Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e34342e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          biFUGYKFRACTdasZ7SHb/As4PSK8+KXHoPB4Uq7oHlI=
Subject key identifier:   AC:29:EA:91:B5:24:E1:E6:0B:00:E8:BF:6C:A7:5B:46:12:61:89:B4
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       79808F6B177B838D769D98629447E8527755114B
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:03:47 +0000
ROA not before:           Tue 20 Jun 2023 00:58:47 +0000
ROA not after:            Tue 18 Jun 2024 01:03:47 +0000
asID:                     263347
IP address blocks:        191.37.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:80:8f:6b:17:7b:83:8d:76:9d:98:62:94:47:e8:52:77:55:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:58:47 2023 GMT
            Not After : Jun 18 01:03:47 2024 GMT
        Subject: CN=AC29EA91B524E1E60B00E8BF6CA75B46126189B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:1b:69:d6:7d:0e:00:df:ae:e8:05:68:48:
                    91:ba:6b:78:0d:62:9a:95:e6:af:05:15:7e:e7:86:
                    31:8b:b4:bd:eb:fc:ae:6b:02:7f:86:9d:df:ce:bb:
                    a6:33:94:28:34:a3:a5:cc:7b:61:a6:88:1a:8d:f0:
                    5a:32:a8:72:2d:ab:0b:0d:1d:9f:e6:2e:99:04:c1:
                    0a:78:93:ed:9b:41:96:0b:9c:f1:1d:38:6b:2e:9b:
                    4d:96:5a:ab:b1:cf:8a:ea:79:11:e8:79:58:72:f8:
                    db:c1:04:89:51:61:cb:8f:28:97:a1:65:09:32:d2:
                    7f:bf:66:d7:71:83:f3:37:3f:f3:a8:57:75:03:d6:
                    5c:f9:8f:84:4c:96:c3:a9:bd:57:79:94:d6:ef:18:
                    4e:c2:12:58:6d:4a:9c:ec:bd:5b:5b:a0:00:3e:0d:
                    00:37:75:bb:d3:f5:0b:4d:66:6b:e8:ef:f4:72:35:
                    ab:1e:e7:cc:7f:59:e6:b6:4d:dd:c2:23:af:3a:e1:
                    a7:31:a0:da:4a:b7:01:bd:47:d9:fe:55:3e:cb:61:
                    e6:61:d3:ef:2e:a6:17:d6:5e:06:f8:86:a9:7f:03:
                    29:62:ec:d6:02:3a:98:ab:97:9f:0f:6f:37:f7:64:
                    2b:4a:88:78:92:7b:29:5a:b4:ab:66:0c:a4:6c:3a:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:29:EA:91:B5:24:E1:E6:0B:00:E8:BF:6C:A7:5B:46:12:61:89:B4
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34342e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:17:68:89:ac:ef:fb:46:5a:53:84:86:ea:93:51:40:cb:07:
         7f:19:de:98:09:f7:01:34:9b:8c:ca:7e:70:93:83:1e:71:37:
         76:62:95:93:82:92:68:7f:5e:8c:44:0e:60:75:b5:a7:9f:19:
         fb:69:c3:35:0c:d6:eb:53:6b:81:23:9b:3d:59:e8:ea:28:ac:
         a0:57:f4:a2:e9:17:d4:d5:30:a5:90:4b:29:3e:1b:7e:4e:d0:
         04:d0:f4:eb:2b:04:9c:5d:f5:09:84:3f:8a:e1:e0:13:bb:52:
         8a:d1:13:fe:54:b2:d9:82:ee:2c:c5:e2:22:08:4c:55:13:a6:
         3f:36:3e:49:1c:f1:43:b7:d3:d2:c4:72:c7:d1:8b:e7:b7:37:
         85:a9:33:fe:b6:d2:e5:99:35:d0:93:a1:59:f6:3f:9c:45:ff:
         9a:e0:80:a3:8f:2c:b4:1e:88:00:53:92:81:c4:e9:5c:ca:1b:
         d9:a5:78:cc:33:9c:a7:1d:a4:4f:ee:25:2a:82:fe:91:6f:b6:
         bd:be:43:f8:6d:a6:cc:e5:f7:43:3b:de:67:38:73:3b:59:ba:
         a6:95:07:c1:8c:ea:fa:0a:58:83:1d:87:b0:93:a4:05:6d:ca:
         c3:11:d1:31:08:3e:e6:a2:4a:eb:74:f6:e0:d7:d8:15:90:61:
         fe:62:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org