Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          hVJRAa/rm8n2AZ93mz3ms1DFA0iNJBG7X7EWTeKG3LY=
Subject key identifier:   C6:AA:89:14:23:C3:EF:A2:7B:20:8F:34:9E:EA:F1:11:52:AD:9F:36
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       33C217CC7AA3D83D4BF7C0F09466610FC2955266
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:36 +0000
ROA not before:           Fri 18 Aug 2023 10:55:36 +0000
ROA not after:            Fri 16 Aug 2024 11:00:36 +0000
asID:                     263347
IP address blocks:        191.37.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c2:17:cc:7a:a3:d8:3d:4b:f7:c0:f0:94:66:61:0f:c2:95:52:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:36 2023 GMT
            Not After : Aug 16 11:00:36 2024 GMT
        Subject: CN=C6AA891423C3EFA27B208F349EEAF11152AD9F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:2d:26:a3:1f:db:c3:da:dc:6f:ce:b1:0c:
                    c0:43:36:0a:d6:ac:c1:d8:21:ee:97:ac:34:4d:d9:
                    2e:c4:b5:1d:7c:d9:3f:d4:58:b9:5f:b7:a5:97:56:
                    83:c6:6d:26:d0:cb:dc:99:b5:b6:37:41:f0:95:24:
                    da:aa:b5:60:4b:76:0f:b0:12:24:e2:bd:15:85:95:
                    db:d2:6f:4e:6f:8b:11:97:89:3a:7d:b2:f8:cf:bd:
                    3e:49:e7:62:37:fd:8c:3e:db:3a:65:25:02:ab:9f:
                    68:a0:59:58:19:21:0d:02:95:bd:54:38:06:f6:c3:
                    97:8a:48:c8:a6:41:32:de:d0:9f:55:62:11:8b:7a:
                    67:48:b6:f7:56:b2:9f:b2:ef:83:87:4a:a1:71:9a:
                    f0:b3:97:bb:39:c2:19:d8:c6:a8:72:b2:2b:0d:d3:
                    59:7b:24:68:23:79:d2:dc:3d:18:60:e5:fb:97:19:
                    12:80:38:a4:7e:c9:9e:d7:82:7a:4a:e4:fb:ba:6d:
                    00:95:8c:65:ce:7d:34:1a:80:82:bb:12:0e:d9:ef:
                    7c:73:24:f0:1e:9c:b1:83:58:cb:17:96:cf:a8:07:
                    14:52:94:5a:9b:ee:c5:f1:36:0f:ee:c9:9b:85:2e:
                    a5:7e:cf:f5:d0:78:12:d1:68:b0:34:ff:36:00:fc:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:89:14:23:C3:EF:A2:7B:20:8F:34:9E:EA:F1:11:52:AD:9F:36
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:87:86:fc:b8:3b:c5:ab:55:89:81:46:d5:c0:8b:1a:70:42:
         ae:b0:da:1e:46:02:1f:81:3a:31:7c:05:6e:df:a4:72:8d:a6:
         24:f0:86:f1:af:5e:7f:4d:ab:2e:98:24:6b:07:c2:3e:36:b9:
         08:43:36:fc:a7:a6:c6:fa:1f:c9:10:25:ae:89:0b:7f:19:4a:
         f9:58:6f:80:60:a9:81:b5:b5:83:bf:b3:6d:4e:46:d0:03:45:
         fe:6e:0e:86:0a:f7:b1:b3:17:22:bc:ee:67:7d:6c:ec:54:ef:
         31:c5:9e:38:8e:44:7a:97:ad:e3:65:14:83:e6:48:38:e2:5f:
         f2:12:c2:a9:65:ec:b5:61:4e:9e:37:63:23:9e:d5:f7:b0:f0:
         37:8d:25:71:7d:a9:9c:3d:d1:a5:a5:e0:b6:10:68:b0:53:e5:
         c5:9b:04:e2:44:c3:71:de:6f:fa:41:f7:88:eb:e7:45:2e:6a:
         cf:c8:24:81:51:e9:90:18:14:1b:c1:99:c0:44:48:b7:8f:88:
         51:56:bf:ed:ee:ff:9e:22:72:82:bc:1f:99:93:ee:0b:30:2a:
         88:64:02:1e:5c:5a:b6:e5:4b:ee:06:6e:17:04:70:91:3f:64:
         9a:49:c8:c3:ef:b0:b1:e3:28:fa:2b:5e:3c:3a:c2:68:1e:b3:
         4c:ee:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org