Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          4nWATQlSn1LReG2mYSkp3o5kS9KaqN5H5kG7XGoS8pg=
Subject key identifier:   34:77:58:ED:40:8E:09:03:B2:4B:A2:3B:6E:F0:97:11:D9:4E:D9:52
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       0D2E61B5B7FEE5E49FCF26F1650151C2BCCECABD
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 10:59:48 +0000
ROA not before:           Fri 18 Aug 2023 10:54:48 +0000
ROA not after:            Fri 16 Aug 2024 10:59:48 +0000
asID:                     263347
IP address blocks:        191.37.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:61:b5:b7:fe:e5:e4:9f:cf:26:f1:65:01:51:c2:bc:ce:ca:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:54:48 2023 GMT
            Not After : Aug 16 10:59:48 2024 GMT
        Subject: CN=347758ED408E0903B24BA23B6EF09711D94ED952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:1a:1a:ac:98:fc:e7:09:3a:d1:e3:99:72:
                    11:21:fb:b9:bd:41:9c:da:54:19:49:4f:ae:be:da:
                    86:3a:77:e3:eb:4e:73:0c:0c:b2:ca:81:ff:8b:04:
                    eb:54:97:6c:5d:3d:d9:e0:c9:4c:5d:38:7b:52:ca:
                    47:66:50:b6:42:dd:62:e5:93:57:74:33:82:5d:d0:
                    80:d3:b7:ca:f3:1b:1e:2b:28:2c:2c:84:3e:c8:ab:
                    22:dc:b5:55:5a:78:bb:02:ae:5f:cb:9a:1f:dc:f0:
                    df:73:e0:ad:f1:bb:fc:0d:21:52:e7:1e:42:77:c1:
                    38:c5:6c:47:e1:ef:23:8b:3d:97:4a:01:3c:b7:00:
                    f6:36:85:ce:8c:50:78:2c:10:d4:09:fc:17:5e:c0:
                    ac:4f:40:13:34:c0:4f:8f:5c:05:ca:be:e5:80:9e:
                    d2:14:64:58:27:5e:9d:a1:5e:dc:8e:4b:98:fb:17:
                    14:0e:57:0f:1b:19:3b:8b:ee:19:4f:95:8a:a9:45:
                    f8:67:f7:83:75:5c:c5:60:ac:82:10:4e:ef:2b:db:
                    d7:76:87:b9:7a:c0:ea:79:91:d0:39:e6:b1:a7:05:
                    c6:74:81:c8:38:05:45:fe:6d:1d:59:97:46:4d:f0:
                    e1:d7:31:43:70:3c:c1:c8:48:1a:60:c2:ca:cd:fc:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:77:58:ED:40:8E:09:03:B2:4B:A2:3B:6E:F0:97:11:D9:4E:D9:52
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:bc:c9:69:f9:fe:20:a4:1d:38:b7:15:31:92:23:7a:81:
         38:36:da:8f:44:af:ef:a5:56:e6:ce:d3:47:7b:6c:2a:cc:b0:
         30:6e:66:57:10:85:3d:d4:ae:ea:36:55:de:dc:6a:60:5d:c5:
         26:46:a4:51:c8:0a:9d:e8:31:74:a7:9e:68:90:68:89:72:f8:
         4e:4c:f9:2d:fd:b7:3e:23:f1:de:a0:4e:9f:a0:93:a8:f8:dd:
         b0:5f:5f:1e:3e:b7:77:42:7e:67:4e:63:38:94:b5:51:5a:98:
         50:f8:73:21:86:8e:56:85:5d:e6:e1:9b:a9:ea:83:ce:be:a6:
         9f:83:e4:ef:c6:e7:98:2e:27:4b:7a:c7:dd:df:e2:9c:3f:11:
         aa:4e:5e:e9:4a:bf:88:c1:9c:1b:34:49:a9:8a:c4:65:5e:63:
         c2:0f:9b:85:a7:98:9d:ad:25:e3:09:f1:60:ed:58:81:a3:b8:
         24:bb:ab:d7:9c:23:81:64:df:88:98:0c:57:11:1a:1c:0c:dc:
         2d:13:d2:bc:5d:5e:fe:69:84:84:1c:3e:fc:53:dc:0c:40:47:
         55:26:cc:4c:b7:a3:9d:9d:a7:65:47:21:a6:9d:e4:16:78:4b:
         c2:e3:72:39:1a:dc:42:6a:fe:c7:b2:65:31:b7:89:f7:f7:c2:
         10:00:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org