Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3234203d3e20323633333437.roa
File:                     3137372e32332e39362e302f32312d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          Cz+WhJr/JUJuLJNyJMKkGKJpQK6swcLVIT7uaRhjv6s=
Subject key identifier:   CA:BE:E4:64:6B:9A:22:CA:57:24:6F:57:F2:F2:42:32:A6:36:C8:73
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       6770B1E428A5B9C07B3D3D42FDC47982DFF5ADAB
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3234203d3e20323633333437.roa
Signing time:             Mon 03 Jul 2023 14:22:59 +0000
ROA not before:           Mon 03 Jul 2023 14:17:59 +0000
ROA not after:            Mon 01 Jul 2024 14:22:59 +0000
asID:                     263347
IP address blocks:        177.23.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:70:b1:e4:28:a5:b9:c0:7b:3d:3d:42:fd:c4:79:82:df:f5:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jul  3 14:17:59 2023 GMT
            Not After : Jul  1 14:22:59 2024 GMT
        Subject: CN=CABEE4646B9A22CA57246F57F2F24232A636C873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:32:0f:0c:ab:a4:2f:3d:dd:f7:56:2a:95:
                    b1:0b:2a:67:2b:e8:5f:30:11:26:38:73:61:77:4e:
                    e2:f4:49:02:e0:ef:16:55:25:a0:44:a7:64:15:da:
                    43:0d:0e:6a:2a:e4:3d:1b:89:4b:e4:57:df:ef:9a:
                    44:3a:f5:bd:19:69:53:4d:05:2e:27:d3:fd:fa:82:
                    19:dd:78:c4:89:ab:6d:cc:ec:11:52:ce:61:3f:a3:
                    d2:1c:68:be:02:e7:72:8b:14:e9:6a:ca:96:53:79:
                    43:32:f4:87:e9:b9:78:58:e8:f3:e9:78:14:df:4e:
                    5f:33:fb:5f:cb:f7:cc:df:95:75:46:60:6b:a4:82:
                    d9:8d:1e:09:e2:e5:c1:af:21:04:18:85:93:a0:85:
                    49:c7:9d:42:55:44:dc:a8:cd:5a:98:3c:78:5d:c4:
                    1e:57:6a:df:d2:44:bb:15:16:46:ae:0b:a1:dc:4d:
                    f5:09:2e:27:b2:13:20:04:25:31:8f:a9:e0:e8:6f:
                    a1:91:6d:14:f5:c6:5e:65:ef:e3:6d:e2:06:90:b6:
                    15:68:41:f5:f8:67:23:3e:38:0d:42:bd:b1:8d:dc:
                    63:7e:17:5f:96:c4:9a:a7:0b:ba:c8:91:c9:d5:8d:
                    64:cf:87:2e:88:3e:82:6f:df:67:61:bb:67:b6:7e:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:E4:64:6B:9A:22:CA:57:24:6F:57:F2:F2:42:32:A6:36:C8:73
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39362e302f32312d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:33:70:0e:80:f4:3e:5b:db:84:ac:03:fc:15:81:53:aa:
         32:7b:b3:53:e5:31:ca:55:78:97:2e:b1:c3:29:cf:9c:8c:31:
         9d:20:d5:99:da:59:c2:b5:26:e9:ca:e3:bc:0b:34:25:17:ba:
         bf:db:34:3f:c1:0b:0f:54:7d:58:08:90:98:c7:40:73:14:86:
         71:db:09:03:20:26:79:cd:2f:e0:60:ce:21:1e:5b:d4:07:be:
         5c:80:53:a8:b4:89:09:7c:9b:a3:67:1e:14:0e:15:7d:f2:a7:
         bb:d2:e6:79:b5:4c:d2:f5:bb:f0:5a:09:68:f2:23:00:90:2c:
         e1:08:be:89:75:54:00:e1:6b:ae:84:16:c3:5b:5f:a7:7b:c4:
         9d:82:de:4d:2b:f4:20:a9:b5:4d:03:63:bd:c4:13:a6:f7:ac:
         dd:ab:8f:c6:1a:8b:87:a5:64:46:1e:f2:af:ce:86:18:de:26:
         0a:cb:e4:b5:10:db:ce:53:63:ed:40:a7:36:56:fd:a7:ef:1d:
         aa:3d:30:0c:b5:30:4a:3d:65:1d:47:24:b9:76:dd:79:94:01:
         85:b1:44:6a:e1:5c:4a:df:6e:7d:cb:0a:c4:08:5a:42:79:ee:
         5a:5d:46:89:06:34:18:9d:72:09:ef:fd:cb:fe:7a:0c:1b:83:
         d5:e4:34:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ3Cx5CilucB7PT1C/cR5gt/1raswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA3MDMxNDE3NTlaFw0yNDA3MDExNDIyNTlaMDMxMTAvBgNV
BAMTKENBQkVFNDY0NkI5QTIyQ0E1NzI0NkY1N0YyRjI0MjMyQTYzNkM4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR8zIPDKukLz3d91YqlbELKmcr
6F8wESY4c2F3TuL0SQLg7xZVJaBEp2QV2kMNDmoq5D0biUvkV9/vmkQ69b0ZaVNN
BS4n0/36ghndeMSJq23M7BFSzmE/o9IcaL4C53KLFOlqypZTeUMy9IfpuXhY6PPp
eBTfTl8z+1/L98zflXVGYGukgtmNHgni5cGvIQQYhZOghUnHnUJVRNyozVqYPHhd
xB5Xat/SRLsVFkauC6HcTfUJLieyEyAEJTGPqeDob6GRbRT1xl5l7+Nt4gaQthVo
QfX4ZyM+OA1CvbGN3GN+F1+WxJqnC7rIkcnVjWTPhy6IPoJv32dhu2e2fjQbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyr7kZGuaIspXJG9X8vJCMqY2yHMwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzNzM3MmUzMjMzMmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsRdgMA0GCSqGSIb3DQEBCwUAA4IBAQBMmDNwDoD0
PlvbhKwD/BWBU6oye7NT5THKVXiXLrHDKc+cjDGdINWZ2lnCtSbpyuO8CzQlF7q/
2zQ/wQsPVH1YCJCYx0BzFIZx2wkDICZ5zS/gYM4hHlvUB75cgFOotIkJfJujZx4U
DhV98qe70uZ5tUzS9bvwWglo8iMAkCzhCL6JdVQA4WuuhBbDW1+ne8Sdgt5NK/Qg
qbVNA2O9xBOm96zdq4/GGouHpWRGHvKvzoYY3iYKy+S1ENvOU2PtQKc2Vv2n7x2q
PTAMtTBKPWUdRyS5dt15lAGFsURq4VxK3259ywrECFpCee5aXUaJBjQYnXIJ7/3L
/noMG4PV5DQt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org