Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e39382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          ZusZyxpMaFFaHRpMMoZRX6VMvRlG+w7yZcxbQDO68NI=
Subject key identifier:   53:0C:2A:54:50:44:45:55:F4:91:FA:73:15:F9:6E:4A:EE:9B:15:52
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       445CA8E7FEDC3E7DC1C663C6703D6A2610757EA3
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:40:21 +0000
ROA not before:           Fri 18 Aug 2023 11:35:21 +0000
ROA not after:            Fri 16 Aug 2024 11:40:21 +0000
asID:                     263347
IP address blocks:        177.23.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5c:a8:e7:fe:dc:3e:7d:c1:c6:63:c6:70:3d:6a:26:10:75:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 11:35:21 2023 GMT
            Not After : Aug 16 11:40:21 2024 GMT
        Subject: CN=530C2A5450444555F491FA7315F96E4AEE9B1552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:d9:64:d3:db:77:6d:bc:d8:91:6b:95:64:
                    48:3f:a5:ca:05:fa:c4:e6:67:a5:7d:4b:e9:7f:4e:
                    db:7d:4b:d0:95:59:08:c3:5e:1e:5a:ad:2c:56:c1:
                    d8:dd:53:96:24:f4:76:f0:a1:c8:1c:2e:09:c0:9f:
                    50:3a:f0:1c:d7:3e:60:95:22:75:31:7c:69:3c:dd:
                    12:21:60:7d:72:ff:5d:0d:15:e3:46:2c:2f:de:1d:
                    4c:6a:25:7f:95:4a:77:4f:a4:d7:1f:7e:d8:bb:0c:
                    aa:d8:a5:68:c7:4c:40:18:90:de:3b:ad:72:99:16:
                    0a:51:d2:8e:fd:ad:c3:79:88:50:32:9c:89:2a:4e:
                    17:54:84:ae:7e:1b:25:3f:50:37:84:93:99:a0:0c:
                    38:e5:63:f4:80:1d:c8:61:70:4c:5c:f5:b9:ec:54:
                    91:96:ed:b6:1c:0a:8d:d9:98:e3:67:ab:47:e2:df:
                    fd:bb:62:d2:9e:9e:c9:8f:8d:28:48:3c:a3:f0:7f:
                    d1:5b:a1:e5:40:40:a2:ab:ff:dc:14:ec:76:85:e1:
                    58:e5:7f:68:7e:df:56:4c:52:a2:b6:5d:79:0b:f7:
                    bc:a3:85:e3:bc:36:65:b4:74:10:20:b8:fc:0f:bc:
                    4a:78:2d:ea:26:89:5d:91:c5:7e:ca:6f:74:53:e4:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:2A:54:50:44:45:55:F4:91:FA:73:15:F9:6E:4A:EE:9B:15:52
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:e4:81:d3:40:79:fb:de:9d:92:66:64:4b:6c:a8:e8:6d:
         22:ce:d1:ee:76:90:55:3c:2f:c9:1d:b7:21:2a:57:d8:5b:c2:
         fc:71:92:77:68:3c:28:57:d7:bb:80:50:34:5c:77:c3:de:4d:
         0f:c9:71:fa:ed:28:7d:6b:c3:05:1b:1d:06:b2:d4:8f:b6:7a:
         27:b6:a7:76:a9:57:96:93:b7:cc:46:1f:4b:39:3d:e0:f2:f5:
         f8:13:c9:ae:55:76:bf:9b:d3:ec:f0:55:ce:eb:e1:24:60:33:
         4c:38:b2:56:95:1c:45:52:3a:93:0c:fc:c5:fe:38:ea:08:cf:
         cb:7f:52:3e:59:2b:a6:04:d2:9d:86:1d:bd:1e:6b:40:68:d5:
         6f:90:ab:6b:aa:a9:73:2a:67:09:18:28:7d:60:6d:f2:ab:d4:
         38:41:24:3c:d3:8b:4e:2e:ba:56:85:e9:98:b2:cd:0e:99:f4:
         06:13:a1:d5:56:91:d1:3c:91:ef:34:d4:99:c4:4e:24:ca:d4:
         d3:52:4d:11:34:94:22:2f:a5:44:89:cf:ae:16:ac:33:d6:b9:
         ba:e3:35:b9:01:b3:f3:25:13:65:13:bc:0c:c5:fb:8b:5b:c7:
         d3:27:c2:d2:bd:ce:41:e1:5b:c3:66:64:34:9d:44:c3:c9:6d:
         8e:11:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org