Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33392e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33392e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          8hlqViQS/f4+fM8u65cB8jP8KcC6LlFdnEKzG/SyKGM=
Subject key identifier:   AB:A0:E6:04:5A:A5:51:28:94:D0:3E:2C:D4:D4:7F:B6:1D:3A:03:97
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       0CECD365814DDBFA6A6633566440A618B92F377A
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33392e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:49 +0000
ROA not before:           Tue 20 Jun 2023 17:28:49 +0000
ROA not after:            Tue 18 Jun 2024 17:33:49 +0000
asID:                     263347
IP address blocks:        191.37.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:d3:65:81:4d:db:fa:6a:66:33:56:64:40:a6:18:b9:2f:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:49 2023 GMT
            Not After : Jun 18 17:33:49 2024 GMT
        Subject: CN=ABA0E6045AA5512894D03E2CD4D47FB61D3A0397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:ab:40:6b:12:3c:b4:0a:89:64:0f:98:92:
                    69:23:1b:79:4c:58:6d:6f:61:72:8d:5c:69:f5:6b:
                    cf:dc:c9:e9:5d:f6:e7:b5:8a:65:38:1e:6a:02:ac:
                    eb:d3:0a:5b:eb:54:c3:b1:28:d5:f3:0c:6d:4b:31:
                    a1:9d:3f:94:e5:45:84:ac:d1:61:48:62:70:c1:a1:
                    3a:87:67:1b:36:79:ec:3f:2a:dd:d2:06:4a:7f:c0:
                    24:9e:65:12:25:1d:64:84:39:61:bf:9c:5a:6a:bb:
                    9a:a7:cb:e7:1d:62:16:b6:60:16:e2:f5:b7:58:af:
                    4b:d9:70:6f:ab:82:92:fd:7e:96:9a:3b:37:bf:74:
                    62:c3:47:93:f5:36:31:29:2b:02:ed:6a:db:af:46:
                    65:f0:ef:f3:0b:72:b0:e4:74:10:94:91:8c:5b:b5:
                    e0:93:11:8f:94:ad:b2:1e:11:04:d6:63:97:59:ae:
                    44:42:94:1b:db:7b:96:7f:93:78:cd:2e:ab:c1:87:
                    eb:16:e9:0f:6d:f0:13:08:e7:11:14:e3:5a:3f:a4:
                    3f:70:61:44:43:de:57:90:9e:57:1f:31:8e:bb:28:
                    4b:7f:52:d6:d9:46:83:53:3a:be:08:4c:ae:d5:b2:
                    ac:52:26:8b:d2:06:34:34:96:fa:53:ed:94:d2:2f:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A0:E6:04:5A:A5:51:28:94:D0:3E:2C:D4:D4:7F:B6:1D:3A:03:97
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33392e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:0a:77:91:67:6e:23:e3:90:f7:bc:00:fd:f8:e0:40:d0:c9:
         46:27:81:04:28:f8:78:c7:bb:63:fc:28:50:f7:99:f4:4b:fd:
         cb:5e:e1:b9:57:e5:14:a5:76:ae:9e:09:a3:df:86:bd:86:77:
         86:44:9f:01:50:3c:20:a8:e8:26:ca:52:72:0b:ce:b4:c0:91:
         01:8a:c0:56:3c:7d:63:6c:db:59:ed:22:33:62:77:4c:0a:34:
         6b:96:a3:c8:ca:1a:31:54:a9:75:5e:e2:e8:41:24:cc:4e:74:
         f9:c6:01:ce:c5:82:68:24:35:79:32:39:17:57:e1:ff:15:15:
         d7:ff:01:f9:2b:d2:ad:94:aa:e9:8e:6e:4e:65:2e:e3:50:93:
         2a:c1:1e:c0:5c:23:e3:5f:a6:7a:16:1d:18:69:fe:92:57:2e:
         ab:4c:30:06:f7:53:81:89:83:42:6d:91:df:28:cc:ba:fa:70:
         da:ff:dd:60:52:48:ca:d6:f8:a8:ef:b4:7c:48:74:26:dd:2c:
         58:b9:c9:fc:cf:de:67:1f:56:82:dd:95:f2:55:01:5e:0b:39:
         6c:f6:1b:c5:71:d5:43:7e:5f:f6:21:e5:c1:94:c2:29:bb:07:
         7a:8d:84:42:91:0c:f7:b4:78:ee:cd:c8:10:26:18:55:9e:06:
         2e:63:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org