Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          68Mv7XZdQEERvL2UrTvbgpTgXmPkeG9tp444ZWQ/YM0=
Subject key identifier:   49:60:1A:A9:EE:7C:64:D6:10:46:25:7B:EB:11:A2:CC:C2:2E:71:BA
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       545CCF739C131287CD626D072EDA1A61EE2F6CB6
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:34 +0000
ROA not before:           Tue 20 Jun 2023 17:28:34 +0000
ROA not after:            Tue 18 Jun 2024 17:33:34 +0000
asID:                     263347
IP address blocks:        191.37.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5c:cf:73:9c:13:12:87:cd:62:6d:07:2e:da:1a:61:ee:2f:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:34 2023 GMT
            Not After : Jun 18 17:33:34 2024 GMT
        Subject: CN=49601AA9EE7C64D61046257BEB11A2CCC22E71BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:36:49:7e:34:9c:f9:7e:0a:98:14:28:6c:
                    55:cd:b5:ab:82:a0:ba:01:06:09:7a:f8:69:69:1f:
                    b9:94:8b:76:06:21:8b:bc:2b:3c:0f:c9:d5:c0:4b:
                    05:f6:f3:da:a9:b1:ea:f1:2d:27:30:03:d1:c7:1d:
                    25:0b:b7:9b:65:ec:62:c7:e4:f2:52:1f:01:7d:27:
                    53:da:20:33:db:90:02:13:14:5f:bd:c6:85:14:17:
                    0c:d1:e7:b4:7a:de:50:d1:3e:2e:a2:b2:aa:83:a1:
                    f6:14:d1:f3:48:69:77:be:fc:bc:e8:2f:e6:e4:7d:
                    5d:38:5a:ed:9c:7d:9f:ae:0b:4f:43:ea:ba:09:db:
                    8c:ef:e3:6e:43:2a:8f:fe:c4:7a:0b:39:3e:c0:b7:
                    15:d8:7d:c5:6d:a6:65:13:28:7f:0d:5a:fe:5a:89:
                    37:42:aa:6f:f9:84:6c:6e:97:91:98:73:78:00:3c:
                    0e:e3:68:26:18:e8:e1:89:eb:37:70:71:3e:c9:d7:
                    2c:47:53:2e:bb:3d:8d:21:74:82:d0:86:38:e0:d6:
                    e1:11:5b:8a:fb:13:4e:5f:6c:2b:26:36:40:42:b5:
                    c5:53:c0:f2:2d:68:d6:56:dd:73:cf:7d:c1:db:17:
                    d4:ab:69:8b:43:bc:f8:82:bc:1d:99:45:df:19:f1:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:60:1A:A9:EE:7C:64:D6:10:46:25:7B:EB:11:A2:CC:C2:2E:71:BA
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:dd:96:a1:74:cc:3e:83:02:c0:3f:55:ed:85:08:1a:76:
         90:a0:54:5e:82:dc:71:13:e2:a2:19:87:9d:5c:75:ec:5e:c7:
         e7:17:70:fe:a2:1c:f9:be:63:5a:3a:5f:3d:dc:1f:4d:59:7b:
         34:bb:5a:71:e8:20:6c:db:91:41:88:a4:f7:2d:8c:10:6d:d8:
         4b:3e:00:8b:93:de:86:29:5f:a2:04:5c:35:33:a3:f3:48:9b:
         67:9c:c7:b0:0e:2d:2a:fc:5c:95:1a:2e:21:d0:ab:e9:ef:61:
         38:03:0b:40:37:d4:b0:e5:59:e5:97:99:5f:cf:ba:3e:ac:2f:
         53:ab:cf:7a:80:7e:52:9b:4a:54:14:64:54:70:89:78:90:6f:
         a5:7e:5e:59:de:9c:a5:a1:7d:6f:54:c2:15:47:9a:af:bd:ff:
         39:aa:fb:b1:ea:e9:2c:fd:5d:e8:4a:db:b2:d2:c9:f0:dd:93:
         6a:66:67:99:ae:12:20:d6:9c:4f:df:fd:ef:a7:85:43:37:e2:
         12:f0:1f:9e:b4:81:21:98:74:15:79:46:8e:40:dd:81:e6:66:
         62:e4:c3:39:1a:99:7b:8c:5a:a4:10:e0:78:13:be:79:97:ba:
         22:75:52:16:49:02:30:1a:d7:02:b6:32:1a:52:39:fa:83:b3:
         c4:9e:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org