Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          nssMDaQv+rhB7VxfyE9HbAcrl8pa3XssuqHQnPEo5cg=
Subject key identifier:   DC:9D:85:01:AC:14:FD:CA:ED:40:CA:08:45:5D:8A:62:01:8B:1C:00
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       59C61DC61B64244A35B244EA58271744FB2182E7
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:42 +0000
ROA not before:           Tue 20 Jun 2023 17:28:42 +0000
ROA not after:            Tue 18 Jun 2024 17:33:42 +0000
asID:                     263347
IP address blocks:        191.37.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:1d:c6:1b:64:24:4a:35:b2:44:ea:58:27:17:44:fb:21:82:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:42 2023 GMT
            Not After : Jun 18 17:33:42 2024 GMT
        Subject: CN=DC9D8501AC14FDCAED40CA08455D8A62018B1C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:14:b8:4b:78:7d:eb:e9:9c:c4:58:c5:95:
                    80:14:4f:5e:ac:fb:c1:46:c9:a2:bd:00:73:13:9c:
                    f9:17:e5:af:61:43:53:27:e6:12:dd:45:ad:3e:bc:
                    aa:5d:d0:c4:82:68:c3:94:f0:3a:a8:e3:a4:f8:cb:
                    16:55:71:71:2f:3b:50:0e:b3:29:57:f6:e5:be:e2:
                    f0:0e:5e:d1:b4:cd:88:9b:2b:33:ef:f3:60:9a:94:
                    38:1c:2f:b5:ac:3b:14:de:5a:1e:11:b8:14:fa:d0:
                    e1:71:e3:30:ab:69:6b:c7:68:2a:45:5f:f2:7e:3b:
                    96:c8:01:dd:de:40:e1:de:47:b0:2b:40:9c:10:1c:
                    ab:80:76:57:3e:79:3d:2a:31:20:c6:88:7a:d8:0a:
                    54:d0:87:2c:66:1d:60:72:b4:5f:45:e8:8a:e3:e1:
                    de:ca:b2:4f:39:e7:44:5e:c5:60:e3:5e:2f:99:a0:
                    59:34:59:09:85:c4:6e:83:0d:a9:ce:cd:a6:77:20:
                    f2:39:6f:60:94:c4:30:ef:90:bb:57:09:6e:fb:d5:
                    ff:69:93:a2:46:13:48:f1:88:b0:80:f1:80:29:be:
                    dd:ac:31:8c:bf:90:9a:50:4b:12:18:cb:3a:02:fc:
                    55:08:2b:27:e9:b8:7e:12:ae:22:4f:bb:e5:f6:db:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:85:01:AC:14:FD:CA:ED:40:CA:08:45:5D:8A:62:01:8B:1C:00
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:57:16:ce:ea:22:44:af:33:06:d6:cc:e6:c6:74:44:70:
         79:ee:c5:eb:f8:99:f3:a5:13:f6:3e:08:82:a1:68:5d:ae:f9:
         8f:76:de:36:db:37:ea:21:58:e0:18:c1:cb:d4:e9:fb:bd:ea:
         16:f3:fc:e8:c7:16:97:99:96:e4:4d:df:67:99:35:e2:85:4b:
         01:49:e8:2b:80:8d:cd:54:21:94:4d:38:3c:1a:e2:1d:26:fb:
         87:bd:82:72:c9:fc:a6:57:5c:a4:21:27:62:00:98:fd:f2:6f:
         e2:be:96:c4:68:e4:18:a5:5d:29:d4:a7:a8:c3:62:50:09:6e:
         84:83:4f:76:59:f1:65:50:64:ed:47:39:34:af:2f:66:28:5d:
         7e:e8:37:91:6b:22:a2:44:8c:d2:eb:90:c3:73:7d:98:52:0b:
         48:bc:21:75:b1:bd:f4:88:35:0e:2e:58:13:54:6d:a6:e4:5f:
         b8:fc:e0:55:c9:1a:73:4a:3d:e2:af:c9:92:24:c9:29:cc:84:
         28:95:2f:70:65:ef:63:fe:d7:67:aa:6e:53:62:64:36:c0:07:
         74:73:f4:48:80:2c:3b:9f:60:ea:c9:42:b3:6d:f6:4e:61:3b:
         1a:14:82:8c:d6:23:02:e0:8e:c7:b0:80:31:df:18:97:62:23:
         4e:60:a1:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWcYdxhtkJEo1skTqWCcXRPshgucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA2MjAxNzI4NDJaFw0yNDA2MTgxNzMzNDJaMDMxMTAvBgNV
BAMTKERDOUQ4NTAxQUMxNEZEQ0FFRDQwQ0EwODQ1NUQ4QTYyMDE4QjFDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWhS4S3h96+mcxFjFlYAUT16s
+8FGyaK9AHMTnPkX5a9hQ1Mn5hLdRa0+vKpd0MSCaMOU8Dqo46T4yxZVcXEvO1AO
sylX9uW+4vAOXtG0zYibKzPv82CalDgcL7WsOxTeWh4RuBT60OFx4zCraWvHaCpF
X/J+O5bIAd3eQOHeR7ArQJwQHKuAdlc+eT0qMSDGiHrYClTQhyxmHWBytF9F6Irj
4d7Ksk8550RexWDjXi+ZoFk0WQmFxG6DDanOzaZ3IPI5b2CUxDDvkLtXCW771f9p
k6JGE0jxiLCA8YApvt2sMYy/kJpQSxIYyzoC/FUIKyfpuH4SriJPu+X22055AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3J2FAawU/crtQMoIRV2KYgGLHAAwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvyUjMA0GCSqGSIb3DQEBCwUAA4IBAQAcPVcWzuoi
RK8zBtbM5sZ0RHB57sXr+JnzpRP2PgiCoWhdrvmPdt422zfqIVjgGMHL1On7veoW
8/zoxxaXmZbkTd9nmTXihUsBSegrgI3NVCGUTTg8GuIdJvuHvYJyyfymV1ykISdi
AJj98m/ivpbEaOQYpV0p1Keow2JQCW6Eg092WfFlUGTtRzk0ry9mKF1+6DeRayKi
RIzS65DDc32YUgtIvCF1sb30iDUOLlgTVG2m5F+4/OBVyRpzSj3ir8mSJMkpzIQo
lS9wZe9j/tdnqm5TYmQ2wAd0c/RIgCw7n2DqyUKzbfZOYTsaFIKM1iMC4I7HsIAx
3xiXYiNOYKGZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org