87:aa:de:af:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 11:35:07 2023 GMT
            Not After : Aug 16 11:40:07 2024 GMT
        Subject: CN=EE42E628C260C5F7B2B6893434BA3C5A11183763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:fe:16:e1:46:0a:4c:c8:15:02:29:f3:4b:
                    0f:3b:f9:b1:ee:9d:ce:d9:23:f4:f6:fb:ac:88:75:
                    10:74:3b:17:da:51:45:d9:ec:67:c3:e6:f4:ac:69:
                    bd:5e:e2:34:c2:9d:cc:4e:bb:e1:c8:cf:82:1f:fb:
                    8f:fe:8f:2a:31:4c:38:47:5f:33:bf:b9:55:60:46:
                    fe:69:b5:d3:e0:66:18:39:4a:7f:ce:55:51:ae:e0:
                    70:fb:4e:e8:12:e9:8a:06:cb:86:5f:ac:9f:9b:60:
                    1d:19:4e:99:05:ef:5b:55:e1:8b:3f:3e:67:bc:5d:
                    55:25:18:99:71:25:4c:d7:f8:c3:95:88:98:15:ef:
                    d0:4a:14:54:13:f9:8f:38:f2:de:59:8c:ec:ba:6b:
                    da:3d:db:91:3e:0f:06:66:a9:50:ae:46:5e:95:3f:
                    ea:90:b2:9a:a2:e9:d9:50:ef:51:71:7f:59:f0:3d:
                    6f:cc:85:06:9b:e1:64:75:14:a3:e7:de:b8:e5:8d:
                    1b:ea:94:84:43:17:84:d8:b7:2f:a1:af:77:f9:50:
                    70:66:ea:c9:b2:83:69:5a:ee:90:03:3c:93:8e:8b:
                    29:42:56:f1:20:85:e5:39:8f:98:7d:00:fb:ce:e1:
                    f7:ec:09:05:88:40:ce:de:04:87:ac:4c:7d:84:b9:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:E6:28:C2:60:C5:F7:B2:B6:89:34:34:BA:3C:5A:11:18:37:63
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3231203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:28:84:49:fe:3f:50:ab:86:47:49:14:28:b5:a1:ce:94:
         4f:c1:08:53:eb:b7:14:ab:0f:f5:58:b8:f5:93:cc:5e:36:df:
         46:9c:ff:48:da:ae:f8:df:b1:13:89:92:db:3c:98:99:60:5d:
         2d:be:ff:da:6c:8f:4a:73:38:c9:e8:b6:c3:11:c5:fe:00:e4:
         a4:03:35:71:7d:96:87:96:0b:91:e8:05:02:28:f0:bd:b5:52:
         41:61:1a:08:74:7b:e5:25:bb:a8:be:48:b0:a8:6c:ef:65:a6:
         4f:b4:c4:e0:01:34:ae:33:bc:5b:cc:49:d1:25:13:2a:33:e5:
         d2:55:c5:83:ae:28:70:e9:e0:25:a8:b2:ca:0f:eb:a0:00:83:
         93:c6:d6:52:fa:7a:36:e4:a9:8b:6a:3e:26:11:1d:8f:d2:f1:
         23:a5:04:d4:e7:a9:a3:4b:6e:9d:10:ae:49:b3:28:b0:d7:e5:
         55:b4:f7:12:05:20:85:3d:a4:db:ad:9a:71:8a:29:fa:dc:cf:
         7a:47:a3:35:d9:71:0e:3f:60:65:2c:7f:9f:ba:7e:d9:a9:5c:
         c6:52:23:16:51:17:d5:a6:f8:46:5a:b1:f2:ed:fc:ac:b9:5c:
         13:f4:87:72:07:47:a2:97:78:43:b9:81:26:d4:fd:f7:e7:bc:
         6b:b0:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org