Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e34352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          N+4ZGyr+tTkD1lnMaKYwXZwlPEeTdKxQ9ct2ATCIACE=
Subject key identifier:   C0:36:8F:98:CC:60:34:AF:23:5D:BE:CF:DB:93:F7:AA:B7:DD:B7:74
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       01AE57FDAC4D4AEBC407A89C05D939459EC05E4B
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34352e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:04:04 +0000
ROA not before:           Tue 20 Jun 2023 00:59:04 +0000
ROA not after:            Tue 18 Jun 2024 01:04:04 +0000
asID:                     263347
IP address blocks:        191.37.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ae:57:fd:ac:4d:4a:eb:c4:07:a8:9c:05:d9:39:45:9e:c0:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:59:04 2023 GMT
            Not After : Jun 18 01:04:04 2024 GMT
        Subject: CN=C0368F98CC6034AF235DBECFDB93F7AAB7DDB774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:f3:27:7f:84:70:8d:97:f9:ea:24:f7:d9:
                    f3:8f:ff:60:ca:dd:51:35:bb:00:60:61:89:89:77:
                    98:4f:fe:b8:47:7e:42:f0:93:3f:30:a9:f1:8f:7b:
                    61:ac:15:1e:9c:e0:be:a4:0f:e3:52:95:3a:ad:99:
                    71:db:b6:6b:f2:84:3f:45:36:44:f5:bf:c4:12:41:
                    60:f0:4f:17:5c:db:36:8c:92:c8:69:3f:30:b6:30:
                    1d:2d:76:94:00:74:01:e6:c7:70:8e:b1:fd:62:39:
                    17:ae:16:78:e8:9f:0b:ad:a1:15:c0:c3:b3:9f:c5:
                    3b:e3:fd:cc:ab:2d:34:97:8b:f6:b2:f5:2a:67:9e:
                    68:ff:7d:8d:f3:5a:07:0d:58:6d:a6:8f:7a:2a:62:
                    cf:76:c4:6a:c7:18:c9:d5:8a:90:ec:96:22:4b:2e:
                    ee:09:1e:13:e1:2d:24:f5:72:5b:e3:04:e7:aa:c6:
                    d9:9a:45:f5:68:c6:73:86:45:ed:b5:be:41:ce:b4:
                    89:cc:40:89:28:78:d4:68:e4:21:c8:9c:21:02:a3:
                    ab:cb:38:f3:02:8a:c5:35:e4:7a:d1:a0:3c:74:d5:
                    71:d7:14:c6:2c:db:25:64:77:77:0f:26:a0:fd:80:
                    55:b0:4c:63:11:3d:e2:87:08:66:ce:61:18:b8:87:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:8F:98:CC:60:34:AF:23:5D:BE:CF:DB:93:F7:AA:B7:DD:B7:74
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:0f:43:0d:94:fb:bf:b9:3a:cb:c0:15:69:56:fe:4d:aa:
         c2:74:a4:38:92:5a:e8:cf:30:a6:80:04:0f:41:59:d9:52:f3:
         fe:a3:e1:4e:43:59:39:b0:09:28:9b:e3:cb:fc:29:7e:6c:eb:
         34:bf:32:ff:d1:ad:a1:77:b2:40:4e:b4:28:68:30:64:5b:05:
         d8:b2:ea:a1:46:bb:6a:05:8a:ae:13:a0:42:51:e5:4c:e6:9a:
         aa:b9:98:d5:5c:e0:ff:77:76:5a:c9:70:ba:09:55:db:e8:7f:
         c6:6c:a0:31:f7:a3:f9:32:82:7f:96:cd:53:ff:ce:33:ef:ae:
         71:dd:a9:7a:0a:c8:22:49:c7:06:b9:d4:c7:f9:ea:8d:ca:4a:
         00:9a:6a:ce:9b:a5:8b:f2:c6:49:e8:93:b6:71:b9:5b:1c:52:
         0e:0c:57:49:db:2c:58:2d:39:5b:6b:41:d4:77:22:08:af:8b:
         d7:7a:72:87:f6:54:78:6a:69:cf:6c:5a:0c:bf:74:a3:41:4c:
         df:6d:ca:a2:a8:84:d6:86:4f:23:5b:41:5a:c5:bd:f0:de:6b:
         34:6a:e8:f5:6e:14:ea:72:62:e1:83:fc:61:0a:b1:f2:2c:37:
         a5:86:8d:53:78:f8:87:14:29:87:96:d8:81:8b:81:f6:71:0a:
         32:89:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org