Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          3BQ+yU+j2jHYv8xbdFdlGZYRL7W6zOqlOs/fg4W3Lxs=
Subject key identifier:   65:A1:FD:ED:8D:10:3F:7A:1F:15:3A:EF:4F:98:B7:7A:A1:96:AF:87
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       25C64B69BFD9606D19A3070B91775B2A3F12B181
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:31 +0000
ROA not before:           Fri 18 Aug 2023 10:55:31 +0000
ROA not after:            Fri 16 Aug 2024 11:00:31 +0000
asID:                     263347
IP address blocks:        191.37.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:4b:69:bf:d9:60:6d:19:a3:07:0b:91:77:5b:2a:3f:12:b1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:31 2023 GMT
            Not After : Aug 16 11:00:31 2024 GMT
        Subject: CN=65A1FDED8D103F7A1F153AEF4F98B77AA196AF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:2b:a4:53:f9:7f:a8:2c:39:88:d2:c4:79:
                    37:b2:1a:26:5c:b9:98:7e:37:f6:d1:3a:90:76:6c:
                    ba:ff:28:14:1a:bd:63:48:46:d8:7b:51:0c:08:bb:
                    57:a0:dc:40:ca:cc:c1:e7:d7:01:ab:65:af:6a:ed:
                    3c:b2:80:01:d9:df:c6:25:86:f4:41:c2:cd:42:f3:
                    0e:c8:67:5c:05:b4:1b:b4:d7:7e:c2:18:83:8c:35:
                    8e:5b:bf:83:48:65:db:b3:73:67:91:15:9b:17:d3:
                    98:64:47:39:23:6b:53:84:22:77:7f:42:e3:52:b2:
                    fb:64:07:b6:6c:e1:36:4e:cf:c7:9d:9c:95:82:d9:
                    6a:ad:10:76:22:16:27:0d:d7:30:7d:78:89:e4:4c:
                    dc:fb:28:e0:d5:74:aa:17:27:95:0b:e0:02:87:be:
                    c0:27:5e:d2:a8:65:58:78:fa:3e:48:f5:b0:8f:d4:
                    66:33:bc:eb:4b:2c:32:63:f6:8d:e9:fb:87:74:07:
                    3b:dc:be:2d:e2:66:9a:1c:1d:a5:56:23:59:6c:f7:
                    af:0b:75:ec:7d:3a:8d:5e:52:d0:93:94:8f:f6:3c:
                    12:f0:1f:89:01:7d:49:a8:de:55:f8:7f:ac:4f:69:
                    21:be:a7:9a:78:c9:ba:1c:44:3c:34:dd:01:e2:1d:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:FD:ED:8D:10:3F:7A:1F:15:3A:EF:4F:98:B7:7A:A1:96:AF:87
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:f6:fa:9c:58:90:68:e1:51:a5:3b:79:f8:d7:bf:9b:88:
         87:d3:6d:27:3c:50:54:7e:3b:1d:d8:db:8a:a7:52:95:d7:34:
         9c:f9:91:4b:fe:84:e4:94:1d:b3:c4:9f:54:98:b6:e8:47:25:
         6d:a0:cb:2c:7f:42:dc:95:97:a1:4d:ad:b3:c2:83:55:1d:98:
         6a:68:7f:2f:b0:3c:ee:f8:c5:53:3a:1b:93:14:6b:f5:64:6f:
         9c:fa:34:e9:91:e6:75:39:7d:a1:bd:46:b0:02:bc:6c:95:d5:
         6b:c2:7c:13:ff:7b:93:69:0b:05:8f:ea:94:7c:c8:f4:70:ac:
         15:ca:21:d0:de:f3:03:6b:34:70:f6:5e:6f:f4:15:6d:37:6b:
         f2:c8:51:cb:9c:13:69:6e:cc:47:ab:9a:fd:26:20:6b:a2:14:
         7c:e5:4a:55:76:a4:f5:38:7b:24:4a:96:46:d4:ed:83:d7:92:
         94:e4:26:40:07:02:83:bb:cb:c0:ec:82:f6:2a:b9:33:5f:4e:
         a3:49:b7:bd:1f:cb:7f:21:6b:45:98:c5:6b:a6:00:d4:0a:4e:
         6d:5e:56:f6:f1:df:c5:a3:14:15:db:21:3b:1b:ce:04:8c:e8:
         1f:ec:59:29:b4:6d:45:1f:ac:27:65:9d:25:c9:16:aa:91:04:
         cf:25:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org