Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          ik4Orx+RHPzYCi5a99jgqKpIW3ncIkQ3OO8vKbf2GN4=
Subject key identifier:   90:02:F7:4F:30:36:4A:71:DE:73:CE:4D:35:93:37:39:B1:A8:DC:3C
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       7D67DF0AF2E7E02C4FF563D29BF1C983A2CE0D93
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:34 +0000
ROA not before:           Fri 18 Aug 2023 10:55:34 +0000
ROA not after:            Fri 16 Aug 2024 11:00:34 +0000
asID:                     263347
IP address blocks:        191.37.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:df:0a:f2:e7:e0:2c:4f:f5:63:d2:9b:f1:c9:83:a2:ce:0d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:34 2023 GMT
            Not After : Aug 16 11:00:34 2024 GMT
        Subject: CN=9002F74F30364A71DE73CE4D35933739B1A8DC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:4b:f2:0a:78:9c:50:26:c2:93:a6:6b:2e:
                    d0:c7:44:3f:8d:47:5e:af:4d:1d:81:b0:5f:27:73:
                    94:1c:d9:b5:16:0e:3d:19:79:3b:f8:50:75:10:76:
                    95:7b:66:77:13:bb:16:ca:ba:49:89:e7:23:25:55:
                    85:51:e4:65:17:d5:79:26:a4:0f:63:fb:31:e7:9f:
                    52:43:f8:1b:a8:73:36:c3:86:ea:8e:77:ab:03:a3:
                    52:ac:d8:02:f4:81:06:ca:28:0c:56:c4:6f:8b:99:
                    e2:65:6f:41:aa:c7:5e:b3:80:76:9b:2b:bc:ff:af:
                    d0:5c:b0:63:ed:52:a7:2c:86:08:6f:04:2a:34:7f:
                    72:c2:f1:39:7c:7d:3f:82:30:d6:59:e3:c3:04:86:
                    a0:58:bd:27:c9:a5:2f:26:ac:e8:2b:a7:d2:ae:07:
                    b5:51:26:db:0f:cb:04:5a:da:42:65:18:97:e5:ae:
                    4a:4c:6a:f7:a8:cc:32:23:1a:77:bb:d0:7d:94:2b:
                    7a:ec:df:53:ce:87:eb:45:7f:52:53:8a:1b:e1:9d:
                    8a:a8:11:aa:7d:cd:1f:77:84:a2:8e:d5:fd:d1:6b:
                    b9:f6:73:41:d7:66:2c:12:50:4d:60:4d:4a:65:ff:
                    54:e8:dc:29:d1:26:e6:4a:07:f5:f7:42:30:5c:6e:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:F7:4F:30:36:4A:71:DE:73:CE:4D:35:93:37:39:B1:A8:DC:3C
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e34382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:5c:7f:85:c3:dc:3c:c4:cc:33:17:f9:2c:29:f0:4d:a2:
         d8:a6:92:09:ca:db:b5:b2:3a:c3:3f:a8:b9:e4:35:e9:09:c8:
         fe:56:41:09:df:a9:cb:0c:35:b9:ad:c2:b7:34:ff:68:95:61:
         a3:1f:3d:69:23:99:1d:0d:86:46:42:13:10:30:02:c5:26:31:
         9e:b0:77:fe:ee:cd:30:cf:82:77:06:b3:aa:00:c1:0e:39:b6:
         9b:32:b7:18:1a:a3:ad:f2:db:4f:47:24:fc:85:42:be:65:4e:
         c6:ad:b8:90:7d:ec:ee:22:ec:0e:c4:ed:6b:b4:52:39:46:7e:
         16:1d:65:30:a3:88:6f:18:6c:7c:03:13:e4:4b:08:17:b3:3c:
         43:98:2e:af:8c:02:af:24:3d:0a:b8:87:c2:49:0a:8e:3a:1e:
         93:9b:b9:09:3e:76:9e:de:a5:7e:5c:9a:4a:56:d8:ec:45:8b:
         ea:68:3f:4e:af:be:af:87:d1:9f:98:6b:11:56:6e:81:d5:cf:
         fa:b1:3b:24:eb:73:99:35:01:64:5c:7f:03:87:d2:52:b6:f3:
         55:f1:27:74:3e:48:ec:4b:c9:de:bf:d2:07:f0:67:df:1c:4a:
         a3:60:5a:69:5b:3d:9e:d9:fc:c3:4e:74:2a:3c:3a:e9:80:eb:
         fe:0e:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org