Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          6xbnUHFx8m8LsLdkDstbSof0AJKhu+AWepRAB2d9SM0=
Subject key identifier:   3B:F3:90:8B:0F:D9:20:D2:54:5D:06:7D:38:1C:C9:C4:41:83:21:65
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       07ED94C634E514899569D0449A3DC34DA1CCB564
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:18 +0000
ROA not before:           Fri 18 Aug 2023 10:55:18 +0000
ROA not after:            Fri 16 Aug 2024 11:00:18 +0000
asID:                     263347
IP address blocks:        191.37.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:94:c6:34:e5:14:89:95:69:d0:44:9a:3d:c3:4d:a1:cc:b5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:18 2023 GMT
            Not After : Aug 16 11:00:18 2024 GMT
        Subject: CN=3BF3908B0FD920D2545D067D381CC9C441832165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:ee:7b:18:df:67:7a:15:30:07:ee:d1:f5:
                    7f:24:02:ea:8b:f9:65:e0:39:04:02:42:2f:dd:2f:
                    f0:c4:20:5e:9a:b6:23:fc:62:15:a5:e3:af:de:50:
                    a5:b0:74:fd:36:1e:a3:a2:6c:69:e0:17:92:1c:2a:
                    9d:25:60:58:f6:d5:fc:17:c8:f6:a2:5c:a1:90:4d:
                    86:77:ab:42:6b:68:5c:27:ec:46:c8:97:5c:83:a1:
                    d9:b5:89:1e:86:e6:52:69:14:44:fd:7c:ac:c1:27:
                    0f:c0:d9:10:0c:f5:ef:e9:d5:67:cc:9f:75:89:14:
                    5f:10:bd:6f:4a:7d:a6:b6:27:c2:3c:57:5c:d1:e3:
                    d4:57:75:40:9f:da:ac:3e:64:5e:71:e2:7c:e0:e8:
                    e4:36:e6:33:cf:7b:ca:75:23:c0:2b:90:50:74:33:
                    fa:12:05:02:52:6a:13:76:09:6f:a2:20:ba:1d:02:
                    6a:57:60:81:95:e4:07:b2:37:85:8b:e8:00:b5:be:
                    9b:70:a3:8a:ad:db:1f:9f:c6:0f:be:f1:b7:07:d5:
                    30:94:16:bb:2c:db:66:33:ca:e3:59:a4:9d:30:46:
                    a2:2c:4d:0a:90:0d:bc:fd:c8:78:dd:d5:8d:af:4f:
                    47:79:a7:0a:87:3b:7e:d1:de:e8:9d:f3:a3:45:f7:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F3:90:8B:0F:D9:20:D2:54:5D:06:7D:38:1C:C9:C4:41:83:21:65
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:82:92:bb:cd:76:c2:03:80:d5:a7:9d:b9:1d:88:66:17:3e:
         7f:76:1f:6c:e1:0c:43:41:44:80:8d:ed:54:8d:ab:45:1a:76:
         41:65:ce:a4:93:bf:87:cd:ce:cd:51:c3:67:a0:32:a8:c3:9f:
         28:dc:7b:6e:fe:13:f6:eb:2f:5b:a3:85:d3:21:ef:d4:46:55:
         e1:5d:bd:b7:06:91:98:50:ff:13:e5:fd:89:d0:9e:3d:0f:66:
         32:a9:84:2d:79:c7:f9:ce:ee:bd:2b:68:34:3d:04:49:c6:85:
         f0:3c:38:64:e2:30:7b:c8:e2:91:52:a9:5e:e2:e4:3a:6c:3d:
         45:e2:32:b0:4b:cc:73:6e:2c:f6:ff:31:0d:47:60:fb:a5:4c:
         05:29:27:ef:ea:44:43:d4:7e:9f:82:d7:22:1c:10:bb:67:93:
         2f:07:c1:08:50:22:ac:76:34:ca:e1:b6:28:74:76:f2:38:73:
         ef:f6:19:0a:b1:20:39:98:08:53:a6:52:bc:3e:45:4d:f3:bf:
         6c:57:5d:fd:01:9f:7d:a4:56:c1:05:19:27:61:7e:9f:2c:ef:
         29:1c:d3:de:2d:50:c3:db:b3:c0:19:6a:ea:85:87:77:37:46:
         df:02:30:26:64:4e:0f:aa:7f:62:f0:58:8e:14:e0:ab:fa:35:
         cd:36:1a:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB+2UxjTlFImVadBEmj3DTaHMtWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA4MTgxMDU1MThaFw0yNDA4MTYxMTAwMThaMDMxMTAvBgNV
BAMTKDNCRjM5MDhCMEZEOTIwRDI1NDVEMDY3RDM4MUNDOUM0NDE4MzIxNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuO57GN9nehUwB+7R9X8kAuqL
+WXgOQQCQi/dL/DEIF6atiP8YhWl46/eUKWwdP02HqOibGngF5IcKp0lYFj21fwX
yPaiXKGQTYZ3q0JraFwn7EbIl1yDodm1iR6G5lJpFET9fKzBJw/A2RAM9e/p1WfM
n3WJFF8QvW9Kfaa2J8I8V1zR49RXdUCf2qw+ZF5x4nzg6OQ25jPPe8p1I8ArkFB0
M/oSBQJSahN2CW+iILodAmpXYIGV5AeyN4WL6AC1vptwo4qt2x+fxg++8bcH1TCU
Frss22YzyuNZpJ0wRqIsTQqQDbz9yHjd1Y2vT0d5pwqHO37R3uid86NF9/BfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO/OQiw/ZINJUXQZ9OBzJxEGDIWUwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUgMA0GCSqGSIb3DQEBCwUAA4IBAQCOgpK7zXbC
A4DVp525HYhmFz5/dh9s4QxDQUSAje1UjatFGnZBZc6kk7+Hzc7NUcNnoDKow58o
3Htu/hP26y9bo4XTIe/URlXhXb23BpGYUP8T5f2J0J49D2YyqYQtecf5zu69K2g0
PQRJxoXwPDhk4jB7yOKRUqle4uQ6bD1F4jKwS8xzbiz2/zENR2D7pUwFKSfv6kRD
1H6fgtciHBC7Z5MvB8EIUCKsdjTK4bYodHbyOHPv9hkKsSA5mAhTplK8PkVN879s
V139AZ99pFbBBRknYX6fLO8pHNPeLVDD27PAGWrqhYd3N0bfAjAmZE4Pqn9i8FiO
FOCr+jXNNhpA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org