Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e33322e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          Pkk5IBy1QplaUMr7VePgRla53PiE0KLBwFfSSwpE4Aw=
Subject key identifier:   B3:BB:52:77:0B:55:2D:04:C3:64:84:7C:59:51:87:72:9B:65:EB:08
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       05738F393C8A3AEA5A9A49C6819A5CF79D397C6C
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 10:59:35 +0000
ROA not before:           Fri 18 Aug 2023 10:54:35 +0000
ROA not after:            Fri 16 Aug 2024 10:59:35 +0000
asID:                     263347
IP address blocks:        191.37.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:73:8f:39:3c:8a:3a:ea:5a:9a:49:c6:81:9a:5c:f7:9d:39:7c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:54:35 2023 GMT
            Not After : Aug 16 10:59:35 2024 GMT
        Subject: CN=B3BB52770B552D04C364847C595187729B65EB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:63:87:5e:53:6e:bb:b6:3b:c7:b1:56:a2:
                    da:bd:7b:a7:de:16:f0:82:33:a2:0f:63:d7:c8:b5:
                    f0:1c:61:de:87:1a:b7:af:ba:5e:52:db:f2:85:6f:
                    28:e2:3d:a3:95:e7:8a:9e:34:b3:6a:49:ef:87:c0:
                    be:5a:2f:7b:c1:de:c3:15:bc:17:d4:5f:2d:43:18:
                    5f:87:da:32:54:a6:2d:e4:ee:fc:48:f6:a2:bf:c3:
                    da:35:f6:a5:d9:56:0a:ea:63:be:d4:0b:e9:df:b1:
                    c1:5d:ac:f4:80:7b:4f:7c:76:c4:1c:32:04:24:f3:
                    a7:dc:b4:9c:12:2f:df:99:ba:1b:d2:41:d8:81:99:
                    76:c4:16:f8:08:a5:70:ab:d5:77:f3:70:47:8f:fa:
                    5f:04:e8:51:a9:0a:77:2b:1a:22:0e:2f:ab:36:90:
                    03:d2:b6:9f:85:42:35:d0:08:a3:cf:3b:26:23:10:
                    2a:d1:96:a4:cf:ee:70:94:4e:f5:5b:d6:58:41:6a:
                    7e:60:f1:fd:9c:ea:d8:5b:e6:e8:66:b1:1c:74:dc:
                    83:44:95:e5:5c:1c:b7:3b:52:a0:1f:ff:0c:ea:71:
                    b9:ca:0b:fb:14:62:7a:4f:33:41:5e:01:53:09:ee:
                    1a:1a:8c:34:9f:9a:5d:21:85:ee:40:bc:90:30:bd:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:52:77:0B:55:2D:04:C3:64:84:7C:59:51:87:72:9B:65:EB:08
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:4e:71:9c:8e:ae:2c:75:33:67:d5:3d:1a:0d:da:99:80:
         2c:b1:f4:53:21:4e:f6:cc:13:83:95:b9:66:28:6a:a5:d0:57:
         0b:d5:6d:3e:5c:3d:93:ac:ac:9a:d2:3b:70:98:71:eb:d0:47:
         05:74:b7:08:00:2b:c5:ad:5e:de:74:f1:d4:44:f2:a7:0d:4d:
         4d:89:6a:fa:cc:70:78:c5:fd:b7:19:83:05:be:92:81:6f:2b:
         4c:8f:10:7a:d8:65:49:d8:71:65:de:20:ed:50:93:25:c5:25:
         75:ca:ba:81:29:7b:1b:1b:1d:e4:ac:0a:e7:9b:4f:11:c7:44:
         78:a6:1b:3d:25:3d:5a:f0:0c:68:58:a8:44:1b:03:9c:7a:f3:
         40:76:5f:25:b1:de:6b:c8:60:38:db:89:b1:d2:e6:fa:c2:ef:
         3c:30:2c:d4:98:4b:b8:34:21:69:cb:32:25:ca:44:e6:61:45:
         9a:3a:c2:2e:15:05:98:6a:b3:80:51:a2:a1:59:41:6c:60:5f:
         a2:9f:87:1c:62:8d:27:32:b4:47:77:72:6d:1e:44:8c:47:8a:
         ca:a7:0a:ac:44:b8:80:45:15:87:72:55:4c:9d:4a:79:34:87:
         8c:7a:5b:5e:d6:c9:c8:05:0c:58:25:ff:bc:77:34:34:c6:c8:
         12:9c:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org