Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          UrlgUW6UWZMvUxo9PYGO2yZnqaurW798VMMWgxJyvMc=
Subject key identifier:   A4:93:35:ED:51:77:F9:35:E1:A9:72:EE:0E:3A:C9:E2:E2:90:D0:4E
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       42A8B42CA12B9131985288D5AEFCC4D562D0B35A
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 16 Sep 2023 12:55:56 +0000
ROA not before:           Sat 16 Sep 2023 12:50:56 +0000
ROA not after:            Sat 14 Sep 2024 12:55:56 +0000
asID:                     263347
IP address blocks:        191.37.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:b4:2c:a1:2b:91:31:98:52:88:d5:ae:fc:c4:d5:62:d0:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Sep 16 12:50:56 2023 GMT
            Not After : Sep 14 12:55:56 2024 GMT
        Subject: CN=A49335ED5177F935E1A972EE0E3AC9E2E290D04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:9d:38:a4:f5:04:6f:0b:d3:08:6e:01:1e:
                    ae:ca:00:04:23:87:b0:12:b1:45:f0:81:15:f3:8f:
                    96:11:b7:33:49:b8:1c:38:f0:21:e6:05:19:b0:5e:
                    0f:a1:3d:9e:ce:bc:da:85:7b:ad:e8:b1:6c:f3:ae:
                    aa:1b:f8:8a:68:d5:d8:5d:1f:03:65:ee:1d:17:aa:
                    12:6f:fd:dd:4a:3c:ff:14:76:bd:28:59:ba:03:cd:
                    4f:c2:ba:28:14:ee:59:14:84:2e:f5:1e:a9:82:df:
                    d6:f4:b3:b0:bd:a0:3d:dd:f8:eb:43:7f:32:dd:a5:
                    3b:4f:a2:1b:a0:e5:5b:45:34:d7:3e:2e:3a:37:bc:
                    98:65:6e:63:30:86:d7:12:01:16:3f:88:7d:cd:3b:
                    60:58:e4:f8:ac:94:13:ec:19:ad:57:c3:2d:d6:6f:
                    28:f3:e2:91:82:2b:a9:bf:69:8c:f7:7a:47:e8:9a:
                    45:46:9c:94:d9:11:6c:04:85:b1:e8:39:d8:e4:8e:
                    69:df:d8:b8:11:24:d7:7b:1a:47:ca:a7:c9:06:ea:
                    91:97:96:64:17:b3:92:f9:01:1e:93:c3:b8:94:cd:
                    fe:03:28:ff:96:db:4e:40:57:2b:6c:b3:b8:23:bc:
                    2c:57:96:81:73:da:a0:85:6b:cf:6c:88:30:7b:f0:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:35:ED:51:77:F9:35:E1:A9:72:EE:0E:3A:C9:E2:E2:90:D0:4E
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:af:f5:07:d6:cb:41:08:05:3f:ea:de:26:a5:1a:c8:00:
         dd:f7:4f:a5:24:fb:63:ee:9a:95:72:d0:58:0b:fd:ea:ea:57:
         05:c8:e8:31:fb:54:7d:28:a8:48:98:9d:bc:5f:44:cb:d3:52:
         49:7c:4d:60:4a:fd:62:97:f0:d3:c8:ee:fc:9c:09:38:28:24:
         00:64:3b:b6:7d:93:38:c8:c6:03:83:6c:76:d9:02:60:07:c2:
         0d:e1:55:09:42:06:67:c3:a0:1b:09:52:68:9c:f2:9a:a6:e8:
         af:f8:0b:92:d6:f4:78:1e:ca:10:34:8b:7f:0e:e4:39:df:b7:
         dc:11:29:df:cf:cc:7f:d2:c7:fa:77:82:ff:62:2b:14:99:af:
         ef:f1:9e:f3:c0:17:ad:30:a7:0e:a8:b1:d9:e7:1e:1c:ff:1a:
         ad:ae:cd:6a:cf:a5:f0:57:99:73:c6:81:ae:a3:b3:02:54:c7:
         06:4a:00:1f:25:2b:d1:c4:f9:3b:d1:f1:32:82:0c:9a:5c:0e:
         68:2a:5c:1a:e7:a8:7b:2b:68:5a:5a:28:aa:5a:90:14:20:0d:
         06:db:a1:11:bf:82:aa:40:4a:fb:f5:0d:9a:37:70:c7:44:a7:
         66:65:07:b3:60:f6:5d:82:99:f2:db:6c:df:07:89:48:f4:6f:
         fc:95:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org