Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39372e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e39372e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          NVmGIPnx33hl42GVl1F+mPlO7iYI45lcngZzkH/ZScI=
Subject key identifier:   0D:7F:41:63:AE:00:B6:A3:5B:5D:B9:DB:70:B0:6E:16:B0:6C:9E:AA
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       774C12C1F784420D14227DF6EB80F2E8C2019D7F
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39372e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:04:57 +0000
ROA not before:           Tue 20 Jun 2023 00:59:57 +0000
ROA not after:            Tue 18 Jun 2024 01:04:57 +0000
asID:                     263347
IP address blocks:        177.23.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4c:12:c1:f7:84:42:0d:14:22:7d:f6:eb:80:f2:e8:c2:01:9d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:59:57 2023 GMT
            Not After : Jun 18 01:04:57 2024 GMT
        Subject: CN=0D7F4163AE00B6A35B5DB9DB70B06E16B06C9EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:e6:76:76:6f:cd:39:81:11:42:75:eb:7c:
                    1c:dc:32:06:3a:4d:54:51:bd:05:d5:c2:24:4c:94:
                    af:11:d1:ba:2f:98:53:2a:4c:9e:1a:49:77:d1:32:
                    46:04:21:bf:5a:fc:8e:79:1e:c4:1b:c5:02:77:27:
                    a1:30:5c:85:96:24:b7:51:70:3b:d2:1c:f7:dc:52:
                    6c:3f:54:99:7d:ef:96:c6:22:1e:b4:7b:e5:09:a1:
                    7a:cd:60:59:58:bb:e4:b2:30:d2:f2:55:3a:b4:cd:
                    fe:3c:0c:64:b2:d7:c9:c8:ea:bc:a5:d1:b1:f4:2d:
                    0c:16:51:0f:9b:62:c9:b7:42:28:68:1a:ac:c6:99:
                    c4:84:c5:a3:80:4f:17:f8:11:5d:3e:27:0b:d3:2e:
                    5c:7f:85:3d:3d:77:c5:78:e4:88:0f:b6:80:64:e9:
                    90:0f:5e:22:63:93:73:db:a0:8a:a0:c5:6b:f9:49:
                    ad:5d:3f:bb:f7:c6:fd:ca:cd:67:ec:12:80:8c:da:
                    bd:e4:35:9e:b8:10:90:2f:9f:83:09:1d:b4:bc:66:
                    53:30:4a:0f:9c:f7:71:ee:e5:8f:fc:11:0b:9d:02:
                    5d:cf:96:b1:47:2a:ec:e1:38:f7:da:9f:79:87:e5:
                    4f:d8:f9:93:d9:d5:09:7e:64:a0:5e:60:c2:4f:2c:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7F:41:63:AE:00:B6:A3:5B:5D:B9:DB:70:B0:6E:16:B0:6C:9E:AA
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39372e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:23:7b:34:8b:a6:06:1d:80:04:20:68:03:ea:18:e5:73:1a:
         a5:70:80:da:82:87:cd:03:a6:08:f8:fa:0f:ca:94:d2:39:77:
         52:dd:f8:b4:f6:db:05:c8:08:e4:19:ea:15:72:72:a6:fa:f0:
         f0:8a:d8:a2:e8:69:b8:cb:ad:f1:97:70:67:0c:e2:99:38:1f:
         95:25:48:7b:33:b7:e2:b1:df:3b:4b:73:c6:b5:d0:91:43:db:
         84:ee:11:9b:f9:16:fb:6d:5f:5f:13:3c:19:39:f7:91:ab:b5:
         71:47:c2:b0:ff:20:d9:45:73:eb:b4:f9:dc:73:07:ae:37:c3:
         58:a8:ef:0f:07:29:5f:06:c1:a0:ad:a9:25:0c:dc:b3:f6:bc:
         f6:4b:a8:26:71:fc:40:25:88:c0:82:23:33:47:19:64:6f:22:
         9a:25:f6:42:11:3f:bd:3f:a3:b6:cf:88:5a:bc:07:e3:c3:11:
         b3:05:05:87:7e:30:d4:42:25:ca:d0:b8:5b:df:9a:bf:30:09:
         a6:ab:d0:c4:5a:f0:3d:4d:f1:ba:13:a3:2d:d1:22:03:6f:3f:
         69:e9:38:01:d4:8d:65:1a:e1:84:82:fe:d6:77:5e:36:26:b8:
         b9:9d:17:fc:ed:7b:e7:15:31:43:7e:b7:ba:80:e3:78:12:4f:
         ff:61:18:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd0wSwfeEQg0UIn3264Dy6MIBnX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA2MjAwMDU5NTdaFw0yNDA2MTgwMTA0NTdaMDMxMTAvBgNV
BAMTKDBEN0Y0MTYzQUUwMEI2QTM1QjVEQjlEQjcwQjA2RTE2QjA2QzlFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdeZ2dm/NOYERQnXrfBzcMgY6
TVRRvQXVwiRMlK8R0bovmFMqTJ4aSXfRMkYEIb9a/I55HsQbxQJ3J6EwXIWWJLdR
cDvSHPfcUmw/VJl975bGIh60e+UJoXrNYFlYu+SyMNLyVTq0zf48DGSy18nI6ryl
0bH0LQwWUQ+bYsm3QihoGqzGmcSExaOATxf4EV0+JwvTLlx/hT09d8V45IgPtoBk
6ZAPXiJjk3PboIqgxWv5Sa1dP7v3xv3KzWfsEoCM2r3kNZ64EJAvn4MJHbS8ZlMw
Sg+c93Hu5Y/8EQudAl3PlrFHKuzhOPfan3mH5U/Y+ZPZ1Ql+ZKBeYMJPLH4rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDX9BY64AtqNbXbnbcLBuFrBsnqowHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzNzM3MmUzMjMzMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsRdhMA0GCSqGSIb3DQEBCwUAA4IBAQAXI3s0i6YG
HYAEIGgD6hjlcxqlcIDagofNA6YI+PoPypTSOXdS3fi09tsFyAjkGeoVcnKm+vDw
itii6Gm4y63xl3BnDOKZOB+VJUh7M7fisd87S3PGtdCRQ9uE7hGb+Rb7bV9fEzwZ
OfeRq7VxR8Kw/yDZRXPrtPnccweuN8NYqO8PBylfBsGgraklDNyz9rz2S6gmcfxA
JYjAgiMzRxlkbyKaJfZCET+9P6O2z4havAfjwxGzBQWHfjDUQiXK0Lhb35q/MAmm
q9DEWvA9TfG6E6Mt0SIDbz9p6TgB1I1lGuGEgv7Wd142Jri5nRf87XvnFTFDfre6
gON4Ek//YRg1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org