Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          ygpaeKmy+3sLmuTcoSSrfQGmtnSiaRtOQug4taaUXp8=
Subject key identifier:   41:B6:50:4B:21:BC:B7:0B:D3:82:C2:FB:89:DB:CF:6F:93:4A:5F:DC
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       2350539CA86C2C5F41A40F9B450A8844F78D3C1A
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:26 +0000
ROA not before:           Fri 18 Aug 2023 10:55:26 +0000
ROA not after:            Fri 16 Aug 2024 11:00:26 +0000
asID:                     263347
IP address blocks:        191.37.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:50:53:9c:a8:6c:2c:5f:41:a4:0f:9b:45:0a:88:44:f7:8d:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:26 2023 GMT
            Not After : Aug 16 11:00:26 2024 GMT
        Subject: CN=41B6504B21BCB70BD382C2FB89DBCF6F934A5FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:84:77:d6:75:47:bb:86:dc:8f:40:90:ba:
                    44:dc:f4:e4:7e:bc:30:17:00:c0:6b:a8:c2:fc:34:
                    c2:85:51:70:44:d7:43:e6:83:87:b8:4f:f9:2d:80:
                    12:2a:7c:35:6a:0d:15:22:30:ae:be:aa:ee:60:a3:
                    d2:92:db:29:c7:5e:ff:55:ae:9e:62:82:f7:42:cf:
                    8d:12:bb:61:c9:c1:02:8d:79:5d:38:f6:49:98:05:
                    aa:6d:8c:d8:fe:65:d5:29:4e:c7:10:e1:f9:cf:5d:
                    d2:93:52:af:a5:92:1d:95:69:5d:2c:9b:00:62:23:
                    a6:a4:24:d6:e2:4f:f1:29:e5:4d:85:dc:d1:7d:33:
                    76:a4:90:c1:5b:17:65:6d:f3:23:fd:10:ae:c1:89:
                    cb:45:3c:19:f3:52:88:30:26:81:11:c5:ac:6a:ca:
                    43:16:bf:cb:f1:d9:37:d3:35:cc:42:78:b8:15:45:
                    da:d8:2f:81:17:0d:8f:da:f0:ff:c7:59:28:a5:13:
                    05:a7:c4:bd:87:14:68:c9:da:91:98:6b:a1:f6:f6:
                    a5:37:ad:c5:5b:fc:3d:43:8c:89:70:ed:1b:e9:bd:
                    81:01:97:d0:21:7c:9e:a2:e2:e2:3b:c7:b7:18:e0:
                    ae:44:bc:55:c2:03:83:32:55:0a:21:09:e2:0f:0b:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B6:50:4B:21:BC:B7:0B:D3:82:C2:FB:89:DB:CF:6F:93:4A:5F:DC
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35362e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:28:4e:d1:e6:02:50:1c:aa:8e:82:6b:ed:9f:0f:6c:69:
         b9:dd:8f:2e:50:fd:2e:5e:5d:f3:98:38:78:2b:b5:bf:d8:fa:
         74:e6:be:19:70:97:d9:f7:2e:71:28:45:7a:8a:a5:7d:b9:98:
         95:db:a4:dc:5d:e0:7c:66:ad:a0:89:62:19:98:9c:3d:bb:44:
         c2:ec:c6:a0:b9:cb:9e:c1:28:8a:c1:ed:68:e1:9b:37:7a:42:
         76:df:9e:b0:43:ee:72:44:0a:6a:be:f8:13:c2:ff:e4:63:88:
         0b:a6:a0:29:80:09:07:19:c3:79:a4:c6:0b:64:6b:43:df:c0:
         95:63:21:5d:8f:e6:5c:d8:2b:58:32:d3:61:43:78:2b:8a:92:
         52:1d:a0:1e:59:31:46:6b:9e:a7:a3:a1:95:bf:bb:ca:33:96:
         5b:7a:73:a1:26:12:11:04:99:ba:3c:66:e3:18:6f:b8:e6:3f:
         e6:f9:48:be:47:1e:44:f2:aa:11:e9:10:ba:bb:0c:48:3f:ea:
         93:4e:32:37:b9:7e:d0:27:d8:54:03:d9:0e:5b:ab:84:e5:00:
         14:32:24:7c:92:2e:d5:fa:d5:84:b7:9b:63:20:b1:c3:00:b8:
         40:5c:2e:31:27:6b:a7:fc:28:e4:99:fe:6c:2e:cd:96:49:ca:
         d8:9b:9e:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI1BTnKhsLF9BpA+bRQqIRPeNPBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA4MTgxMDU1MjZaFw0yNDA4MTYxMTAwMjZaMDMxMTAvBgNV
BAMTKDQxQjY1MDRCMjFCQ0I3MEJEMzgyQzJGQjg5REJDRjZGOTM0QTVGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoYR31nVHu4bcj0CQukTc9OR+
vDAXAMBrqML8NMKFUXBE10Pmg4e4T/ktgBIqfDVqDRUiMK6+qu5go9KS2ynHXv9V
rp5igvdCz40Su2HJwQKNeV049kmYBaptjNj+ZdUpTscQ4fnPXdKTUq+lkh2VaV0s
mwBiI6akJNbiT/Ep5U2F3NF9M3akkMFbF2Vt8yP9EK7BictFPBnzUogwJoERxaxq
ykMWv8vx2TfTNcxCeLgVRdrYL4EXDY/a8P/HWSilEwWnxL2HFGjJ2pGYa6H29qU3
rcVb/D1DjIlw7RvpvYEBl9AhfJ6i4uI7x7cY4K5EvFXCA4MyVQohCeIPCxAdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQbZQSyG8twvTgsL7idvPb5NKX9wwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyU4MA0GCSqGSIb3DQEBCwUAA4IBAQAxoChO0eYC
UByqjoJr7Z8PbGm53Y8uUP0uXl3zmDh4K7W/2Pp05r4ZcJfZ9y5xKEV6iqV9uZiV
26TcXeB8Zq2giWIZmJw9u0TC7MagucuewSiKwe1o4Zs3ekJ2356wQ+5yRApqvvgT
wv/kY4gLpqApgAkHGcN5pMYLZGtD38CVYyFdj+Zc2CtYMtNhQ3gripJSHaAeWTFG
a56no6GVv7vKM5ZbenOhJhIRBJm6PGbjGG+45j/m+Ui+Rx5E8qoR6RC6uwxIP+qT
TjI3uX7QJ9hUA9kOW6uE5QAUMiR8ki7V+tWEt5tjILHDALhAXC4xJ2un/Cjkmf5s
Ls2WScrYm56x
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org