Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34312e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e34312e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          dT5z2OuouusOD44Osa66sQHrf7QV17Nqb0qft+juj+M=
Subject key identifier:   B5:F9:61:66:50:C9:0E:2D:42:7C:12:76:8D:5D:C8:90:6F:9B:76:1A
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       7A40CCEE80ABB670F8AFD2730D57CE480F47E11F
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34312e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:08 +0000
ROA not before:           Fri 18 Aug 2023 10:55:08 +0000
ROA not after:            Fri 16 Aug 2024 11:00:08 +0000
asID:                     263347
IP address blocks:        191.37.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:cc:ee:80:ab:b6:70:f8:af:d2:73:0d:57:ce:48:0f:47:e1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:08 2023 GMT
            Not After : Aug 16 11:00:08 2024 GMT
        Subject: CN=B5F9616650C90E2D427C12768D5DC8906F9B761A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:80:05:f9:19:c7:d2:aa:cc:12:72:23:75:
                    59:a4:af:6a:b8:38:8d:3e:c0:72:bc:91:fc:12:b7:
                    26:2b:3f:69:38:32:23:d7:4f:04:16:93:25:e4:68:
                    6f:9a:54:59:2f:12:46:05:37:ac:b7:12:3f:f9:d7:
                    42:33:f6:d8:63:b0:60:3f:e8:a8:63:ca:5d:e2:e5:
                    61:a5:33:59:62:a2:df:d1:12:39:7c:52:21:1c:d0:
                    d1:0b:f1:a7:ed:60:36:30:82:af:db:55:a2:89:02:
                    c6:af:8c:83:fe:c0:8e:33:c9:a3:6e:b6:d0:b7:a9:
                    12:5a:4d:ad:ae:0b:e5:4f:5d:bf:b1:69:f4:a3:74:
                    7f:61:8f:6e:e4:2d:f3:2e:e8:15:b6:7d:b2:0b:03:
                    31:ff:bd:18:b3:51:18:12:36:9f:cb:bc:86:bd:0c:
                    d3:75:8d:05:1e:67:18:21:91:5d:d9:96:ef:dc:3a:
                    94:be:1a:82:ad:1d:51:5c:54:e5:5a:04:8e:51:52:
                    32:2a:a0:e4:9e:91:f2:2e:ed:e4:54:e8:c0:d6:37:
                    1b:22:33:e7:8e:87:2d:83:29:88:f0:c0:1c:1a:23:
                    ff:ab:e3:73:2d:f9:c6:5c:67:9c:e7:40:70:57:e5:
                    71:cc:73:c3:d6:45:67:85:b7:72:b4:bd:34:d1:08:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:61:66:50:C9:0E:2D:42:7C:12:76:8D:5D:C8:90:6F:9B:76:1A
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34312e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:8a:4b:39:32:13:09:68:5c:d2:ae:be:39:60:2a:65:2d:
         95:05:fc:56:3b:6e:3d:36:82:36:11:d3:7c:08:43:fd:eb:7d:
         9c:0d:87:7d:22:94:01:8a:91:19:f6:41:fa:0d:4f:30:94:b6:
         f3:89:96:cd:9b:f3:a5:b5:83:02:3b:e5:87:4b:8d:8e:ae:71:
         5e:20:d7:b4:e5:2a:d4:58:dc:78:cb:2a:52:2f:89:c4:db:46:
         3f:d4:52:d5:33:81:a6:c1:f7:b4:37:3e:e3:59:1f:06:37:29:
         82:55:9c:09:9b:c7:91:d1:fd:7b:24:f5:a7:b1:fe:9a:dc:41:
         78:53:8e:20:33:5d:84:89:14:cb:24:30:77:58:d0:66:71:e4:
         fd:13:06:07:65:11:15:37:48:d8:b0:48:1e:e9:15:25:b7:b7:
         f0:c9:4c:0f:be:05:25:bc:29:8e:05:fc:65:a4:1e:4a:06:8e:
         62:fc:fb:ce:66:c1:0d:e2:28:0d:33:7a:54:81:31:a9:35:ef:
         46:a4:eb:7d:58:13:8f:80:b7:0e:da:89:b8:98:24:bc:fc:21:
         fb:60:ba:69:9d:47:eb:d0:36:75:d1:92:5a:cf:d2:6b:4e:b1:
         68:f3:17:7c:7e:67:0a:b7:37:4c:90:2b:a6:55:00:30:65:82:
         a5:dc:53:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUekDM7oCrtnD4r9JzDVfOSA9H4R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA4MTgxMDU1MDhaFw0yNDA4MTYxMTAwMDhaMDMxMTAvBgNV
BAMTKEI1Rjk2MTY2NTBDOTBFMkQ0MjdDMTI3NjhENURDODkwNkY5Qjc2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uoAF+RnH0qrMEnIjdVmkr2q4
OI0+wHK8kfwStyYrP2k4MiPXTwQWkyXkaG+aVFkvEkYFN6y3Ej/510Iz9thjsGA/
6Khjyl3i5WGlM1liot/REjl8UiEc0NEL8aftYDYwgq/bVaKJAsavjIP+wI4zyaNu
ttC3qRJaTa2uC+VPXb+xafSjdH9hj27kLfMu6BW2fbILAzH/vRizURgSNp/LvIa9
DNN1jQUeZxghkV3Zlu/cOpS+GoKtHVFcVOVaBI5RUjIqoOSekfIu7eRU6MDWNxsi
M+eOhy2DKYjwwBwaI/+r43Mt+cZcZ5znQHBX5XHMc8PWRWeFt3K0vTTRCBtzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtflhZlDJDi1CfBJ2jV3IkG+bdhowHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvyUpMA0GCSqGSIb3DQEBCwUAA4IBAQCuGopLOTIT
CWhc0q6+OWAqZS2VBfxWO249NoI2EdN8CEP9632cDYd9IpQBipEZ9kH6DU8wlLbz
iZbNm/OltYMCO+WHS42OrnFeINe05SrUWNx4yypSL4nE20Y/1FLVM4Gmwfe0Nz7j
WR8GNymCVZwJm8eR0f17JPWnsf6a3EF4U44gM12EiRTLJDB3WNBmceT9EwYHZREV
N0jYsEge6RUlt7fwyUwPvgUlvCmOBfxlpB5KBo5i/PvOZsEN4igNM3pUgTGpNe9G
pOt9WBOPgLcO2om4mCS8/CH7YLppnUfr0DZ10ZJaz9JrTrFo8xd8fmcKtzdMkCum
VQAwZYKl3FOx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org